hxxps://web[.]archive[.]org/web/20260616184454/betchoco[.]com

Analysis

user interaction
yes
max time kernel
136s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/06/2026, 03:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://web.archive.org/web/20260616184454/betchoco.com
Sample260622-edbdzagy6j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134265737524606213"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{33E2D0AB-9CE5-4F67-8659-4D62B0909C3D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5536	msedge.exe
5536	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1472 wrote to memory of 3108	1472	msedge.exe	88
PID 1472 wrote to memory of 984	1472	msedge.exe	89
PID 1472 wrote to memory of 3124	1472	msedge.exe	90
PID 1472 wrote to memory of 3124	1472	msedge.exe	90
PID 1472 wrote to memory of 3124	1472	msedge.exe	90
PID 1472 wrote to memory of 4460	1472	msedge.exe	92
PID 1472 wrote to memory of 4460	1472	msedge.exe	92
PID 1472 wrote to memory of 3588	1472	msedge.exe	93
PID 1472 wrote to memory of 3588	1472	msedge.exe	93
PID 1472 wrote to memory of 3588	1472	msedge.exe	93
PID 1472 wrote to memory of 3780	1472	msedge.exe	94
PID 1472 wrote to memory of 3780	1472	msedge.exe	94
PID 1472 wrote to memory of 3780	1472	msedge.exe	94
PID 1472 wrote to memory of 4692	1472	msedge.exe	95
PID 1472 wrote to memory of 4692	1472	msedge.exe	95
PID 1472 wrote to memory of 4692	1472	msedge.exe	95
PID 1472 wrote to memory of 3456	1472	msedge.exe	96
PID 1472 wrote to memory of 3456	1472	msedge.exe	96
PID 1472 wrote to memory of 3456	1472	msedge.exe	96
PID 1472 wrote to memory of 1784	1472	msedge.exe	102
PID 1472 wrote to memory of 4116	1472	msedge.exe	103
PID 1472 wrote to memory of 1784	1472	msedge.exe	102
PID 1472 wrote to memory of 4116	1472	msedge.exe	103
PID 1472 wrote to memory of 1200	1472	msedge.exe	105
PID 1472 wrote to memory of 4524	1472	msedge.exe	111
PID 1472 wrote to memory of 4524	1472	msedge.exe	111
PID 1472 wrote to memory of 4524	1472	msedge.exe	111
PID 1472 wrote to memory of 1820	1472	msedge.exe	112
PID 1472 wrote to memory of 1820	1472	msedge.exe	112
PID 1472 wrote to memory of 1820	1472	msedge.exe	112
PID 1472 wrote to memory of 2044	1472	msedge.exe	113
PID 1472 wrote to memory of 2044	1472	msedge.exe	113
PID 1472 wrote to memory of 2044	1472	msedge.exe	113
PID 1472 wrote to memory of 2008	1472	msedge.exe	114
PID 1472 wrote to memory of 2008	1472	msedge.exe	114
PID 1472 wrote to memory of 2008	1472	msedge.exe	114
PID 1472 wrote to memory of 3636	1472	msedge.exe	115
PID 1472 wrote to memory of 3636	1472	msedge.exe	115
PID 1472 wrote to memory of 3636	1472	msedge.exe	115
PID 1472 wrote to memory of 4600	1472	msedge.exe	117
PID 1472 wrote to memory of 1864	1472	msedge.exe	118
PID 1472 wrote to memory of 4468	1472	msedge.exe	119
PID 1472 wrote to memory of 4104	1472	msedge.exe	121
PID 1472 wrote to memory of 4104	1472	msedge.exe	121
PID 1472 wrote to memory of 4104	1472	msedge.exe	121
PID 1472 wrote to memory of 2740	1472	msedge.exe	124
PID 1472 wrote to memory of 2740	1472	msedge.exe	124
PID 1472 wrote to memory of 4124	1472	msedge.exe	125
PID 1472 wrote to memory of 4124	1472	msedge.exe	125
