hxxps://nmr6712t[.]r[.]sa-east-1[.]awstrack[.]me/L0/https[:]/team-task[.]framer[.]media/continue/1/010301a135cd9b47-0ca3a1a2-0bba-4725-9249-c4978f5d2f04-000000/4cduyy3GCoMhw5btcT6OCgogvZw=258

Analysis

user interaction
yes
max time kernel
1199s
max time network
1186s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 00:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://nmr6712t.r.sa-east-1.awstrack.me/L0/https:/team-task.framer.media/continue/1/010301a135cd9b47-0ca3a1a2-0bba-4725-9249-c4978f5d2f04-000000/4cduyy3GCoMhw5btcT6OCgogvZw=258
Sample261014-are7vsdv41

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5884	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{67D0306E-C894-43D7-8567-3F7106A8FA51}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3976 wrote to memory of 5808	3976	msedge.exe	84
PID 3976 wrote to memory of 5884	3976	msedge.exe	85
PID 3976 wrote to memory of 5796	3976	msedge.exe	87
PID 3976 wrote to memory of 5796	3976	msedge.exe	87
PID 3976 wrote to memory of 1224	3976	msedge.exe	86
PID 3976 wrote to memory of 1224	3976	msedge.exe	86
PID 3976 wrote to memory of 1224	3976	msedge.exe	86
PID 3976 wrote to memory of 5280	3976	msedge.exe	88
PID 3976 wrote to memory of 5280	3976	msedge.exe	88
PID 3976 wrote to memory of 5280	3976	msedge.exe	88
PID 3976 wrote to memory of 5820	3976	msedge.exe	89
PID 3976 wrote to memory of 5820	3976	msedge.exe	89
PID 3976 wrote to memory of 5820	3976	msedge.exe	89
PID 3976 wrote to memory of 5984	3976	msedge.exe	97
PID 3976 wrote to memory of 5984	3976	msedge.exe	97
PID 3976 wrote to memory of 5984	3976	msedge.exe	97
PID 3976 wrote to memory of 3672	3976	msedge.exe	101
PID 3976 wrote to memory of 3672	3976	msedge.exe	101
PID 3976 wrote to memory of 3672	3976	msedge.exe	101
PID 3976 wrote to memory of 688	3976	msedge.exe	104
PID 3976 wrote to memory of 688	3976	msedge.exe	104
PID 3976 wrote to memory of 5740	3976	msedge.exe	103
PID 3976 wrote to memory of 5740	3976	msedge.exe	103
PID 3976 wrote to memory of 3600	3976	msedge.exe	106
PID 3976 wrote to memory of 3904	3976	msedge.exe	117
PID 3976 wrote to memory of 5412	3976	msedge.exe	118
PID 3976 wrote to memory of 4112	3976	msedge.exe	119
PID 3976 wrote to memory of 3404	3976	msedge.exe	122
PID 3976 wrote to memory of 3404	3976	msedge.exe	122
PID 3976 wrote to memory of 5188	3976	msedge.exe	126
PID 3976 wrote to memory of 5188	3976	msedge.exe	126
PID 3976 wrote to memory of 5188	3976	msedge.exe	126
PID 3976 wrote to memory of 3076	3976	msedge.exe	128
PID 3976 wrote to memory of 5856	3976	msedge.exe	129
PID 3976 wrote to memory of 5856	3976	msedge.exe	129
PID 3976 wrote to memory of 5856	3976	msedge.exe	129
PID 3976 wrote to memory of 3288	3976	msedge.exe	130
PID 3976 wrote to memory of 3288	3976	msedge.exe	130
PID 3976 wrote to memory of 3288	3976	msedge.exe	130
PID 3976 wrote to memory of 4940	3976	msedge.exe	131
PID 3976 wrote to memory of 4940	3976	msedge.exe	131
PID 3976 wrote to memory of 5544	3976	msedge.exe	132
PID 3976 wrote to memory of 5544	3976	msedge.exe	132
PID 3976 wrote to memory of 4944	3976	msedge.exe	133
PID 3976 wrote to memory of 4944	3976	msedge.exe	133
PID 3976 wrote to memory of 948	3976	msedge.exe	141
PID 3976 wrote to memory of 948	3976	msedge.exe	141
PID 3976 wrote to memory of 1472	3976	msedge.exe	143
PID 3976 wrote to memory of 4576	3976	msedge.exe	144
PID 3976 wrote to memory of 4576	3976	msedge.exe	144
PID 3976 wrote to memory of 4576	3976	msedge.exe	144
PID 3976 wrote to memory of 5248	3976	msedge.exe	145
PID 3976 wrote to memory of 5248	3976	msedge.exe	145
PID 3976 wrote to memory of 5620	3976	msedge.exe	146
PID 3976 wrote to memory of 5620	3976	msedge.exe	146
PID 3976 wrote to memory of 5620	3976	msedge.exe	146
PID 3976 wrote to memory of 4116	3976	msedge.exe	147
PID 3976 wrote to memory of 4116	3976	msedge.exe	147
PID 3976 wrote to memory of 4700	3976	msedge.exe	148
PID 3976 wrote to memory of 4700	3976	msedge.exe	148
PID 3976 wrote to memory of 5916	3976	msedge.exe	149
PID 3976 wrote to memory of 5916	3976	msedge.exe	149
PID 3976 wrote to memory of 6136	3976	msedge.exe	150
PID 3976 wrote to memory of 6136	3976	msedge.exe	150

