hxxps://hackvshack[.]net/threads/vantix-inventory-changer-knives-gloves-agents-stickers-keychains-musickits-patches-updated-10-10-2026[.]14032/

Analysis

user interaction
yes
max time kernel
299s
max time network
300s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/10/2026, 18:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://hackvshack.net/threads/vantix-inventory-changer-knives-gloves-agents-stickers-keychains-musickits-patches-updated-10-10-2026.14032/
Sample261029-w9mkjsfv2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4392	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{7897C8C8-4053-4A18-98C3-5BA1236BC8E1}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{503008F4-5F3F-4A1A-882D-F6E971D5DE3A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5808	msedge.exe
5808	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
652	Process not Found
652	Process not Found
652	Process not Found
652	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1596	CredentialUIBroker.exe

Suspicious use of WriteProcessMemory 57 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 408	2388	msedge.exe	84
PID 2388 wrote to memory of 4392	2388	msedge.exe	85
PID 2388 wrote to memory of 648	2388	msedge.exe	86
PID 2388 wrote to memory of 648	2388	msedge.exe	86
PID 2388 wrote to memory of 648	2388	msedge.exe	86
PID 2388 wrote to memory of 2528	2388	msedge.exe	87
PID 2388 wrote to memory of 2528	2388	msedge.exe	87
PID 2388 wrote to memory of 1028	2388	msedge.exe	89
PID 2388 wrote to memory of 2488	2388	msedge.exe	90
PID 2388 wrote to memory of 1028	2388	msedge.exe	89
PID 2388 wrote to memory of 1028	2388	msedge.exe	89
PID 2388 wrote to memory of 2488	2388	msedge.exe	90
PID 2388 wrote to memory of 2488	2388	msedge.exe	90
PID 2388 wrote to memory of 2192	2388	msedge.exe	91
PID 2388 wrote to memory of 1904	2388	msedge.exe	92
PID 2388 wrote to memory of 2192	2388	msedge.exe	91
PID 2388 wrote to memory of 2192	2388	msedge.exe	91
PID 2388 wrote to memory of 1904	2388	msedge.exe	92
PID 2388 wrote to memory of 1904	2388	msedge.exe	92
PID 2388 wrote to memory of 1580	2388	msedge.exe	96
PID 2388 wrote to memory of 1484	2388	msedge.exe	97
PID 2388 wrote to memory of 1580	2388	msedge.exe	96
PID 2388 wrote to memory of 1484	2388	msedge.exe	97
PID 2388 wrote to memory of 4964	2388	msedge.exe	101
PID 2388 wrote to memory of 1056	2388	msedge.exe	104
PID 2388 wrote to memory of 1056	2388	msedge.exe	104
PID 2388 wrote to memory of 1056	2388	msedge.exe	104
PID 2388 wrote to memory of 2104	2388	msedge.exe	105
PID 2388 wrote to memory of 2104	2388	msedge.exe	105
PID 2388 wrote to memory of 2104	2388	msedge.exe	105
PID 2388 wrote to memory of 428	2388	msedge.exe	110
PID 2388 wrote to memory of 3748	2388	msedge.exe	111
PID 2388 wrote to memory of 1028	2388	msedge.exe	112
PID 2388 wrote to memory of 2584	2388	msedge.exe	118
PID 2388 wrote to memory of 2584	2388	msedge.exe	118
PID 2388 wrote to memory of 2584	2388	msedge.exe	118
PID 2388 wrote to memory of 3864	2388	msedge.exe	119
PID 2388 wrote to memory of 3864	2388	msedge.exe	119
PID 2388 wrote to memory of 3864	2388	msedge.exe	119
PID 2388 wrote to memory of 1592	2388	msedge.exe	120
PID 2388 wrote to memory of 1592	2388	msedge.exe	120
PID 2388 wrote to memory of 1592	2388	msedge.exe	120
PID 2388 wrote to memory of 3244	2388	msedge.exe	121
PID 2388 wrote to memory of 864	2388	msedge.exe	122
PID 2388 wrote to memory of 3244	2388	msedge.exe	121
PID 2388 wrote to memory of 4116	2388	msedge.exe	123
PID 2388 wrote to memory of 4116	2388	msedge.exe	123
PID 2388 wrote to memory of 4116	2388	msedge.exe	123
PID 2388 wrote to memory of 2056	2388	msedge.exe	124
PID 2388 wrote to memory of 2056	2388	msedge.exe	124
PID 2388 wrote to memory of 5808	2388	msedge.exe	129
PID 2388 wrote to memory of 6016	2388	msedge.exe	130
PID 2388 wrote to memory of 6016	2388	msedge.exe	130
PID 2388 wrote to memory of 6024	2388	msedge.exe	131
PID 2388 wrote to memory of 6024	2388	msedge.exe	131
PID 2388 wrote to memory of 6108	2388	msedge.exe	132
PID 2388 wrote to memory of 6108	2388	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://hackvshack.net/threads/vantix-inventory-changer-knives-gloves-agents-stickers-keychains-musickits-patches-updated-10-10-2026.14032/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2bc,0x7ffe28f5c188,0x7ffe28f5c194,0x7ffe28f5c1a0
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,11927153773282911964,10391548373364117415,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,7170912878672669531,6905449201196581266,262144 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,15558506834679687392,677562132006868013,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,14315969816137844013,17898962759534574129,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,14419461971554172661,2089292744782952930,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,10231086729652358899,17460042115105566049,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,3877582795263289842,2524137852615045577,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,12657807670199782227,13199823520501973311,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,14155734726130146369,2051142346275171666,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,16784412343293298116,15451011404544997689,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,16784412343293298116,15451011404544997689,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6228,i,3298672652984082913,2783635822168280023,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5772,i,18175794156015413864,8021200379363681433,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,8858442222136726712,3173033265945142891,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,16860243095089070866,13773307114069271409,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,4124763563488126262,10246446992084171064,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4756,i,2535733156507462273,5133561169992344570,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6912,i,5916135127631605375,9139125761981266851,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6844,i,1464363964241777734,7251426808251792950,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7000,i,2738931996445957550,12777847018116249445,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6432,i,7970742017900079729,17276510788607939406,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  - Modifies registry class
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6344,i,13628368345528676727,10528459683917575805,2097152 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17152076148270617632,15931789059961010103,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5448,i,87806456730036330,14706290233985499801,262144 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,7218603536973312474,4462448893197487008,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,12645758213771460755,222654068108802377,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=1300 /prefetch:8
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,11633379513259980445,15948277263227573116,524288 --field-trial-handle=2236,i,15230571725155023187,15246282047350796904,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:6108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4012