PID 1472 wrote to memory of 4124	1472	msedge.exe	125
PID 1472 wrote to memory of 1864	1472	msedge.exe	126
PID 1472 wrote to memory of 1864	1472	msedge.exe	126
PID 1472 wrote to memory of 2408	1472	msedge.exe	127
PID 1472 wrote to memory of 2408	1472	msedge.exe	127
PID 1472 wrote to memory of 2408	1472	msedge.exe	127
PID 1472 wrote to memory of 2852	1472	msedge.exe	128
PID 1472 wrote to memory of 2852	1472	msedge.exe	128
PID 1472 wrote to memory of 2852	1472	msedge.exe	128
PID 1472 wrote to memory of 1284	1472	msedge.exe	129
PID 1472 wrote to memory of 1284	1472	msedge.exe	129
PID 1472 wrote to memory of 1284	1472	msedge.exe	129
PID 1472 wrote to memory of 4056	1472	msedge.exe	130
PID 1472 wrote to memory of 4056	1472	msedge.exe	130
PID 1472 wrote to memory of 4056	1472	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://web.archive.org/web/20260616184454/betchoco.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaf801c188,0x7ffaf801c194,0x7ffaf801c1a0
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,15680421791348082591,15966919290712817350,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,13897526644394614763,6834958255725162834,262144 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2648,i,6482473530778650539,660344918404382214,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,7446569561688419892,6262824114822007646,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,8017865421743057540,2714253133994975190,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,8924579058150764448,17844553749222967303,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,12257039432277645411,7783100564547499135,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,7672282650844517701,12225051702579072656,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,17496425251793666665,915749010765756793,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,13490531603032334471,6388159757817627108,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,13490531603032334471,6388159757817627108,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5772,i,1478724059773548952,2264702765895015652,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4208,i,279552499190048482,13809813600399536383,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4452,i,3346041669700732895,9215046743714737475,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4332,i,6333966266955020134,12902680940846019930,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5036,i,17384255572788431389,14338314975945181558,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,7911734339490693948,11568470438474001471,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,14289810402278512018,17616372777777900854,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,14483034187773634380,6066821070683994189,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4996,i,10875245045751907725,16924062042649065969,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,3798068951750902356,12615271387757449136,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5160,i,7304915464398203585,15936705665789931925,