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://nmr6712t.r.sa-east-1.awstrack.me/L0/https:/team-task.framer.media/continue/1/010301a135cd9b47-0ca3a1a2-0bba-4725-9249-c4978f5d2f04-000000/4cduyy3GCoMhw5btcT6OCgogvZw=258
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7fff12a3c188,0x7fff12a3c194,0x7fff12a3c1a0
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,2022963248317334486,2833602553403205346,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,8866312221942500391,15140847795277875531,262144 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,9837099003697032559,13522738713382945550,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,13269548066724193865,4810909915088642699,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,14465686590954339191,13180164366244458221,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5056,i,10208047484372731953,11281654097051753601,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3588,i,7973797343542071206,16012699090091247319,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,8760700238469031757,2940589934054227841,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,15931925463957669739,15581634303006323406,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,2537535906414806880,16970233624150934866,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,2537535906414806880,16970233624150934866,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=128,i,5539210415609223334,13159728746297182060,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,8659017884376456692,9338980090732385169,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,7801350313906758496,7403780195145329156,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,6492491113578096356,11835443583056594170,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6080,i,11104775599456709071,9294701237367500572,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6544,i,5488595612905349456,16539928970151833505,262144 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6516,i,11433130879392563447,2323540458302119373,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6452,i,16470596921932302441,12562076024700340048,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,16389975684152963310,5247654346748062817,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,16538807000696576956,552550145865908054,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:8
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2884,i,8194844101483083600,4402000804585739372,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,13368066911775057853,13205738577146490279,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,17977587572116301944,1216754687418212202,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=1308 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,17977587572116301944,1216754687418212202,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=1308 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6760,i,496145369309963938,152243039630605033,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,12773237301624518952,13515113661734746172,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:8
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7204,i,14758236835522242472,2621886904484802970,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,16254141806756253362,4172891171719197738,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7172,i,14122315454321809216,15169956543768331197,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7388,i,17267162526941465760,16738241001303617346,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:8
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,16158284191028918826,10836412794030648997,524288 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7720 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7192,i,17109466308430206682,2849401080703710592,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4912,i,9435359725529746674,4308993063507899806,2097152 --field-trial-handle=2332,i,10296054401331863667,10907571831209177051,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:1
  2⤵
  PID:5848

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13f587b4-fc68-4c2e-a36a-7a77fdbc7761.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13f587b4-fc68-4c2e-a36a-7a77fdbc7761.tmp
Size 26KB
SHA256 07eebf2718becb4a65fa780a8d2c997cc04ebea773d7ca1792211fcfb4c7dab0
MD5 7beef038032bfc8e3b28f1452c036ca2
SHA1 0f80e5f6d3e931302c5f409251bf6eb3198181fe
SHA512 461f67f6a5ae467385457228bffd5d938e8b51ec7b30d0b0471af1e47d35f672b4759313fdf4acb44e80c199b6dbd3006d98a0806749ea8bd92e79f6e10c2a41
SSDEEP 384:nvMiFiZcIh3sNl8TUNTUlI4wD5mgmyUOTK2fMBOHLtuVnpU5PJAxJdChugL/7Iza:v3FQh3UwgQqsBOHLt15PkJdC1
TLSH
T1A7C24C32ECA4DABBEDEB8F95B64A3A03DEE04163D6CC5AC4D9D95D1C009719D070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2fa68762-a560-4513-8bbc-783c626dcc4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2fa68762-a560-4513-8bbc-783c626dcc4d.tmp
Size 25KB
SHA256 c80698ad27c49fdac6b5c82ca6f876ebd557f0415c0fd530d0dfb46451304469
MD5 0106b295e1765db07e5b7878d58630a9
SHA1 9b84833986626f4b50fda56350cef657b2d6346e
SHA512 46d64f2499a1614bd81cf7b90b4ee55ee39809bedadf4fa0e91df9496180dc17dad47d3209d76543f18245a1a7257abe2fce9235925dd12efc8be91148198fed
SSDEEP 384:n0MiFiZcI63sNw8TUNTUlIm25mg58nK2fMBOHLtuVnoi7O6R2FeoxgL/7IzKoG:03FQ63RwgSzQBOHLtRi7TRVl
TLSH
T126C24B32EC94C9BBEDEB8F9AA74A7A07DEF00163959C85C0D9D85E1D009759D0707C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f12cb9f-5782-473d-b5af-a0a414ef2e8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5f12cb9f-5782-473d-b5af-a0a414ef2e8a.tmp
Size 31KB
SHA256 55ee1c3be3ffdf1b6fce62d4b3186c2481b7753990c5a78b3c6a45f22cc24c4d
MD5 b798b94b163fec4e254f62819fef2ffb
SHA1 4e14062ff3ae53b04180287dae7ffbac8831603d
SHA512 af43ba68e5a1db95d32e17af98859e6b284c748bfce3e6be7e08bef55512cc3a218cd4751ee13e7462212f79251e8971d7078e1c73f13422fec2360378942483
SSDEEP 384:nGiFiZcIzv3sNl8TUNTUlI4wD5mgmUUyTK2fMBOHLtuVnpx5PJAxJdChugL/7Iza:tFQT3UwgQEsBOHLtK5PkJdC1
TLSH
T106E2D5F298D79977E89E4B97637E2D0299FCC123B1884584B7C85D1CCC961BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66b2ee7e-a147-445a-861e-567642feec14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66b2ee7e-a147-445a-861e-567642feec14.tmp
Size 392B
SHA256 b8cb96f8cc49112b31d724d2671d4b1dc017237d135153045ee88bf4e54fa9f8
MD5 7a88ff73a4fd8290b8e4a9ba414f0c01
SHA1 2b009fca58a32230afd2604985adac9eadcf18c3
SHA512 b84809fc7e48ff432746c6fe87a0fcd3cd889538fbf7c7e5c8032f0f9bd61c47028422433c8c1fe7eac45a16120b3e9638020a9d46709016eaebbc14c01cc729
MD5 SHA1 SHA512

Submit Download

81e8faf7-ea58-4989-8760-8ca7878f803b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\81e8faf7-ea58-4989-8760-8ca7878f803b.tmp
Size 26KB
SHA256 23e9e174ba0111c260c66ca748e9b8e67be42aa0f7c8a7cad958f9ba1ac1e8ec
MD5 d96a2ca0f3e88d7c97f36f84ee2aa0ce
SHA1 e7877a27a3c937057fe600f73f4dd9766d99dc48
SHA512 c114384807cc53c33fdb5328200ab2fa190c7451a4d4f4d46e371158001d648bf6c04fcf53393d67f359435929cc548af717a8f349486d0010ff88ea96655e80
SSDEEP 384:nIMiFiZcI63sNx8TUNTUlIm25mgP5ugK2fMBOHLtuVnp257O6R2FeoxgL/7IzKoG:I3FQ63kwgSPZBOHLtp57TRVl
TLSH
T1CBC25B32E894C9BBECEB8FA5A74A7907DEF04163D58C9AC0D9D86E1D009759D070BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