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1228

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:1596

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:1484

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3be06418-7995-403c-94a1-f45fa8c4a68f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3be06418-7995-403c-94a1-f45fa8c4a68f.tmp
Size 392B
SHA256 c147327f2f387eae631b1e01de2db2704099fa1c3bd821d041aad4c0e0fb8701
MD5 8ba88b2aa0879a4d63ce9478e7c341ba
SHA1 019a2c1db3ac7a650ebc1a2a7e7033872b27fe74
SHA512 1838f3dfce430cdecb4cf46f187a33ee436f9af486861514e95a7c9e23c982ed0423db544b822c35ebb457857035d2fac08d5d136fc1ba2163e8043606659242
TLSH
T15EE00403D71341F0C00C437500437F11D7D3C130115113070F1053543C100004C70F10
MD5 SHA1 SHA512 TLSH

Submit Download

43f6385d-875f-4b2b-aa31-550bef4dd18f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43f6385d-875f-4b2b-aa31-550bef4dd18f.tmp
Size 18KB
SHA256 e176006fcc782b1512ad7913c34d5eeb70d03dddab0f70902b5bf338881e5864
MD5 edae5fe1928cfdd48b962f3c285dbc85
SHA1 d6968be6b61aae2e4edb3886d53094a4ac957db3
SHA512 67b30922e5880644cbf4f6f46fc318de3cb6bda06f88ca6265f3a9d98c1359a4225e878c15ff36192a106df7b4d26b4fe20c8bd9ab8a5c64816130a3ab563c31
SSDEEP 384:5cQkUSvtsN/JdLAfb93OdSh//ma7U83vaTZchFIIlH:5ctkAJG6/uD83vaTZcrL9
TLSH
T1EC827D7578B9AC3B4EA3A651F44B3603DFB08157DAC41F44E9CEAB2C01DA1D8230B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4af46781-0990-44b4-b0b5-39e72e6daeb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4af46781-0990-44b4-b0b5-39e72e6daeb1.tmp
Size 8KB
SHA256 20a95ea539a03bd43251d8822760eefeb3841f8a4e30a880b6d41c97bfd59bb6
MD5 643fbab5b36d5b51a5724c7ffa03b2c0
SHA1 03367c4c2c295da8b7db2c0b32cc2b8bd91e24b7
SHA512 cce755689be67b7f592df7cb393d3de247c8ded0a97aa3ee49a16e83d49f59852481678148131270826de04f4f9a5fae8fb9afcc42575b2ca1280d98661cdd61
SSDEEP 192:BONJ6JUm0QmiUyI9so//ZsPC7dBC8T+U6:BONJ6+mEJso//mae86U6
TLSH
T12B02D938BC68BCBB8EE3AE45F44777239FA4116BDA951F84DAD85E1D01D715C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

752bd578-9599-43a8-81c8-0422a49ed099.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\752bd578-9599-43a8-81c8-0422a49ed099.tmp
Size 26KB
SHA256 ad8699d0f0a00e74f89ad24ae01c8f0a98498554c9f0259a6023736aba932660
MD5 1871e046af0f49c6a49f98327eb3b5a1
SHA1 a89609e26daf0558386601ddcc54cceb601fcf59
SHA512 e3978f79fe1a0ca4adecc6bce5cb32cb3d62cf6064f3dbe1e590eba3e4589f3013dc13d57cb8222e7ddfe5475e04d66acc8aadceafdf5bd828484ec885135c66
SSDEEP 384:RNiFsQkUSvofsNh8TUNTUlIlldLAfb93jdz2h//ma7S83vaTZchFIIlH:REFsoowgNAJpzG/u/83vaTZcrL9
TLSH
T11AC2F7F258D7983AC96E9743A33E2E038EBCC157F9845A40B789591CCD961BFD30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