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,12972804271519349952,8421811578116885614,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6356,i,14565041178576795850,2535515062470302723,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6556,i,1745889539682547614,9513928628055771173,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6392,i,8183838761810944374,10367461841276165558,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6860,i,7620912047944509803,17174390094769379940,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,9241679185133925838,16788219188409687625,524288 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7184,i,13005899956892994771,3514721394546545314,2097152 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7700,i,17164590094562527587,15903059324270543143,262144 --field-trial-handle=1780,i,3321195235548140603,6761393140536680092,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25751d3ef6ba0faf15f30e0cefdb6e9126b7280336b9b627cd43a7976de3d1fb
MD5 2bb8e304c6ddcdaaaa892eedcd08eed8
SHA1 87dffdeb26699afcbfb499414efaf9142a8ec5fc
SHA512 1b3a06240ea767dc7f30d05fb344edb772203bef9fc1b05893a1bddceca69f69b285c671679f9e8c222ca7bcf2cd1f548ab3e7ac5384c40f24b837c0f111dafe
TLSH
T165D0A7203919F8C1C128117196114A547B2945436263910FB655585EDCB50C0A7D6FC2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 16KB
SHA256 b17b23990851346a40d733da642788136fcc9913a5e690865be124637f16bf66
MD5 e97f51ffddb5102e601f568bebbe6656
SHA1 80b1ed86320c70b9a17f9d5981a132b9a4a6afeb
SHA512 0561e3a1f680d2cf8fa0d19282359588fbdb3a508831810aa5059d6b7b072c840b06323d4ce4c66464ab016fdca47bea6eedbd765acf8c6a503ff2edf91d5fb8
SSDEEP 384:PUsJMhkvuJpDKSNflVDtakrzt2ro/zvllLMZ3u:8bz7Y0ztmez3LWe
TLSH
T12872D0A96EF500237B2B8CEE15D083948E847AF36D6B7DF642883067849C6A17D1858F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 36KB
SHA256 d9546128594ed4fa1d60162a2a4df67e174d2dcea48a9022e3b2e3e0b8d023ef
MD5 ca340521f0fa6e68c9edf319ac8614db
SHA1 555ab0016400c52225f778738d2f6e59e334d38a
SHA512 4c4f4eef2a5370f9ce0bbaf286759535ef50c27879b0bc7c41dff93773c058bb65e35b65184a08019c7b9589ead9490c3f79b6f2c156c00cddc1911de3aa7d19
SSDEEP 768:QcARQx5dqqE0R6b8xYm5NCfWrbxVpD1ZoowKYQjMiclfpORteCxhBBFewjUWhO:/kmfVE26QFtrbfpD1jKQjMpCtdBj7jM
TLSH
T10303E1E3B945AF499FD3DD06CC684232D3952766A2C53E443E6621D2737FCDA388B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 16KB
SHA256 6fb27be59aba920a35ab6fc4fb3c1e81972fbc534cb2ffcd1b315ae0f41398c9
MD5 79ed78036c513b5d9555dddbaaeeca3b
SHA1 082fe871f9d7907fb1db7146375c16ed84469523
SHA512 1038659580668259b5820d22e5096c06e89fbdcc75501a9d5c5a4f2bad60387621ab717301c9622a97713bf9a481785cb29d1b26e31caaca60ffa2d6ce846329
SSDEEP 384:m44/bmgTnvF333x0yovp8L0WO4Rr7gJfpJwMud4hZUk2As:x2mgTnv9B0J80WO+0fp2MxhZwAs
TLSH
T10B72D18B04C244FFF7D4BAA1230336B58398556BBB9486DFC414C2DADB6D5115CDD623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000da

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
Size 375KB
SHA256 431a3251deb71c9c6d19db7ece22c26583f9d8fdba96fdfbb6a5b27d4214e31f
MD5 a3e719f84f525e2c6689b3f6ac73c402
SHA1 e3e93bf2c5aa88529ea3c1e524d2350245e91515