0ad52dce-6757-461d-87ff-a5f2693c9043.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0ad52dce-6757-461d-87ff-a5f2693c9043.tmp
Size 28KB
SHA256 cc91df1ea8302ac159930ba38074a7998856a7790925ae2d1944a5bb7763cd7e
MD5 b39b7872dff95702bd00f37fabae81bc
SHA1 e3a8861fc0c8e0929e96a0da4ee16fd24afbc03f
SHA512 96aaa9e43b3cf2ed5c3cd1bf7b6aa320eb1ddfaf88601d9767e7138180e1f50fd1fef37b9752f3b5a8a4d1ba2d6d3d98dad0629886c29150e58fad184a543da5
SSDEEP 384:sxZgBF/f8sv66s8qMpRiYnazAW8pZS15posJWeT+uTM4XEpHbHSXFDYA5I:s4BF/f/4Mnc7WeT+uTBUpHbsFDi
TLSH
T18AD208059824D97B9EC39E1D647D7E33DAAC006222C5CEDA1AECCA1C01EE5FD6B47817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

153c0dc8-ccf3-42ee-a0cf-26d33d2002c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\153c0dc8-ccf3-42ee-a0cf-26d33d2002c0.tmp
Size 12KB
SHA256 918843fbb69e0174a8d6e992f824c4919bff7543a92ee17cdc11c098877fcabb
MD5 b690a3c148f5486011fd1256278cc611
SHA1 35abe333b79635bdd7478a0b556de445e112dbae
SHA512 6aa779e0bbb32c96ce270854b47787742505d317bc4c1a987128ff1e5491190ee80883634aa26e0386ef209df5331f4b90e3f9985e1d4e3ca02c936c1f55acf4
SSDEEP 192:sxZgRQkv/fEsqQZZ5kzodpLfHW6+WNaOe/YbIrMaYL7IgjEJ:sxZgBv/fEsqOZ5XbHbq/FzYnjI
TLSH
T1CB42D915AE28A93B8CC7D709FA55BF53D3F91133A0941E44A6FC8A2C14EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

19f41e9c-7cec-49d6-b260-c8f1eb7d7d98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\19f41e9c-7cec-49d6-b260-c8f1eb7d7d98.tmp
Size 414B
SHA256 fbc66f0c18671bcdfcdbcc16109c00573488650c2b81ce805d178e0181067891
MD5 f99ab5b9374d0ab2b48db08eba516b19
SHA1 86ab0e9165715f49e150d0c7518c8b2b7ac51432
SHA512 d53237372bd3217a33d88cc06683cc2e2eae0de17f0a632e34a4f96a9dc4c43c28a6d5c43f9d0f3afffb8f56aad1cdcaa36fad8f95625315ba09b13586ad9c62
TLSH
T14DE02BE9C916BC3B08FD4B1954540681FB4123573A80868B773D911D8FB5A7A858A9AC
MD5 SHA1 SHA512 TLSH

Submit Download

1e4491ba-cdac-4d29-8e8f-27a6f85b35fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e4491ba-cdac-4d29-8e8f-27a6f85b35fa.tmp
Size 28KB
SHA256 6bf6fc410dac89b8cdc80aa35aeb240ce600e44d846b303a171576079609f852
MD5 046d4bd20dc87ac2762952ba131694d5
SHA1 c7f07a88509334ad4b84643afba3f6f391681173
SHA512 58606f6a36a6c2d0769eb3eacff37a9ae93c4e0171b8c3f427192b88dcd1336708a43bf464da941aa5743a36239b1249bec1ec5f95e4ec4edf35e9b229566847
SSDEEP 384:sxZgBF/fNsv66s8qMpRiYnazAW8pZS15posJWeT+uTM4XEpHbbiXFJYA5I:s4BF/fo4Mnc7WeT+uTBUpHbwFJi
TLSH
T1BBD208059824D97B9EC39E1D647D7E33DAAC006222C5CEDA1AECCA1C01EE5FD6B47817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2208eebc-d022-454a-9975-eac74a857f2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2208eebc-d022-454a-9975-eac74a857f2d.tmp
Size 28KB
SHA256 c0550e1d018267f8261aca7f11bce3aa7af053f739753771fd8799e9cb2ff81c
MD5 fd0acbd5543eb49b0695b6428d414ddf
SHA1 04ddaa2176a9f22ddb0841b08d7bcda1f6120cc5
SHA512 14d5ffad8a45a0c292a12f9da59aebf4d0a37d21ac5d5887bcd14931be5bd6b2a3c1a107d3a1ef23ba474b044afdca8457511b0cc399bf7944e6f3751edc80c5
SSDEEP 384:sxZgBF/fDsv66s8qMpRiYnazAW8pZS15posJWeT+uTM4XEpHbyaXFdYA5I:s4BF/fu4Mnc7WeT+uTBUpHbnFdi
TLSH
T1E4D208059824D97B9EC39E1D647C7D33DAAC006222C5DEDA1AECCA1C01EE5FDAB47817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44feef17-545f-406f-8c7a-d6c391905323.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\44feef17-545f-406f-8c7a-d6c391905323.tmp
Size 12KB
SHA256 95c31bd5364a620f357fb9e5ce9edeb88466218be9e60311bec06712a2962cef
MD5 4fadd09aa1a782bf002c2107731a6595
SHA1 ea5c0de9cf11d56883c288e1f311385cd514e51c
SHA512 e7debfa91fb6ee14c49828f68b107f231193ad8d03f9cf65d4edebad91002297647977e493e80aa4fb70747e08ec2a4573ec2f374f87cdd4eef5801035724242
SSDEEP 192:sxZgRQkv/fEsOQZZ5kzodpLfHW6+WNaOe/YbIrMaYL7Ig5nEJ:sxZgBv/fEsOOZ5XbHbq/FzYn5I
TLSH
T15542DA15AE28AA3B8CC7D719FA55BF53D3F91133A0941E44A6FC8A2C14E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f961fb1-b998-4849-84a7-ecf162826e4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f961fb1-b998-4849-84a7-ecf162826e4a.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