1e2bcff0-d645-4334-a15d-688717e74822.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1e2bcff0-d645-4334-a15d-688717e74822.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

249b3149-57c9-44d7-bf55-1fb7f95f2c0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\249b3149-57c9-44d7-bf55-1fb7f95f2c0c.tmp
Size 12KB
SHA256 493c34e15ecb0cb463cac900734753a067652fc97edb44bf3ca45da3bdad9fd0
MD5 bc478b07993f95057e74f880da7d1d96
SHA1 0fe2f6cd93b82d49170ec21790e8d8f09b203481
SHA512 4f639a45080b25926c4e721bd7b41966136a92d5f06b58441df3cf7078ba194829cdccae081eb3f9dc550cc92a686b9e304c1e5dcb376e2990e65cc40ec0197c
SSDEEP 192:sxZHRDWU/f8sTnWIdphOW3gHW6+WNkgkjbY369bigIg52hJ:sxZHIU/f8sTnX6HbmbXXMr
TLSH
T17542B7526D34A97B8CC7D21DBA15BB13E7F9102265D11E88FAFD892C05E77DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42bfef51-7147-424b-839f-2d341e174f6c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42bfef51-7147-424b-839f-2d341e174f6c.tmp
Size 11KB
SHA256 06de50e86efcccbd3e1d6925a357b1c2e76714e9d98f2c0cc407c37479450821
MD5 6d2177a7deb366d907f804243e940236
SHA1 b4ee3ef802429d76e8feafa5df736d2e14924a06
SHA512 a063ac0fbf7cdbca33cc22300fe1b8cfa636119f038b74537c6c20dc1acc5e2ba499eeda131bfebaab06c99ec0bd55a5e83e2cbbf7678e80be44fb04ab2bbde2
SSDEEP 192:sxZHR8WU/f8sTnGIdpzW0HW6+WN+QvXY36uomgIg52hJ:sxZHdU/f8sTnn7HbpXXDMr
TLSH
T18132B6516D24A97B8CC7D20EBA55BB13D6FA103295C11E48FAFD8A2C05E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47586dc8-a4ee-48c5-8da3-19d1d89a91c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47586dc8-a4ee-48c5-8da3-19d1d89a91c1.tmp
Size 27KB
SHA256 7f98b78efd6553c78d57733d2cab2d6fd83568b254f153d9047a603478beed2a
MD5 c7c3e4f45fb11abb1b47b499f7277eb4
SHA1 f8889a5942159a41dcf93bf9044b9160e8ddf6e8
SHA512 47bb9e77aaed1fcd577585cb6ea9e9f693348a3443a0ef34fd3b7bc479f9a703b410089cf8bb32ffcb32f22dbc39a5f9c72d43d71b08c32c1e9eb14ca03fd593
SSDEEP 768:VJKlm7QWvUYm08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/uroVQ:VJKlm7QWvUYm0u1ja8/L/E/lVQ
TLSH
T1FEC2FA3B740CCB7E4FC05A9DDC5A6F976EA802C796588D404BFA984C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5254e552-e4e7-4029-87a2-d9c053fb7c67.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5254e552-e4e7-4029-87a2-d9c053fb7c67.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54931e90-8d20-45d9-b7bd-247a804b7317.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54931e90-8d20-45d9-b7bd-247a804b7317.tmp
Size 12KB
SHA256 7aa870d7cc692f70ea77089ae8cc5b0ae8437dfb89db85548ed2920ff4e3feaa
MD5 f53d9164263cf440e93630c188b4f515
SHA1 8acfdd57a73acf82a101e3f642dcb1913e5bed35
SHA512 d797ced2d534b03dcd3a32282d3b777f394694a2da2cb25e29d86576cd67c7fe11bf0272c6835fc8e11066cf550a537ad868a8d2dfa84705ec3c55a4cda4c92e
SSDEEP 192:sxZHRDWU/f8sTnzIdphOW3VHW6+WNkgYcjY361bigIg52hJ:sxZHIU/f8sTnsHHbJjXPMr
TLSH
T15A42A6526D34A97B8CC7D21EBA15BB13E3F9102265D11E48FAFD992C05E77DE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