SHA512 0816380a9e625ce2e34fef598104a90a2724096b4d627bbe790c58008eeb3c50c732aa24500caa54fdc46c7f63216533adfb46d119a74aff4ed421b9f381ddbc
SSDEEP 6144:bk02i6NJqyLQCeqg5Vici0bU4rCHA9Q9lkOmEeWxF9Mh+kLNYr7tHLh:bMNJqybeqYvxCHAmXmEevbK3Bd
TLSH
T1A4842368F4BFE4A2AE8449215E5E0D746F487EB21740540AFB7DE2BB2415C493B6F203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dbb610bddecd4a6c749a59550a7ad78e0889540ccc7bbabe07f24ce7dabd1a7f
MD5 7764cfe961a9ac0e3b7c17ee0cab6c0f
SHA1 f93a8d26032fb9a9049a23c9620521278e857247
SHA512 f81318bcda94efb3d21cb884e746c7ebef6462487627d2ceb866bcb0cc061bbf182bbc2e2907f158f7d767f1ced3fce6e9f79f25a953effe245f460278a4adf9
TLSH
T1B0717059C65D0C91E7601CF9EEF2B27131B284C409A3CED5951049FF670ABE98C6F407
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 f090ddf2cc04bf72814c850fdabea4737b11fa4fdf61343b841c3e8bd42f10d1
MD5 ed88fad6eb4c7852c89e5e0e89443c0f
SHA1 009fc8d1a0c123df4869ed5526cbfcf54b1b3b4e
SHA512 85e92bfac8143a59caa5c031d196a6f70b307a45f1cbcb9d24b650a729a73d87ef20136143332b36400756583a742768abe6dcc8df3beac2af9180088a89dab2
SSDEEP 192:pmVKCneb2YUjeMJlIiwn6BoWSVYpUk/uJi3uYmx0R3ok+X1xdL0K90DolEtmOR2r:pmVTneb2PjtJlIiwn6BoWUYpUSuJi3uF
TLSH
T1B2121D48838809E9CB009CBAD8E07DE9FBB041C514A7AF8F9014D2FD6A177DC295F287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 825c43be8bc1b8ec50cc5eff4d0dc07cf2871d8eef8c09aa7dad89b9b55bec05
MD5 bb7ebe89bb12b6eedd5953a21fdac0f7
SHA1 d7c8ce33c9ebfa1b41c6b29dd3628fdc839ad56e
SHA512 a8f640208c85b05e8060dd41ba369dc3e742c98ff0e44de215a36fcfb10345c276dd247fdc63b7f30475fea65ce6b6c98bc37217b4158d9e52dd471222fd027e
SSDEEP 192:MmVKCneOjJlIiwn6oWSVYpR/uJ4Ymx0R3h+9dL0K90DolEmOc5WoG1j3JLKN7/d1:MmVTneSJlIiwn6oWUYpBuJ4Ymxa3h+9R
TLSH
T1C012FB48838819E9CB409CB9D8E07DE9FBB040C115A3AF8F9014D2FD66677DD495F28B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5851f3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5851f3.TMP
Size 3KB
SHA256 c60cbe91bce51f64ea6e8d17e1028c3830b5d851c5481f1d2bf810326c865bf7
MD5 8289befe3df0943142bf81116e98daec
SHA1 040b3f9dee20fd4347e696cd0895ba42435018fc
SHA512 b4528bb7e5f31d54c43198cc082475c9c4f8b1e76682bd7416d98bdc062c7de086402f16d4f21a6a8983f733eb2221d7b0acd47f0cb3a4891d1b8afad4824ee8
TLSH
T19B717F59C64D0D91E7601CF9EEF2B27130B284C809A3CED5A61449FF670ABE98C6F807
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 6a9d8ad2a2266fd0681f43451d68aed0aa8c70973fc2988643c9ccf85ea8d2f7
MD5 3e25fe5bc6fcef92ff26272c2585242e
SHA1 f1370701b4911c32ea46035cd0c6b5ca19a0caf7
SHA512 634e94c11096d037b7a56b4302c1a4db2a8e0d8c7473fa21990898f3e69aa39ff4af4e0896edb4f87ebd6b4696ec4c41b363670bb161bc4217c7990624db1fc9
SSDEEP 192:DBD0gXDSsSrDoIL4M1j6VJcZB2cps+J1EQmW77QnGtV9Zx:DBD0gXDSsSrDoIL4M1GVJcZB2cps+J1x
TLSH
T10302ACF7C3D4862DC81166F1AF287E1BCE1D096453683D1AC9E4EF8AA3E1472E25164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 fc6e4b5e6d80a901bd1548b667613f97a2b753b97cee9594d39873e373a574a4
MD5 afb233f1f34aa871f9abbcaa36103e9a
SHA1 5fcc225c17d0f29817358e001d2f6bd7bd25a7f1
SHA512 d4c2799eecd646b17f971eb443433f16f890e0cc396c2b1e3de3621ec61d6d602552aea8bd6cb21222ef1897739838223fc6e9961eff8f582be15df401eb7974
SSDEEP 48:YALlNAOC8xCDS4CDmWCDsC87sAzBj6VCJsXCdZCYksjCjCHChsNCjsjCdsUCKsgc:DCOD0gXbzBj6VJcZB2cpDejdD6+JOpLt