611fefda-496b-44dc-a1fc-8a793afb5665.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\611fefda-496b-44dc-a1fc-8a793afb5665.tmp
Size 27KB
SHA256 d264b777f0b3159c5be6a7c2b41f04e92a26605cf475ee11d348f38676573468
MD5 7a51e9ce7ffd2ce1ef99e7948315d40e
SHA1 95826572e9185986b6248c7aa6659b074c818d3c
SHA512 7eaa598bc3d1210fd9dedae6dc0b2915618c54c7b54a9e58b3dc5edcdc3a7d19b4a9a85a4659d438c95a9b1beed838f0ffb9100b384ee865d306c26ac848a41f
SSDEEP 384:sxZgBv/fEsv66s8qMpRiYnazAW8pZS15posJWeT+uOZ+XJHb7oXFtYA5I:s4Bv/fn4Mnc7WeT+u35HbCFti
TLSH
T19BC21905A924D83B9EC39E19657D7D33DAEC506221C5CEDA1AECCE1C019E1FDAB0781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6467c0ca-01af-40a4-8c8c-cdbe48177ecb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6467c0ca-01af-40a4-8c8c-cdbe48177ecb.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6ae47770-cce3-4d1a-a942-25bcafb08942.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6ae47770-cce3-4d1a-a942-25bcafb08942.tmp
Size 12KB
SHA256 45770b630704f39d652c8b48d38e98c895d68e968697bb2ff4a0dbeb608c07ac
MD5 cfe23ded8c56dbcd0b4ea148bc00d54e
SHA1 c257799271516fe4f4ebba7837973781f37f7a4a
SHA512 b7aa88aa4ee5a27fe73c485e5157b4e2a96ba36c877113404629f34107f2540e3391fe9724e85f07d5d43ffd77bf49f93e51e4628bcf82e75d66e1818a7b875d
SSDEEP 192:sxZgRQkv/fEsTQZZ+kzodpTVfHW6+WNd42b7oXYbIJMSYL7Ig5nEJ:sxZgBv/fEsTOZ+XJHb7oXFtYn5I
TLSH
T16242DA15AD38AA7B8CC7D719BA55BF53D7F91133A0901E44AAFC8A2C14E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7054c6c7-78fe-4363-bbbe-21c69609ee3d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7054c6c7-78fe-4363-bbbe-21c69609ee3d.tmp
Size 30KB
SHA256 9e7ea9a65dabc420cb863a18ba16c5f7e708dba3e2dfe1783994015fd02fd212
MD5 468bed5be47e707b877ebd4ede9cdb67
SHA1 60f998c9df05a73b8908b85a4543b4360fa1da7f
SHA512 500bc3d507f0974b573ea397aa6a1bf8d1c0a206669cb8c493b93d737255d476d9b7f79932ac3537fb71ff522143846f3e3b3386b7210bc8a49b97c36bc88d39
SSDEEP 768:0QbKyktrnWvDBtt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVxeWLlMC7fnroliF:0QbKyktrnWvDBttu1jaGeWLywf0lC
TLSH
T1BFD21A3F640CCB7E5FC00A5DDC66AF9B6DE802CBA6548D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