687f6d2d-e405-4502-914a-fc7078e92fd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\687f6d2d-e405-4502-914a-fc7078e92fd2.tmp
Size 11KB
SHA256 93b779d5e8c2751666ae299c808e49454574aa9fde134d07dcd7b0fea6ce7337
MD5 80b4537b356a3c4a1c69f680aa91c227
SHA1 67a4b248c9514da52a07626ed8fc1031aff0027f
SHA512 dd109849cd8e57f8ff9f210c7ad3ba55810e8ef4d0174a92f8574f81100f20f2d81066ce7cb576ede25ee3860f97be35dce1e488d32e3065ef435ca6e82da5f3
SSDEEP 192:sxZHR8WU/f8sTnWIdphOW3gHW6+WNkg7YZY360bigIg52hJ:sxZHdU/f8sTnX6Hb+ZX8Mr
TLSH
T1D642B6526D34A97B8CC7D319BA15BB13E3F9102255D11E48FAFD992C05E7BDE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98ff6a60-aa08-44c9-917c-cee36dbb12a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\98ff6a60-aa08-44c9-917c-cee36dbb12a8.tmp
Size 11KB
SHA256 92b7f3d07f32684eb37eecc0f6f472a524dc8ff6161206b8bca500f272360b00
MD5 a86c7c83bf5100d8af4cfef0106b581b
SHA1 64e7a909cd03ef47499ebee80194c8cf1f61c63e
SHA512 1c65a071e46c522f37025e6c0e230322b84f696911414279c1e1be4def0e46ad00c3b4acac7d2f52b09ff6e542662ebf95b1c5126b87371f79ecb3f4ed514994
SSDEEP 192:sxZHR8WU/f8sTntIdpzOW3SHW6+WN+7YZY367omgIg52hJ:sxZHdU/f8sTnOqHbxZXEMr
TLSH
T19D32C7526D34A97B4CC7D209BA15BB13E6FA102255D11E48FAFD9A2C04E76DE620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 263e0500933f9b8451d0f2194356e8f02b4762160e883de5af9e371ca7af9362
MD5 d5f0a7b9ca6d80880e55f5796e6ca649
SHA1 d49fc7f9856cf77e73142c401e86452c08cb13cf
SHA512 126dd689790c8e150191cdaa71f5ced06e8d73d4315ca927749930452ce34f1b6b59573ad6030d5158587b72751a6581f32b7d0cc175f4a459a1ca61dca9b18e
TLSH
T183E0268C15CAC22EB7496B57017CB38CCB80379BDAC4AA1F2700CD857607088B6F26A2
MD5 SHA1 SHA512 TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
Size 44KB
SHA256 ab4b94d4dba66f2bc35a0c01df16235c904cef663566a52ee11ba0ebe19f0f07
MD5 140ddfd71702f836a7db3042bf666ec4
SHA1 316a3a6126c81523115a2837c910a75a4cf329e5
SHA512 9d339365c99cac6eee4699c2a22384381152acc93fb51806b02db644ec6987d5db7b6a95e5e01179b23c4c3512fbf662c43e216bca432774730e77a07321c6a9
SSDEEP 768:9Gq9m6VTy36R0xHzH6udToTTdZHCgZxMFx2vUwuELvMUmiQn1Gx4uYbx6670MqF:86Vs6R0xHmXdZfKx2MwztHQs1oxDqF
TLSH
T1D013023F91BF90097EEC32D01B086B10F532089CB74D043AEC66DE2557E6BB126A5EE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
Size 52KB
SHA256 6850b5dff15848cd10a24b74cf76d245efe20360053e3565c514651340086f33
MD5 2224dc0aba381cd27e50592801d09bd1
SHA1 1c52aef0422e2caeb8c37f372824c3f7b0ce4692
SHA512 9269c88913a73a4b565ab612af4fdb31ddec7f4a00e38c123d51dfe8b4c918419138f55c4084bee53483b3e5d08959b1e155f6e982dadb75fffb200a601cc3ea
SSDEEP 1536:vlMKj8wCh+Eo06S7quEpxfmh+jy8xKxELPfohsHvYQ6O:N6t+S72JsyyyYOHQHO
TLSH
T1723302E1BBCE61A9D509847C9966D9F1D1E090BCEE32E5B28B04E8E3C14C9FC5E93741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
Size 45KB
SHA256 767cfc11ebbf3a29aaef8cb805a749662d651e30ad2ba60bfc4c23d2848ef062
MD5 2577bd8e78c113968ce39758c3bb5771
SHA1 60a666c6cdc4df1e69faeec7ff07e02bb5657057
SHA512 8839f7129867f15cb7ce2e9bc8366264c8877ba9886cc5e06cf7c24b17925f8cee096ae7e8ec1a607cd2d99c4512e1457a60dc3c82193d1673294c7e28e666b4
SSDEEP 768:jbM7trVocGgmscwZU+vLVWRMOmmLKft+cNbq584LW6ctbaZnVWgG7j2:k7MQmqU+A7mmCtfqLWDeZcd7j2
TLSH
T11D23F1EF708F864460AACFB504EBCE4BE606AC5C197C2D8260FF948611E15A8CD3E597
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
Size 177KB
SHA256 90e339e0872aaebe8bb620d187f53ca1f9a4d4d075cbfef37368663d5a114a78
MD5 344c65791287bfc8d593df9d967284eb
SHA1 e39ffdf1c908a84876d281ddc2542f423363ad22
SHA512 d9bcc7f22b1a4b632513921ae4468fb79d8f040db11c3b38682467980c99409e691645ceb6d3c75e93dc40b76e3400c4babd9079ac52d3fd4b094b8504398958
SSDEEP 3072:QzaEiA4OOGHQp77VmWfplhzY4AW7JCsOAdtUgAj3wXZ9z:QzaEKBHmoTZY4AW7kTiUgALwXZ9z
TLSH
T1A304225BE5036E3B30480F41C03828CF4B5F619AEE3058D97E3E5857697B20774D2AAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 33KB