TLSH
T171A1ADF7C3E5862DC81156F1AF183F1BCE1D095553A83D0A85E4AF4BA3F18B1E251A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 5248348a3b67845e80de53d8a8b886d2799ccacd113ce97b2d667bd22f96a686
MD5 6d8bdba73bb5dd017a6b26f1b4da59d0
SHA1 39204aede762862ef125a25d254f30114d02aa48
SHA512 4a31239657ab39b13834ff783c1098f50eaf3c2cc8f0f3b35713c279ca5b22bc0c6984b3fc10459c6bde9e68207302b67cdb0d6fa9c3afadfe204a1cea81f661
TLSH
T1B7D02367510130B5D55C7F814155EDCFC73710744543DDD411D0D459153155D050F244
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe592457.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe592457.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dceb4170696273693d3860bb32f97f03d1ce392b03d96b6eb468a39715d61173
MD5 8563d310b289a7bf72bc7a0d88ba7b6f
SHA1 b42c5de3c996c245720cd40155eade2c08f5a108
SHA512 ee1da75c67bbaefb0b08c138f48f95f5170decf7596becc2e1249607c43366d879bd31d592fde90b56753038dc5973ea7b51715414616cb787188aea15f76c7f
SSDEEP 192:sxZMRgyM/jK1Ml8Mkx/fgsiPkIdpJHW6+WNGYLlieeIgrJ:sxZMKMx/fgsiP9JHbGD9
TLSH
T14542E8126B34597BCCCBD209FA55BF53D6F91472A2901D48A9FCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 95b36fbb132e962a297fa411589813b273a9a1942b473a820e1d22edf4238c24
MD5 8b673dcade7e961eaca2c0336cc03e98
SHA1 da2eed683664df384d69b2941ca6571e3a967a5c
SHA512 dce02c4cfeddcdbb556997062f481658d67cc2ea0ba05c5b45a2d474bcc68f388bd43afa65c9554ab0b561a9a72e602df883bbaae648afbcf32de928c84aa21f
SSDEEP 384:sxZDnaxsm1x/fgsAlLRV23THb9GbR/ErmPJ:s7aGm1x/fUlLRKHb9kEQJ
TLSH
T13292E9535A24897BCDD7C218F925BF12D6F90463EE514E8C9AFCC90C04E6AFD261382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4958b052d2ba007e80da802a59793edeab6b3571b0f95a736dd27470dd9ddda9
MD5 32a1444b555857209263434faba557e1
SHA1 3ea7dcb76b84bf12d9be2a38caa5a3f94ab140be
SHA512 2fa7bda0e69e002bca03c4cd62330b8d02e1e048b0d3c26718897b1604bf5e94b68b7c16cdfb9868b1d308b3525f778ba06d5feba265efeb45e8c7765b517e9e
SSDEEP 192:sxZMRgyM/jK1Ml8Mkx/fgsAlBIdp1FHW6+WNauM/YLtlmeeIg5oJ:sxZMiMx/fgsAlqzHbg/g+u
TLSH
T10752E9126A3459BBCCDBD209FA55BF53D6F55472A2500D48AAFCCA0C00E6BED320782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 f324ad2eef9fa3cbcee4061142704d7f811f55305cbee37fcd001a538e52a0ef
MD5 2263af34d75fac55b9f28db61f12e0f8
SHA1 586cefaa1c4d6d00f9a47f04fa0a937eacb81fee
SHA512 cb6ab010f866a3f79e2d84656cb23646f945ac6409051338b1bc22cb32e53aa819b1e457f7b448ed02f9d385bbbe8b8ff0d801ad12d97767b6f1fa46fb1b92fd
SSDEEP 384:sxZDniism1x/fgsAlLRV2RTHb9GbR/EbmPJ:s7iTm1x/fUlLRoHb9kEAJ
TLSH
T1DD92E8525A24897BCDD7C218F935BF52D6F90463AE514E4C9AFCC90C04EAAFD261382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d1442145fa81e065735be52d6a4ab2343e6e3d36d549a7fad4bc847736b2c869
MD5 3a6c37ff0380561c6366f1f3bd8ffd1f
SHA1 3d59fe6c69eb3760f54ad6e036a7cee2f6444c74
SHA512 1182a9398f79fc3fac7a54c40e8d1af49f02214b4af6203df27ace03d8ea7680980fd36894687afe6741be434f5c09e4b85baed3871120bbf160496ccd5fc1d6
SSDEEP 768:iIs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNJroIm:iIs6pD1WvxzWju1jahILIsNiIm
TLSH
T10DD2FA3B680CCB7E4F841E5CEC2A6F967DD801CBAB98899447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 3KB