77a90bc3-ec6d-4904-a46d-2d715e8f26cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77a90bc3-ec6d-4904-a46d-2d715e8f26cc.tmp
Size 12KB
SHA256 ab035f03ad85c811060e142434a04dacc8183284e87ccf2dd7521c1ba164e34d
MD5 71c3e557c97f715cadfe105ee4bc965c
SHA1 7b8543561ddea964c2469108fbb8403cf1e676a6
SHA512 9224b2bd71f53c0090068d245225a75e5d34159cfb9b7e478c5cb331f7e478b080a8682a58b5ba8724c435c6f0c31b5ca3c33277fbd2ccce0bf6c25940609c35
SSDEEP 192:sxZgRQkv/fEsTQZZ5kzodpLfHW6+WNaOe/YbIfMaYL7Ig5nEJ:sxZgBv/fEsTOZ5XbHbq/FPYn5I
TLSH
T14642D915AE28A93B8CC7D709FA55BF53D3F91133A0941E44A6FC8A2C14E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 e875d0dce6e289a9c636e30ae0114e26811ea4efd86690e30dbc8129f79348be
MD5 bc56b4831e6c234bd34d217faa10ef6a
SHA1 392b9e3e2c294007cfa1068cb371d3d66c18a75f
SHA512 5df4ef405ee2752ee79ffd1bb3b9a66e51c50368f4ad444731cde96e79640fcc07988dab80740a6a6aacaf2238208a16ca7102453f15fec762c571c7dd266d0a
TLSH
T162E0208654C7C31D7B1CA847426C530C8792275E9EF06ADD1B40C948714955063C7961
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 08220da96e5e68d930d1b8c8bc942fd28c5dd3d31f572fa6b549b2e7f8df8727
MD5 1222a08c8852f5b37eda4241856b4722
SHA1 25353dfead9d67e717a3c23d398b99f800ad5fe6
SHA512 7b0c36bcc071ccc7eb18a1599886dc0ff41aa3a36d8820fcf98e8d41a29606c3d53b102d2c92f944337b82140ebbc29e57ed350f46dfcb533a0f082247951c48
TLSH
T1B8E026A504CAC22EA308648B01A8574CC3802B5A92E8698E6B9AC58A700A374E2967A4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 846c817c4a1a0945b5104d28af93235dbda9a3aaf20945d79255d80991052709
MD5 d197cca2d23059e0f4b1e3adbeb33b8b
SHA1 36eab4b35fd58bf5a0ead85e820fc4c3bc8a9298
SHA512 80a9d12180898d1ff9c665a133b429e9549fe522f8884c6d78da0b23e1530c2633e49778a1b19f2f125163dc4868b7f8817929953543bc53874d5ee02fca7b17
TLSH
T12FE026C454CAC32EA3086B5742AC530C8BC0279E92F0A91E1744C98870CD290BBC7AE0
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 133KB
SHA256 4aa7c3da07e7242d5c6549865c3a0998bacebbf42d886cd3648981ad83cb8455
MD5 0750d5e5786889b3e18c9d4b838cfbf1
SHA1 6bf051b1798a04aea93498576d37d9da00d541ed
SHA512 e2935598d390639073a769b2d3396185a099462c66512b3fab695a723a387e9cce724dc33cdaf2168d88ee156ce8f0cdbd5f593c9f01795722c05746e04eb206
SSDEEP 3072:DxI8cpivWJ1BGFjvF9mF5vCF5IiaKSKI0OY:7sjD0Fjt9mfvCFAzZ0OY
TLSH
T12BD312F1E0C069A0326C525FF9695440DEBC7B10EAD6590BB7732C50F3FE86A25D9C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 dc0b054ce9cf3e1c5de943e289d5338b3260ae1ee75f2be853ec72cb383363f0
MD5 83f2f7cceda5eb9e034378688f5fec21
SHA1 f87aee44800bb0ab832bb4bf5ec6dbf22bd7a384
SHA512 bd26ffe8144953c769762dbd8cee07ecf590745c4680f5ec45e034ba3fa84355bd10bbeff9aa14c915eaa47cb5564e83dca18b2bfd19d9036032db700f6ae7f5
TLSH
T19271E9CA0CB8939AFB5C3EBC91E10DDBB1741981A3831E0A0668ECF9D43B7B42D1E444
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 eb81b56d457b9906387b929f927d32e5cdba5e0d1c6b40ea542840ce14e79369
MD5 a9c795f19bb421e7f14626f0ad83f976
SHA1 501e92498b6de754876fb4e66599bbf53d626119
SHA512 a3edaa8c9d9f6437191dc6ea4022fcf7aa0d82ae9b3351ce47f3f6cd4fb79be885f326e95989860c8232045a2112484e66c6e8d6e3ee3c27597ae3297ad1a584
TLSH
T1AA61FACD4DB497AAFB9C7DBC91E10DCBB4B815D093831D0A0264ECF9D8367B12E4A480
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f8d31706a67bfeb9975073fc25320ebf27163186137d50e4b687044a1ac5b7ef
MD5 34bb16f7ed847d92587ea78fc8281d89
SHA1 f8d795d3b5c62bfd07d92617781f85effcf7bb7c
SHA512 b1521a408b5203d1d7e8e1f68e31c1ad3da620019b0bc7860a5df6bab9647d1dd6ca13e71273734352d8b9354c831e26ca822459345b8d10247d78085c893737
TLSH
T16A71B6CA0CB8935AFB5C3EBC91D10DDBB1741981A3831E0A0668ECF8D43B7B46D5A444
MD5 SHA1 SHA512 TLSH

Submit Download

3a9127be-ebda-4dec-9898-70ad6b2a1513.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3a9127be-ebda-4dec-9898-70ad6b2a1513.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

DevToolsPlugin.html

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3976_1263487150\CRX_INSTALL\DevToolsPlugin.html
Size 220B
SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
MD5 0d09cc16eebaeae80fe58be258501fc8
SHA1 898cae597eb3039e94878df3eb5ab1c012bb5264
SHA512 f90c0ea0174598146450074c57344765b725ac0e44ca5c21f979b8f77370be94940aa53b684d9ef1e77c3090926e2004a931e6c0bfaa1f5bee3247a55799ff83
TLSH
T131D0974D08CC55A2432004636A26BC0C3F4CDA20813BC6A3E878C1582022EBC80D0880
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3976_1263487150\CRX_INSTALL\manifest.json
Size 766B
SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
MD5 c447a41c21cbb2bf5411029cb0936e13
SHA1 07acb13340be463e041ed22a2b26d5b567fd2023
SHA512 32fe5b340df5d7193bfe9bdaaccfadebc0e2c945f6cf61871f106e18daa4ed164aeb0d39f5552a09e3ed82104d69885288c8f4bc596a4e9291cdf627b57edd6d
TLSH
T14B01757D889FC8B782394B016893C48AF3354B5EA400A20C79B0C05C8871376E913629
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3976_1263487150\CRX_INSTALL\third_party\typescript\LICENSE.txt
Size 9KB
SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
MD5 f632dfdde0adc0da86f701c6f2df38af
SHA1 5a7612b4d9977a7e79f60e88df556b09a90df828
SHA512 87722a2d675028d18ea276dcf18c24e891a0bad5f85f7387702310976d2fb8e1d0687321b0844b6c47947e6fbb489fe08bd1ffbe9772955ac7191ba4e274c8a5
SSDEEP 192:rwqW/NVo4UTo1YEHFNnFE6GhUGi2Re1CVThOCoHqxLJbzjwA:8ZhUk1Hf4Rg2HbLNB
TLSH
T19C12637F774903770AC30172B78BA4CBF32E903D3BA556644059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh\113.0.1765.0_0\manifest.json
Size 658B
SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
MD5 2cf796650e5ad5bfb6c4a421d81734be
SHA1 79298d3cdd584b290d825d6fff4b857012e71992
SHA512 1ee7604bd7293d6296cf1368ed0dadaad7359f4d00be75e7730a9704b2205438a06ba7361554437b3e6ef352482011a90500769ff713949716c24355ee742e33
TLSH
T17A01233A268140F238347640087155A4F176620B9100F8053835E36EC460BFDBD79A6D
MD5 SHA1 SHA512 TLSH