SHA256 faa24ec881e6040655c187a681d6dc496eb8aa41e1bd0652a180b3a40b457187
MD5 f953f499c9824953791551bfef65fe61
SHA1 00fbf8d23d0e9549798383179c9b0eae5d653f9f
SHA512 07bf316d186ac8d6eb8cf860fd0dbce854ae74ae26276be3950bd32b06894c7b24268280d504bb490218c5ec0e85b4eeb7e858011dcf4de64bbb06e4eb296fca
SSDEEP 768:Pr8FwJ2kfmG7rCq0GJtSBVRF0UGuEuOZejwpiUCTVwiYz:PVJ3fd7rCqduSduOZnIVVwvz
TLSH
T1D0F2F185B0036A346E502FB459DBE6CE1FADF8041A5318EDCE9DC30BA394C7648792BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 1024KB
SHA256 4bc9089b7797c1c2722800dc858878626eef8415cbc56d7d15c4158a85609091
MD5 6892f90d94578895e15e6574a7e5d0af
SHA1 12d77bcc8088854427164276bbc7530b67ce69d0
SHA512 8c041bc59d4f5b037400725a3116fc9a562cb4befc5ed29abedfd821f8802493b2f00bf8bb948a478406265433e392f9fabd66d3df135ddacf49e75c9c11c14e
SSDEEP 24576:oKkK0aQz9heg7huBnjgGW+mGwEMdHdKzruWfWQY:JkKJQz9heg7hu5pmGBMdHdKOhf
TLSH
T1AF253304AB117114FD69E2B5EE936AEF55210562222E43871BB92CDFF7E12887C33367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 720KB
SHA256 773a52c498042e205a262b79c0bd8322e8edf08716c984baf103bb0ef9375ed0
MD5 f527221fe48979b3edcd4f26fcca2f8f
SHA1 f3e85f0c69085119659441a72f1ecf4692a482a6
SHA512 00809d1fdb30aa46c100899fccc2bf7bbdb756f648f5930fe816c493915fd884013233a768eec13e41fed29e5b5d3fd42b4b8e76d5d2dbc22e3d3fd78617da2c
SSDEEP 12288:J0IYKmzf5DnjZsPF6iYZdAB1DOJVgRG3tvTp1D9CQpelDhKUVi:FetlsQia2bCJek5p1/4ra
TLSH
T110F423AA33D53846CA7AD3B58C4164ED86211D0BA3CD2CD4CA845869FF79F84CEC75CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
Size 45KB
SHA256 75b623a5c9a70af3999e496902684b0973b1c937f3c9aa881b51b32cb768c069
MD5 322a95c99a339e5696a772c47cd851ff
SHA1 a7227cd5fb3d10ddb803c87401b415fd31f6ace0
SHA512 23e7a2d19ff80989f5426db65e980ae0f9a901df4fea2c2e6eba9d3a9be77ed9b8e30c003761e08fbf9f381b3679ef931227d3f7d6866abe3efee98c94d068a2
SSDEEP 768:e6lh04k1CrMhQadgvl53oEimdj9qlXykqoo476BazoVpzX0trr0gjDjz9FtoOzIU:NG4kjQadol53bDlm/zoVpKHVjDj9o6iI
TLSH
T16023F1499F526779F5270DC0F2E6F27B3D72871BDD6A64222A4200A5C283F353D51EA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 24KB
SHA256 34e38f3008a1ed9abebc960b7ce2beb8a7d71eb44a6dd75b9eac1d26c3c60b01
MD5 64ab522e460e634cabc931ca0be6c5b6
SHA1 bf49dc9a86c1b84cf6fb83c0744899b238df244f
SHA512 137b4413e7a2b7b2b9e1cb7120589566a74307c8a56fcff7b2c5a4e6e71b5ac7a48632b8a43609c55b1f65ec6434c44017d0c2f4336be8bb72675ee965f3096d
SSDEEP 384:xgwWuFdy212lQZBag7JSipMifM/IHgZnUZZ2X/Mk3csmSk0I65Wd66IWi98WUwtt:x/t7pSuMaM/IkUj2X//zm/ewt+8EPAO
TLSH
T118B2E04410EC5736986512DCAEBCAB4DEE3CF4FCBBE51B10B29B58B1291131291ECB4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 dfbee3200710a979485afb06fabd15632fa3dfc8c7d755f740e28487a3cc81b7
MD5 4ae5b4e56c2af5332a7c54289eca0604
SHA1 63c69ff033614dc2949302f161762cf3d6fca294
SHA512 f2da5718b6d4c70b9766ec69ab8992593be9daaef858d0d3bb0366403d781eeb92fb7a9dc7b41fad95743806f8f4ed3f3b4e8316751c49a36f2a3dc244c126b2
TLSH
T1437183C064C4C034CB9440F185D129A737376B3B96C3DE670D44C87D9B8AB76D1028AA
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 fed694d63207125f8fee828a1f7e0b79a386467d20e3a128145092c3fbbd8d84
MD5 ed666801c455ca8b41fa941ca9cef87f
SHA1 d52aefa4bf00daec685a3308c2b8945f1649fc5a
SHA512 349e121f56b2559be1ff5ec85f8fe2b10bc0b9e750b4b4b676507143286ffddaca1f66ba147347dd7f1667b809029b9534f3b9d2a70f0ff7923e05fdf42b2e4b
TLSH
T12A8184C4A4D4D028CB8494F191D129A7373B663BEAE3DE570E84C83D978AB75D4068FA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a5c1c89377680bbff351beb81609f82eaa3095b46bb2cf264dab86af67666bfb
MD5 11582802994d84455b3ebacab75be41d
SHA1 d4a61500089c927c77a977a69c8baa6bc9b7cef3
SHA512 058653a70c5a4166bd352b09a3d125e6b23fa835af07d9da95228c544ebf978f20b7573d808c5b60e43a047d2e9a16b5b7f3f30d9960cc160101d6065f12ab06
TLSH
T10181B4C464D4C028CB8494F181D129A7373B673BEAE3DE570E84C83D9B8AB75D4168FA
MD5 SHA1 SHA512 TLSH