SHA256 f1556fc8baf83ab87ce2e6bba44a054740092299cab026968146864bf700e9d9
MD5 7109830af4ef01a120e6d299edb82156
SHA1 37426ba44bf6bb49342044c8aa0827f42f08747d
SHA512 926b65d4d798753c9e9dd3df1013951bd35a789bd08889e6b6268974d35acc115292f0fbeb1b68df87fe91cec65d621383b72e0234318a0a4bbf69688e7b1d21
TLSH
T12851B55F4C573B57CEAC117364B118882735B5DC6A448E27A4FC8139ACC772428AA75C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 1KB
SHA256 efe8def0cb94f7dabe762381ce300f615c10468fb4f7a73eeda75e5b9aa1ea98
MD5 6d66c59a5723dba6c7fba8c73b4c0c9a
SHA1 ee4483b2e2fd9c6202858b063962ab5b621a64c9
SHA512 da6e6c93d9284429ffe10980472ad06958378cc6009f2e96d8aa5351f185e6db973d7721c103b97e164645c383f4f20803360b7adc1dde57068b8d6f0e413b3c
TLSH
T16031304E9EA1CD9FE8A441B21576B5A4737098DD4A26F7139C3C32327E237292A0B4DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cf42.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe58cf42.TMP
Size 1KB
SHA256 e31d1caec9b3e8aa343453a89ac0af0e36b679ed9b2e9c1f28a27cee29d8e160
MD5 38095d6b9392ad13e05625d1f2701cd1
SHA1 56e5f95cc4fde56c31d756665cc234284b718f0d
SHA512 c3a1cec130b50bde95765f795a20ffcd2608058e07a7aa7e496d761ad2f45761f611fd9d9afe21769efc37c8f33b39e1b1c19ede0d012cd57cac26ebcc34557b
TLSH
T11E31424A5AC18D1EE4C5507B0E63B8B8733598404321B7D3987C62799D21B9E2E5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 3a374f9800fa70ca64b80285f672deade4bdaa17e367e5c2cb88bc327e67a866
MD5 ac221faf8d075730615b4e24d117f483
SHA1 334c134ceab27faad6d5c471754f1a4b9f84542d
SHA512 14a1f00e8ded1f93ccc51f7f7cad0f5db8b8a9ddfe49f7150f1f06e718fbf48e5bbca17d886bea6cd6e23ef361a2b5f53e0badbf544f07d875c271d281627827
TLSH
T11DA0021143801405CC5612B215A612411701CE14932097175191009CDD524C49D4110C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 069e87e07499068b6d809e2a18e56201f0ca6ab4a272472e31d2bdede2192c37
MD5 4be532e10ff1d9c63c99a82e31e35e45
SHA1 08f801e16ad82198ae4de4388c4b9b160476b4a1
SHA512 08ba11437952528b0fc2f9bbfe6c7a4eadd2f29970ede5c7a5484e778951cf2f92f6358710ddff5c2d88e473394d5c170ee9366468fd568715cec5546e8ccb2f
TLSH
T1F1A0025402D04013C00662BD39EA51712F614D22A211130941D11359C85156A85D300C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0aa9f90c79f3fc152a95b884a7072f0642d726ebc8a07c2d8f3d81a8ff2d49c4
MD5 cfdd1f2648bde2a579ecab3eba24a25d
SHA1 b32c5ceae6c66144a30f92c33b3197f4421c0b23
SHA512 47de03706f208f9a7d03c4572f566648be8b33bb04eed4531c0caa64a81afec298405b6b8993737a14ba627aba7c837bb85005ec31d970a77222467dc5331837
TLSH
T106E06FBB2EA32820EDABE3E32830A4B10242382C8800FC0F686A96C350B03213806C21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 eb336d6d47dd65c844b9d215aea898581f21ec18e8c7eec938916dbf66ffeb00
MD5 45e175cf32f30b8d1ba9b0c63d059689
SHA1 9468fcc750c387670eee80a8d1d40e63357eec7a
SHA512 ce0875d02e87e820f222770ea612af5f3d8fe653a70bf10b8b9457f3f7d771d894091451c0a0186d31445103a0c9108086c307cea05ad6303fc1d05fd206dc48
TLSH
T1DFB0241D4C04C073C004037C745000CC703CCC501F0F307445FCCD7444335400015407
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594608.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594608.TMP
Size 48B
SHA256 7269e528a22e9df480456a1696f016925dcf384ff1dad93f7410654dcec67ee8