Submit Download

01bb63d8-1821-4263-9e91-e5ce2ad12c37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\01bb63d8-1821-4263-9e91-e5ce2ad12c37.tmp
Size 5KB
SHA256 4cf3b74a0bbc1317b9f5e74a31489a5ac18e4508aa8522589431eb3880c5a7fa
MD5 d85f63cb08d701e67011410c8242ffac
SHA1 e01b7268df5521bcc4b25113be1da532b4d007a3
SHA512 9ca61d54937c04b49cf4d9d5c7292ea826a4f44047a390122d1eb6e2244404a7071e1b20e212a6cb84f098036e6c027e61ef21d23b70ac14dbc6200eba11734f
SSDEEP 96:D10OIY4trOaaTzBuzywre01VW3Q0wB2gfj4GT:D1/IYmrOaaT1+y101VW3fk2gfj4GT
TLSH
T1EDC1D0B7C2E4826DC81156F0AB587E37CE690624A33D3D1ACAD8AF0FA7F1471D24165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cc8931f-c4e5-407f-911e-3bc46702f476.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3cc8931f-c4e5-407f-911e-3bc46702f476.tmp
Size 5KB
SHA256 15940b6980976b22c53673acd8fa37e82cd98f549ffad285885246495f889ee5
MD5 44b3a23c11d27922153b07c2b501a9bf
SHA1 bd85d51fdfd041797c21bd8a6c093a8298885383
SHA512 b88b2783d962db2894561ac5ddb03015b927b7bda20d6a8e666b21e0c6b9afa9339b9eaadd2193088169c8622385d098c733d8da28351eb357808a50eb5cdcae
SSDEEP 96:DGOmYKf5ltpsaazBuzywr101pW3Q02NInkj4/QGwBj2BjlYJbK:DlmYKf5fpsaa1+yi01pW3f2NInkj44Gh
TLSH
T1C3C1EFB783E4826DC91092F0EB54BE27CE680524932C3C6ACAD4AF0FA7F1171D24175E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

559aec4a-be59-4043-ad89-e0adc7421c24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\559aec4a-be59-4043-ad89-e0adc7421c24.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

78d78bd0-ebbb-4271-9009-256a2a4a1a0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78d78bd0-ebbb-4271-9009-256a2a4a1a0f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

be55d556-fc83-42b9-a00c-146c7c12e4bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\be55d556-fc83-42b9-a00c-146c7c12e4bd.tmp
Size 3KB
SHA256 b45cce63097b436895627ba9199c68e7917b808b7a5583ea3c09148427b7a106
MD5 46abfc0e16eedeb3c31daebb834ee86e
SHA1 c56ce8e45fa455e613efc526a280dfa8eb3dbfb8
SHA512 594105c62744d3b8d6ae553b355ab1e4a15387f38dfbc8ac461ec68bb3ec45f4ee57f6581440cf4a87a86ef32caef68c11fd684f278426b9aa807208f6e28f75
TLSH
T1F581DFB3C3E4C62D881145F4AB24AE37CE6C0924A33D3D56C9E8AE0F9BF1472D24165E
MD5 SHA1 SHA512 TLSH

Submit Download

f3d78a89-2891-41cd-90d0-3bcd53c9ab6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f3d78a89-2891-41cd-90d0-3bcd53c9ab6f.tmp
Size 5KB
SHA256 0167cd2de54e1770b5e32d2c2b9bd61b61ddd215355e71657d7c84d43fe0d8f4
MD5 e43c6c48058228f4535625b5cc14eddb
SHA1 0291066d4fa2c83d57d039a9e33d12eeb7458c24
SHA512 7590b78b1cd785e6e1164d3dc72cc1c4c54bb88fa3c9c8d08951d4f9b0be67f92f86dcf27b909913777191257239fc08358ff55da1be16fdaa4155cf2501a7e8
SSDEEP 96:D10OmY4trGeaaTzBuzywr101pW3Q0wB2NjAkj4/yiz:D1/mYmrGeaaT1+yi01pW3fk2NjAkj466
TLSH
T19DC1CFB7C3E4826DC81156F0AB54AE37CE690524A32D3D1ACAD8AF0FA7F1071D24165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\eb4796d7-0c8e-468b-8bef-0ed78941b4f5\index-dir\temp-index
Size 864B
SHA256 8d3ac3f5c5d662f80011fd25d988a8bc479eec16e7956c12c2bb647fb529c7b3
MD5 53735f3cd711fa2a4e48ad97962b0653
SHA1 74ee4ff006d4ec48d393e60377dd56628b24dad6
SHA512 e9f0596a32f3adad4cf104f9ab678823ea0b9b62fde252b1d4020d4fddf17bd3d9da8c628f2aaca6f55e1500bab66465b95834e73744a3f34b5b51b900ad432e
TLSH
T11B112DD91E835E0EED140234143DA84A713001DC2250720F62EED2298C9BB007D81AA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\eb4796d7-0c8e-468b-8bef-0ed78941b4f5\index-dir\the-real-index
Size 864B
SHA256 dece79215667996099bf65c39a00f7c6c1105feaea3e1f69cad0b09b406200de
MD5 e396546868deb26595d5345f5ad205bd
SHA1 4a1e569d5c101c4cd195a3319b913dd2e3e79bdc
SHA512 3eee37c3da6878464a12593f2198d9caac64286ee30cf80365e01f4f0e2109719b7e113ea8c203b1b942a3f2614ecc0ddcdffe3f157028b609bfa91cdb2e797a
TLSH
T10C1141E501538B06FC8803709A6DA94A717542446344778FE3EBE12ACC92B84ADC3FF0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 b11342edab859f6b9762282917bcda49c761128731b14857ae015fd5c3c77dee
MD5 19774f8bc85142ab534e4173b4901a93
SHA1 de7ff57f83d0e62bf07ca8dc3f9d727cb207d5ac
SHA512 ecb550d372baba6020afea60705b1dcbf8eb6cea0991f884f2d26e337e0bae8180295d9e1fc78ced0c3041bef10cfe61ead3a562cc801833364e3150197679fa
TLSH
T1C2E0D8B76DE61C68ECBBA3ED247144B14502BC58D815AC0EA12FE1C752F13243455C66
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 3913349bf8c87bc3c252e7ee7bf0c8c2dc512e59a2ea539814c9adc15beb1467
MD5 c326c0dd6d1eb4d90dd1a61a1a9c451e
SHA1 5f179a3af6951f74ec396f0ea7a799525e5d2f5a
SHA512 eabce08a8b46aeabb4ba5ec069ac8fe108c3dc3e7df4af854e4c5b54e2318d37cc5a8f317d74867c8a9bd0e2d71fe8dd6b1fa67346bed98594f47345aae2e1e4
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXIzZ9:OtfFvpopPxrB4RhfIl9
TLSH
T1B2B2221471BA021138FE690C81B59B2F064232B33159E67B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b41ee3e5-6fe6-4565-aa79-146a0f7f9084.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b41ee3e5-6fe6-4565-aa79-146a0f7f9084.tmp
Size 12KB
SHA256 3ee421f293a6f19613d4518ffde2fe50e8293b803c1d0468648ce480b9a1cb97
MD5 69961b6ee29bd2a5e387393356903e0e
SHA1 55d5e99357e475db5f62772f85d51c7d6c8360c0
SHA512 e69ae6f9146b99d7a4abc3ed22a821645c5c1896b9451e4ee48fc26c8721bb0ddda9377a63d439515add9f61ee3f52112970691bbf45849e12017cda22aff06b
SSDEEP 192:sxZgRQkv/fEsTQZZEkzodpTXfHW6+WNa7oXYbIeMSYL7Ig5nEJ:sxZgBv/fEsTOZEXrHblXFgYn5I
TLSH
T14942D915AD38AA3B8CC7D319BA55BF53D7F91133A0941E44A6FC8A2C14EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1ed903e563f7d5da9cb522cc8fa2da5453154be6b3ae9ce6f01b8b3f253a38cd
MD5 426032fb65362a31d3a81b0ff6b741c6
SHA1 122a08cdd0037fcda60fb2490dfde674eda0dd8e
SHA512 443ba38e6aac13c2bb216198e1fbf01a56acd80563c7b1c9b8016c3e454166c29643a02611daba0e195a5bcc4d6895bd97b9a768931a45896429ff8236bc03d6
MD5 SHA1 SHA512