Submit Download

399595c2-a33b-406e-9ef8-b977d725faa3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\399595c2-a33b-406e-9ef8-b977d725faa3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1f9c9216-ed56-424b-8d65-32854f3aaaf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1f9c9216-ed56-424b-8d65-32854f3aaaf6.tmp
Size 7KB
SHA256 5d81c1955e8ef45b23d6db6c56ce876f5e4d842e149660919d10eb6b601b1213
MD5 4682c9e21ef131806a0be775aecb057f
SHA1 73e175eaeab1e17556f804f0a92e99e225ab1ff9
SHA512 f8e0c5c79fa1c91c105c6b908010ba628c51ae96887cdaae9b3eb699b57ba9d2595868eefd04884102b8896748aff34d616f8a1a91598bea875f7a280acd90dd
SSDEEP 192:DgwHkRVHqnGoF+g8kEEBrux1OvryofoJm+nf3t/Fx:DgwHkRVHqnGoFd8kEEBruHOvryofoJmq
TLSH
T13BF17CB7C2E8C62DC85266F0A7146F2BCF1E061852283C2B89D5EF9797E3571D20564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48120a6c-1ec3-41c2-949f-d15bc9767bce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\48120a6c-1ec3-41c2-949f-d15bc9767bce.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

7d89ea1d-ecd4-4d9c-8e61-749dd69235cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7d89ea1d-ecd4-4d9c-8e61-749dd69235cb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a56ff7af-0cf5-42a7-a943-fd5f828be154.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a56ff7af-0cf5-42a7-a943-fd5f828be154.tmp
Size 6KB
SHA256 4d5889be0d2732e7c621d02be2f40c286d9f40951915eeeb078ed0414a0421f2
MD5 d97a16d80b3a54ac8fa40e13c7d552ab
SHA1 f7734e212383f84b7644cd04fd8c49db4d752f01
SHA512 6d213999dd1a49a102ef866aab693eefec4dbdc2e243e87de9a36ca16e73810840ac8c20fbc058b0250a2359076648ed9c43f5f72f9a5f9fe8cea60ca4df3565
SSDEEP 192:DgwHkRVHqnGoogx7kEEBkrux1Ovryofof3RXr4:DgwHkRVHqnGoXx7kEEBkruHOvryofofy
TLSH
T121E16CF7C2E8C62DC85266F0A7146F2BCE1E061852283C2B89D4EF9797E3571D21564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\a84a0303-8bda-4e17-89ab-c403cf04d88a\index-dir\temp-index
Size 72B
SHA256 d6f62fcb39ace4a58a07f27077ac99d90c22abf84f3ee82136781d4a6958cfbf
MD5 2e47298a89f7d7d2eb27bee847d2d8f1
SHA1 0c520c6a7ba4e6fb166528a4e4e4726024d7959e
SHA512 4f62e39bf6ccd6bcd916399960fa1eda67d5e66a25183b2872db8fc36c9bd0dbf91737f64b369762272e59483e9815527fa0e22bf8745fcdf661c412bc4f5bfa
TLSH
T1C2A0021011D10EB6C56883712159118232914AAD53150F1741A5D1B8CAB31429741407
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\a84a0303-8bda-4e17-89ab-c403cf04d88a\index-dir\the-real-index
Size 48B
SHA256 817c78f576e1118756a6990d3cebd0e5c12c327b9c4eae063a153a726d6639ce
MD5 8eb77ebd20817f3cfd8ef9192318c6ad
SHA1 87458d439f41a498722185fc042137ce50759181
SHA512 8ce94b00212564e912661e7c9a0576a35f51acdc07accabb0cc606089a79ab75b73862b2b4422651bcaf302251a98e357f2e8c01ae89fd1a1762c8dc925069bd
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\index.txt
Size 141B
SHA256 58acef8e201da97fbbd137543e7292e6027be8c8d4416a7725e799921145accb
MD5 ee4f96e64f3ac95b2cf0c9d0f1ad4714
SHA1 149bd551d8cad3817dba2272e1c17a610b6eb074
SHA512 9d5d790840f1ffbc0c210237d317433c470035b35ae499550fca2efa5d8d58b9d8b910d478a8473d981b1f487962c05475bf39be372b26ab924a067258af23da