MD5 5cce6014ad4cc267e4d19d89bde0e137
SHA1 af7bf97dc6451e2aa68e78725740e84efd1fea13
SHA512 ffb73cf43d84d3202d041be523c779676cdda8192cb25548b671722df1c7b0d9c4011a89eadb29bd92ae63bdb71f586ccddc6a8069c67dabd1c1f5afc8266732
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e80842ab1fc0d9f6ab6dc9ea1a496151f8f3b046200119784dc066ea95d164e9
MD5 4b13f5a418534bac9e10fa70245ecabe
SHA1 95ff9e300864d37e20aef0d09e9a82ad4e59ae2d
SHA512 96f8b48d29c457a8a41def5ff4ac8f6a6386346ea2286196d4f5664c47563357494c25028da06bf7693e1c91979976f29ab61dcdd9695b6f965dfe747287d7d2
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyRwIvKFWcCyx6IvKfKQrylrIdKA8ww6nZ:KUAAKtePiwQKFWvC6EKfKuurmKA8U
TLSH
T10CC12D1271BB0A033D7D2B0CA255872B97427263305CA92B3BED40B54D6AE395DFC6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df02ac4f-c8d1-47de-8f57-1c329b90a913.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\df02ac4f-c8d1-47de-8f57-1c329b90a913.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d055fefd696cbf5d1f301de7962995b0bd1473aff6fdc05914d8e73133c4a64f
MD5 945f3094b5534074693a8777aeed03e9
SHA1 257ed4f3658b9980376a9b6bb27b926063a99a8c
SHA512 9baf92c0abe68e127487039cf162ca551ac049fdfac4b2c12f8a499964eec59a4578a1c86f800b33833ab055c51d0a360fc1aa4e88339a582925f48e39adfeaf
SSDEEP 384:StNn/s3n9SfsNV95Yjx2dTua99d/VfOe82MbdbJHx9R:Sj+9UAYkbfzOeixdvR
TLSH
T111927C316C286C7B0DE39149F54736174EB490BBA6863F44E4EDAF0C05DB6AC234BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a11d06d24b53a8f96e2f908089f51d196cda71c1992a39c55bd5d0750e3f5a5b
MD5 d04f6c5c184ed0c41124ef5c904cb180
SHA1 8902bae5498e6df3ad456cd1bfab71669ebc1eda
SHA512 b67e7892fb1667ee26151a7bfc42593ab82bf2705a790d2d49ee82f44eb0f4a83dd3dc8f8b5058226d0c3a6ddf2d8e588ba9fb32f46a39919efdadfde3d506ae
SSDEEP 192:qONt6O7+3hQmiUyRjGttb0j+Fd/9UgGn6W8rU6:qONt61+Gt99d/9ant8rU6
TLSH
T16702E7356C786CB78EF2AD49F58727235FA5117BE9A62F81D6E81E0C00D766C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7ec16dc0a2ba917ec5a7c47f387e6f105f0294543f3b41cda1235e44622ec91f
MD5 91eeaddcc8b83badc65bc239ef8e2f70
SHA1 dfc15d6131a71964bd7afb1bc796dac20f9fe735
SHA512 b0b2785d139dbe1eb73f9644a828ba3d3a3530b59590e46db2b19bf14eba8912e6e3778f59cb3849570efef686a2bca05012d9418d43f4e18afbe0f02cb78b78
SSDEEP 384:OHiF1tNn/s3n9SNzsNv8TUNTUlIlHTMYjxCH+oJTia99d/Vfbe82MbdbJHx9R:OCF1j+9iOwg6Yu+oJ/fzbeixdvR
TLSH
T195C207F258D7987AD9AE5747B73E2D034EBCC067B5826A44B3985E0CCCD62BFD206805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 07c530065aaf1886f59ba013b49fca815f434b442f9aaeadde6332b3ba8ca0df
MD5 1fc7f44a1ca55209991ea6f3789db8c9
SHA1 473ddea294824051b36f599135bc0c1fb791fe90
SHA512 2d2bcbbba96c4a69b8fb39b395fb55f4352eae210d606ba5c68ced586d92f19f0760aebadb8c4b099d04d877ed0de3202c616b21f5dea8927a68029d9ea14e69
SSDEEP 192:JON46O7+3aQmiUyzjGttb0j+Fd/cQzDRhcNZq3dlU6:JON46sCGt99d/VfUeU6
TLSH
T1A51209366C686CBB4EE2A445F48735135FA5517BEE8A3F80D5EC5E0C00EB96C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 720aa1041b8e5bfe20e5658ffa3e98c9fe740ad0a02037686c31ff37373465ed
MD5 6ab63b1296e45f2ab2304d892a0192ff
SHA1 419fa9ddb4009ca8a253f872554f807bf6fa81b6