Submit Download

de082be2-e866-4a2b-aa50-3598331b5dc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\de082be2-e866-4a2b-aa50-3598331b5dc6.tmp
Size 26KB
SHA256 457de6592dfcab3f059ed64dde378ec1bbaa808055a4cdde4943b4ceefd84ecc
MD5 667f862f5f66d688cbd7015ae685d9b8
SHA1 c8ebbc99fa58532bbe700d7212a20efa290cc352
SHA512 3910c37bc4df670674103fa0727203efaecb90a96d559d1e3443bc41be7cfa48dddc0097dec1c75f7295f00588ec5c2dd40aa7500ce573856d6e99643ed30ec5
SSDEEP 384:nlMiFiZcIh3sNl8TUNTUlI4wD5mgmUUOTK2fMBOHLtuVnpU5PJAxJdChugL/7Iza:l3FQh3UwgQUsBOHLt15PkJdC1
TLSH
T113C24B32ECA4DABBEDEA8F95B64A3A03DEE04163D6CC5AC4D9D95D1C00971DD070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9bae5d58427eaf6ca390cc25a5b9afbedfd638e7a6a74e162cb358f8af80dada
MD5 fbaad2db1ce815762d6ef205a44479a1
SHA1 c9c4fceec1cc8d1fb701148f7d976e1c51a80848
SHA512 00d3ec496535bf920153daa2fc3a24a7f4df845283e90aeffa0304793d428039caedbea9265135f32f78f25416b248b46ab93326068b9020dc5ee8d234b305d2
TLSH
T19D416D5CA6F91149B3B76F5B9BF2A86D44BA7C773E0AD49D10110E4F0A23B40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

7b8bf172-45ae-4f1d-bb59-6a633220794b.tmp

Path C:\Users\Admin\AppData\Local\Temp\7b8bf172-45ae-4f1d-bb59-6a633220794b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

c298bd89-371f-44c0-9983-242a7cb0f5e0.tmp

Path C:\Users\Admin\AppData\Local\Temp\c298bd89-371f-44c0-9983-242a7cb0f5e0.tmp
Size 3.0MB
SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
MD5 06f47f5ad37fb94be87982adc116d012
SHA1 4899ca7b1be75f8607b00b59b8469c8072f514ef
SHA512 b9ccbc3f2c45eaefcc4e157fb19eafd10eb54465f514ad16ada25e81390c3d577fa52aa6fc03461de6726694cdfda15ea96c5420609ac7a426e7b5afa43cab46
SSDEEP 49152:nqSGYpZHVTcorMCTt7OQvYilFbQ0NyNLvTAIPvWcfbcFlTfTGquf:n5pXTcoYCTYQAybMg7cfbcFPc
TLSH
T159E53395F69FF0F4D9A5F3317F8C765F16AAD387A30091D84283204A7BA9E210A5DF60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\DevToolsPlugin.js
Size 8KB
SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
MD5 7f32ca5d3f52675f538b041bd67c0444
SHA1 a8f6a8ff69ba0b3ead7a44d9b64fb009ab0e4e57
SHA512 ba763c633c8a959644535e9a2999e229db42c2fe61a57fa4e58136a05aa29d445f5e4278bcb5b529bc35e443534e516bad7cedc6d0ca2d408a5fe412f6e56df9
SSDEEP 192:95G3OvolW6gQWaxciQV23vrYbSrbS6tk63yidWJvy3BCd2nx3D8jyiQjElDXQqA4:95G3WoaaKDqxVIFB
TLSH
T13C02215EB8F62032F017B576197F8009B63540137418CE19FBED93A4AF92037A993ED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js.map