TLSH
T1A9C02B9F843402011B811329F851190FC3BECC8E0DD484ACF1C034A4A93C012BE827C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\index.txt.tmp
Size 135B
SHA256 7d7a802beb30ce3cf156f43cd9447b0b17b0ec119522fd5f3005c566259dfcd8
MD5 6bbc034b75e26fac5cfa2fcc56f6f6eb
SHA1 f3a85038cd8c85ca73835018a6e44d6bde3e1b89
SHA512 aa9f0bf49108a48b7541a3e02a515c99f9573364d728ea38036aab591b15523ff10ebdc98388efeadc7bc4419997219aba2991c693aea80992ee2dd09c1df9b0
TLSH
T116C02B9F847442010F816328F841190DC39E448E0AE044ACF5C004A8B93C0117C837C5
MD5 SHA1 SHA512 TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 8KB
SHA256 949140883ef1a005487cad8599f249b337064a5178a90d25102d997253edabe7
MD5 108d0e4919a17218fa8860b82d8708f4
SHA1 505f1b25ca9681795118dcb96268da1c87dcb5b8
SHA512 e9cd5c3fb05336a28be11cccfe1abceace49e96836218a0777e09e3937cdd74e92f429a7d5ee4263315db4e6c9d5402a88d4d265dddeebd53d8945787a2c9456
SSDEEP 192:57tHQ09byzOGKOz0xoYbKqbxpd3sVnQHtzz+Fqt4:rL9bqOGXK3sVnYz+FB
TLSH
T1E012E9D5AE7CC46707B62178E985E8573C7E71B32F8BE0D3F18D4A28B44158796ADE00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1cdccba37924bda_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
Size 8KB
SHA256 1524235eae369da3d753e7631e065becc90260dea863f6a2c23861cbb139b584
MD5 450f926c6033b51d9a490ceff6ae2b96
SHA1 4e4ef5ac2a611b8dc214b660157e83477258e08a
SHA512 d6d6e2ba8b49f2fc483c223a363ff6e0df644c09afacefbcfc192607918e373b70c46a29b83cc1b34237880128655f5acf5ef7a66e447609c8810d4a231e2d68
SSDEEP 192:bYWwLkRd8tCeoOf3GUw9MDeaSXLwGhtVhdzzYS8gWthwsq:MdL+d8tZNfWUde1wGlz0S8B3e
TLSH
T1431294D243A17827DE6753FE16EA8923B77580017F83E32965A223306C367F34D9D51A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 cd9f2268214554616d824194fd6d789b751041668570b85709cd9fd69ba44c6b
MD5 afce6f96483444061161ff84daf287bd
SHA1 b2eb8f7f3e7dd60017418623d99a231aca23a24c
SHA512 b27bb55a0dd8e4424070842bb76f5e1ee98f5475fd068381d555b22e392b6e60d49b53df4689fb3408f630bf75d956eb7bebbbb7ec38d2ceb151c5913682b9d4
TLSH
T194A00216038A30ABE53797711149396463937C53454142636CA0D0AC8DAA5909B65D01
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 b6fd0ee4c334494e5212a353bc8a64913b28996c7465dd02d1901521c99d20e3
MD5 33d23e119490fd83d3f73036f06c57a4
SHA1 715aa8c432694b15ba9d64a12ed10c7fee119e97
SHA512 bad020614b14c0f67629cd362663a10382a6c9210e58af4aa4ddb5ffd3be0fd0377c13fd8b8e54f3d9288f8d5b364d71325015593b11f911aeaf887ed5a42a87
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5775c3e5220048ef4253ae7aff50bfb186eef8ade8ce1c731a74fbbbdb31a4ad
MD5 ae81d80da2e5ab156d533fbddd52f796
SHA1 f41e2dc36cc61ef4e961311337661b5b5f2e65b9
SHA512 d22fe9a7574c14ebe22d41cd2cde2857cea1f641f9839e23966e58c9a79182c1d0e48e109b53e9b6ee0dbbc8169605291b314e8a5c68bf57c0c8dc85b4a941c1
SSDEEP 48:K098xN/rvQbjWDISFQK9F1nQxVAYGH99yLGDGmGHGjGNGlG1G2bGlGoG9ISGjG29:KE6kKbqCeDyKcEXDOKE4Wd
TLSH
T10B916D04707B161838BE795841F4972B96423173704AE52B7FAE52B24E6FE048EFDEC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