SHA512 ec987cbb05bb32cc50a5d9bd9032fb0d1bc618cb81b211730bfe2b05af238720ebdd311057d4cd43e1d03519d1f1e67293197c7e771ee8044616f5a5568f8e6c
SSDEEP 768:OCF6j+9iXwg6YT+oJ/fzQ3iSruKBb437wixdvR:d9iI1KKBMrwAvR
TLSH
T1A9F25AE184D75CBAC49D97C7A72DAD1229BCC073B4495908B3E8A92CEC8B5BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 2c102e1ede5d2d7e2fb58c9d9bc6808d9bfbbaeeeea2effa4cd4a204320a3bec
MD5 de506b8235c03de7db3fae6607999ba5
SHA1 d4186ceef294bd2fc7063e671f4debadce42359e
SHA512 faa458ebab5b7d37fea618afcf12243569b1200093460be8d45a22481fd5a0e9fa4f3903772a15f9a735650ab83f36f24cc1df46181640760915e702517ef0d2
SSDEEP 384:rtNn/s3n9SfsNVI5Yjx2dTua99d/VfOe82MbdbJHx9R:rj+9UhYkbfzOeixdvR
TLSH
T18A928C316C246C7B0DE3A149F14736074EB490BBA6863F44E4ECAF0C05DB6AC234BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e42001e09013e626b0b0307ac32374fea71d43a5614ca3d12ffbb503d3295e28
MD5 7fa06dea4d4238cd7da7afbea3398d00
SHA1 d7a639ae9ccb6fb7fd42984314b42b9dce57d175
SHA512 f0d7e02e6a674413213275c33078cf0646f3166287f459bef25f6247eac959b9b9a44c7e4a5287aba50ddd6b91bf190ad25c1adfe74f7dff7fef16392a72356b
TLSH
T1EBE0021262094177D56C43B090C712217BF1C45403F24309001201742C637006F71F84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7fc4f8aa8735ab673ffd6765d98a9986d70460ff87ab6f33fbcb1df7c12f3fea
MD5 b193ca378eedfdfb32b544522f45a400
SHA1 5009273403a9555c8fccb7bdc4691734a64efcd9
SHA512 247f10b35d6ce25c2fe02668fbe64bf202fbcf5a520ec149f86a3c6d2fa9fd887336ab81f0c4766eff2690911ddc5bc60d5d8fa876191d25269d1dcf990dcdb0
TLSH
T12EE0020261054177D53C43B050C715216AF1805403F20309011001741C637002F70F84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe598af0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe598af0.TMP
Size 392B
SHA256 dbb59ec7a5952a4aeec45db2ad32ba9cad8d02c7c92883bbf4665cfd76131560
MD5 15a53aab118eff32bd89f4008ee89942
SHA1 55010364a575436970ecc30a8834f54d4c1ea3ac
SHA512 3fd7aae1cfcbbc110db11e29b630fd3e2956a03ea9268d5b2bcada7a858b36c5a422a0b418bf85379a2f1ede8594bd6d280a934975f1ecf7e217135360845847
TLSH
T1D7E0020260054176D52C43B01087142119F1406402F20208011001641C637002A70F44
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 9b895b2de17a09923c371ec1797d13092371fedd031f4c6329e1c2b249f7bf25
MD5 f7a3172edce3d22c4822ab87dd5e3537
SHA1 3890e8910036749794053d64845456514178c070
SHA512 e46c9f37dd074475c1ccbd5838368740716842fc316cb4e635f06495128d2e2134b25b9fb5865479697b83a1268ea7bb79a874d3d007968568797a93bf4dcc51
SSDEEP 3:MsEllllkEthXllkl2zExllrAW+/:/M/xT02zT3
TLSH
T1F544044CFFC01405C5001130451FC3700370FD50051357D7345144137CC55410C00000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

348e865b-ade3-479f-b655-00029285963d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\348e865b-ade3-479f-b655-00029285963d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 49b1690576866434f8afe210c809538b4787fdb04a828657d3b016f49e28f804
MD5 6c9e4b5c419d75ec4a3b678acce0c622
SHA1 2bcf21f495cf6e4b0e31251151736dd635a9e5e7
SHA512 5e0c77e5d5ab937b5edf3cfd4fd0d78aa8d1697238b07f88d8b373f8932aa5b09a20fb4811284d35813faea69460b103da456ead105b8b08805fcf0867ea44e8
TLSH
T15841E958B6FA1148B3B77F5A9BF6A96D497EB8372E0BD59D00110D4E0632A40CC61737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download