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\DevToolsPlugin.js.map
Size 16KB
SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
MD5 9eb2d561a925489b69a25fd78f7b47ab
SHA1 d989f19f74b1b436e0f84b29a1b6b99033e26603
SHA512 cfcdad655a516a610ee8b6d50d62868f42645e003696438668f8cc0aff0d9e9c569d878dac1cbacad7403b1816197618c8fb1ebe628dfd456fd54447cdfaf9f8
SSDEEP 192:fVuVl3E3tRsSjJ5FWQzgFMO4+wxVdGdFWdYixmrfReRc525y8uj5p6UJO1DsWy:fVuVlU9jFWQzVdGdFWuiYro5y8eQDg
TLSH
T13972881720BAD837B44767A718EB81A67E20545C7D98A70479CCD302F3D2F3BADB2865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NamedFunctionRange.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\NamedFunctionRange.js
Size 1023B
SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
MD5 fae98d8d75b2ddab58eb531d3c08a8f6
SHA1 1e197513c4ce482eb6aef6c436afba74c1c69e10
SHA512 fcb07e23e1e96f5d3141dcaa389b9e250c0aeeb94dc3dda9c9005e49b41f5c4b64b13cb68facabffc8c40154e5f25f5caacb1d41da4ce46e2b5050e74bd9cedc
TLSH
T1A3119B2B59EA1926AFBE2413BEDF33485631010B5CF688DCF42D93406F614678CB1F91
MD5 SHA1 SHA512 TLSH

Submit Download

NamedFunctionRange.js.map

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\NamedFunctionRange.js.map
Size 2KB
SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
MD5 b2816c88b5f892e2a6c0cd97af1b5896
SHA1 d422ddf8f1513981c623db31579adfed682bf54c
SHA512 5754bc51de04ad9e73849c1c0aaaf7702d0673b7f55b7f289a1f2c6f370f55a758f15bd7574097c5eb78aa236a2b47d58a7b7550150ed29aa557cce0b6166daf
TLSH
T11F415813441DAD333E1B225BBDDB16A52F31114D6CA82758B49DCB25B3A2F378971A42
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\_metadata\verified_contents.json
Size 2KB
SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
MD5 70f58c8151600335b5ec548cade5b98b
SHA1 b916376a8c9e19541af0a787845f80535656478a
SHA512 e8fdf5e299909f96733d0b11c0617d3ca06a22283438f04d7395a4799c04672fdc5f7770e84b4cd0c66311b131e15c2e24924ce1f5e2417dcc9ed495b9685129
TLSH
T16451E730C470359C2D1A12304EBE1363DB51A3AF20817D1B38DDC89E2FB2B4754A7CA9
MD5 SHA1 SHA512 TLSH

Submit Download

typescript-tsconfig.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\third_party\typescript\typescript-tsconfig.json
Size 91B
SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
MD5 40d3e3fbfc100769071a2a27040e33f9
SHA1 e150fe3170a949d8a5d86e9135726cfdc5be6c59
SHA512 3ec8cab677386a19d82240628d27b0a1fcdf1aee56f59cfee994aaea96a1dfaf2b3eab73d0c1902503bac61bb2aef5ab281e73e4b0078994b1242104d9bb2830
TLSH
T13EB01220C5280C1006F975440F2D90018160594286565E2631CFC1384756634043F360
MD5 SHA1 SHA512 TLSH

Submit Download

typescript.d.ts

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\third_party\typescript\typescript.d.ts
Size 486KB
SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
MD5 9f7f369b169033ee919dba043b424a83
SHA1 ec2ec5846812d366045c969e5e03d037a6e1cbdb
SHA512 f84397b6219a1b07a1d5c1f9a470e1fbd9d3e7143c55c7ef345be147fb0a56b8609e97708cb0482711382f448da57b7fb0b1a55a9750b41d2083d9c86e74aeb0
SSDEEP 12288:HGeBiBCdVZ+dISrJXnMEEuIwmn0NtIRFqr0dhbPzPKUnrjM/MqV6VQ:BBiBCdVZ+dISrJXLEuIwmn7RFqr0dhbS
TLSH
T1E6B4C6A768D514B1091580E26AAE9041DF34E3A33719D0B5F5EC83BD0F1EEE917EB398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\third_party\typescript\typescript.js
Size 9.2MB
SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
MD5 fb1c951f849bca76b6aeec81fafb1ee4
SHA1 12a47c6376f82c9d529b0102d82214b8cea02e71
SHA512 bf05030b66e25e7ba27b0d999a670b582d602d639e84b1f6bef01894a95420e1f94c88cacfd841bf7ac4838754fd32e398cf0c5a4c362091ec48d8d572bb4dd1
SSDEEP 49152:8eg4L1W7tVtRPj3HydvhWw2e/L5/sW5iaVf7bnePoMM8AGdcBeEmkCPt2sr+nVsN:LW7t/RF5PB6kl
TLSH
T148A6F8BE39E230615A4B61766A2F9001B735D267320CD8D07ADCC3A95F1583462FBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js.map

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_1030489880\CRX_INSTALL\third_party\typescript\typescript.js.map
Size 6.0MB
SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
MD5 bce05726f69c72ee12576c1ea1a3fba3
SHA1 575168a99c46fc263bb371e09be457d5c18f53be
SHA512 453cf0fc7ceeb1427ccd09bc16ee1354144fba1eb721b72c697eee4544a5fe9b641404d4de715e60dabf68a6ce1a6711353ed3161f442a1d5279a5fc666d865d
SSDEEP 6144:ITyuEDfQX2uiFwGOCqjXqW2N1ekQ4n5LeW:2PX6D
TLSH
T10F56A00201BBDD6BB45B16AB29CF81F2BE50849D7D98BA010988D715F4D2F3EBCE5472
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c444d990-b501-43dc-ac3f-9fe58ecde1a8.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3976_568752099\c444d990-b501-43dc-ac3f-9fe58ecde1a8.tmp
Size 2.1MB
SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
MD5 4cd67032e35fa92f5182df10df289906
SHA1 9210bfc66bd808ffcd7c6443e160dc8d6754c416
SHA512 f3d83f6e77e4568d2dae539c95acf0a886926a001b4d80f0ea602387530fc333f688ac031b3057e1c2b0375426cf47ae33315f7da9ffaec601102be0bb7221cd
SSDEEP 49152:ykR5Xz/3zNOm3NOHF4+n/UlfmCSJdm8IKXmiQeujzX:DVEkNOHJQOtICGb
TLSH
T166A533BB93AD6C15F3A88C67DCDD498641C2798E6161B7F619837C282ADC07CB47CE09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download