bd53347c-3ff1-46fb-8544-7497a8549cf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bd53347c-3ff1-46fb-8544-7497a8549cf6.tmp
Size 10KB
SHA256 52813408572cd2434a24a29c13b27b2d135fdb0c2159dcf313d0804eb6ec9a2b
MD5 b6f069e9ee30c5da62ad6db2225dc9eb
SHA1 9df9d35831813f03783e2c5159eadb0e3dad16a0
SHA512 1316ec9c7d899aed5a07f44c9ead9dd98714473efaa20d31e39041b2635354f2b6fc42f3b0caf07d479528d52a05f25685d991afcbe022e45b30cc1ecf0f960b
SSDEEP 192:sxZHR8WU/f8sRnGIdpzW0HW6+WN+VS/Y36nKmgIg5RJ:sxZHdU/f8sRnn7Hb5/X2x
TLSH
T12B22A5526D38A97B4CCBD31ABA15BB13D7FA503295D11E48BAFD8A1C04E76DE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c619cd94-9473-4664-aa39-22c77d782464.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c619cd94-9473-4664-aa39-22c77d782464.tmp
Size 10KB
SHA256 5a274ce91eb6511596ee51412b49f2869dbdbe3f74bd6df8ea1f349031e12053
MD5 9cfaec0d770592c97513cb5df6daee8c
SHA1 b4dd7834f570101498fe50c704327fd77976472e
SHA512 18d67ac65b0ccc713bbf2394d86e7e3ac9d19592095110992bf11d19275f5a637ddd33ee3a5c74dc6f49bce0f6a68f7a4447746c7702ce4444be51ff90448093
SSDEEP 192:sxZJR8WU/f8stnkIdppRHW6+WN+VS/Y36nKmgIgrJ:sxZJdU/f8stn9LHb5/X29
TLSH
T17A22B6516E38A53B4CCBD30ABA25BB13D6F9503295D11E48BAFC8A1C04E76DE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66720565-33cc-46c2-b0be-3b8b96317b41.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\66720565-33cc-46c2-b0be-3b8b96317b41.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d26faadb0dfdfc70e2b7b8e9a601008a4aee7bd20ec7af7b62e3fc0c26e8cb92
MD5 4db8ef76e2702c4ac32ebe91aaeb2d57
SHA1 6fba38df33a88c2affcefcc349d5949f6ed67b84
SHA512 45e786523c62fea0a3dcc2e685b3fae9e7d68d04bfd14643e2acd6ef19a5f6964ee82084b92626e3606d1451901945498d074c55806babaae7ad150acc37303c
MD5 SHA1 SHA512

Submit Download

a89ebd7f-9205-44c7-9ad2-bbf67cf57f8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a89ebd7f-9205-44c7-9ad2-bbf67cf57f8a.tmp
Size 26KB
SHA256 096e8ef16b3efed2ec1bac129bd86fa50985e547793a2e9e844f13e970b92201
MD5 b358c0062a23e05064a8d84dd6977e67
SHA1 4db168329031215918d26fc322847b6ade4e47ce
SHA512 d28440035a918b4f7a395dcac5ab36e31340f17d9349c43d6c73b626438fb4b295688907401bb46010ee29536ce57678c61784349e1a6f73d413c7d1481f3591
SSDEEP 384:RNiFgQkUSvofsNh8TUNTUlIlldLAfbX3jdz2h//ma7p83vaTZchFIIlH:REFIoowgNALpzG/uW83vaTZcrL9
TLSH
T152C207F258D7983BC9AE9743A37E2E038EBCC157F9845A40B789591CCD961BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee2888ca-fbf4-4d59-b406-95170cf35f17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee2888ca-fbf4-4d59-b406-95170cf35f17.tmp
Size 18KB
SHA256 9ce1461c856690081744d873c91443fee97e6fdf8e2262c7bfd75d88d5500d39
MD5 c3f36bb2ddd88283f169dd68eeb0804a
SHA1 7a85d934e0e745da4e364ce778113543ac57bf3d
SHA512 5c38023318f23a577ba29fc55a6f0af27d7a97d6f53e02913c3df39f4234138711160b74bff5e43ef28159339404ce1433c29f1b18a1e9cab447d91e5b8a9b8e
SSDEEP 384:ucQkUSv0sN/2dLAfbb3OdSh//ma7U83vaTZchFIIlH:uc01AXG6/uD83vaTZcrL9
TLSH
T141827E35B8B9AC3B4EA3A651F44B3603DFB48157DAC41F44E9CEAB2C01DA1D8230B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6b5e1b3-0605-40e4-95cc-04e884eeaa19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e6b5e1b3-0605-40e4-95cc-04e884eeaa19.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f30e513e-f9cc-4b52-9157-0870960cd07a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f30e513e-f9cc-4b52-9157-0870960cd07a.tmp
Size 8KB
SHA256 0640b2672e4932137328ac81004a955628b9604abc540f32bfe21740cc63012a
MD5 5ed6d28ab9fb4cfd0c3993452f1e6f80
SHA1 a8c73593d015bb70609154af641b856e107e1bcc
SHA512 3085a501e4aee31db86767ea5a3f84e1ee29e1ce69ac20a90373ce9f217a5eb20d948099e8765e451ac96f20f4b10d9b5a286e3af88dbb923d52155382acf867
SSDEEP 192:QTONq6JUFCQmiUy769Oo//ZsPC7nQez3Nx8ZqyU6:yONq6+wsIOo//ma7b83U6
TLSH
T16F1209357878FC7B5D92A995F08376139EA44167EB896F84DADC2A1C02EB19C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 28f61b6df0e77a895ff482736791f16561b49ba9b4f4558777e27e8d200d6685
MD5 e265b4659b4ed52278892f98740d3903
SHA1 d76698bc01e9604019231e3aeadddbb41577698e
SHA512 81467f1afa76aac33c87df3a1943bb4b57b0524b611fdcdc45646a09f21aa9e392797ca34f610aae69bc0ca1243dca9a655ea946d1678736113de1170d2004e3
TLSH
T1E541E65CBAE90148B3B76F4A9BF6A86D447EBD371F07D46E10510E4F0A23A40D962B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download