hxxps://innovat123[.]my[.]site[.]com/login

Analysis

user interaction
yes
max time kernel
899s
max time network
742s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/06/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://innovat123.my.site.com/login
Sample260624-src2lsc17z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134267880938148248"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{209E64AD-137C-47DA-8A42-80E44CDA0406}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3388	msedge.exe
3388	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4540 wrote to memory of 4328	4540	msedge.exe	89
PID 4540 wrote to memory of 744	4540	msedge.exe	90
PID 4540 wrote to memory of 1720	4540	msedge.exe	91
PID 4540 wrote to memory of 1720	4540	msedge.exe	91
PID 4540 wrote to memory of 1720	4540	msedge.exe	91
PID 4540 wrote to memory of 4900	4540	msedge.exe	93
PID 4540 wrote to memory of 4900	4540	msedge.exe	93
PID 4540 wrote to memory of 2608	4540	msedge.exe	95
PID 4540 wrote to memory of 2608	4540	msedge.exe	95
PID 4540 wrote to memory of 2608	4540	msedge.exe	95
PID 4540 wrote to memory of 3028	4540	msedge.exe	94
PID 4540 wrote to memory of 3028	4540	msedge.exe	94
PID 4540 wrote to memory of 3028	4540	msedge.exe	94
PID 4540 wrote to memory of 4576	4540	msedge.exe	96
PID 4540 wrote to memory of 4576	4540	msedge.exe	96
PID 4540 wrote to memory of 4576	4540	msedge.exe	96
PID 4540 wrote to memory of 5072	4540	msedge.exe	97
PID 4540 wrote to memory of 5072	4540	msedge.exe	97
PID 4540 wrote to memory of 5072	4540	msedge.exe	97
PID 4540 wrote to memory of 1040	4540	msedge.exe	100
PID 4540 wrote to memory of 1040	4540	msedge.exe	100
PID 4540 wrote to memory of 1040	4540	msedge.exe	100
PID 4540 wrote to memory of 540	4540	msedge.exe	102
PID 4540 wrote to memory of 540	4540	msedge.exe	102
PID 4540 wrote to memory of 4952	4540	msedge.exe	103
PID 4540 wrote to memory of 4952	4540	msedge.exe	103
PID 4540 wrote to memory of 4604	4540	msedge.exe	105
PID 4540 wrote to memory of 2644	4540	msedge.exe	106
PID 4540 wrote to memory of 2644	4540	msedge.exe	106
PID 4540 wrote to memory of 3516	4540	msedge.exe	107
PID 4540 wrote to memory of 4788	4540	msedge.exe	108
PID 4540 wrote to memory of 3516	4540	msedge.exe	107
PID 4540 wrote to memory of 3516	4540	msedge.exe	107
PID 4540 wrote to memory of 4788	4540	msedge.exe	108
PID 4540 wrote to memory of 4788	4540	msedge.exe	108
PID 4540 wrote to memory of 4404	4540	msedge.exe	118
PID 4540 wrote to memory of 2456	4540	msedge.exe	119
PID 4540 wrote to memory of 1344	4540	msedge.exe	120
PID 4540 wrote to memory of 4440	4540	msedge.exe	122
PID 4540 wrote to memory of 4440	4540	msedge.exe	122
PID 4540 wrote to memory of 4440	4540	msedge.exe	122
PID 4540 wrote to memory of 516	4540	msedge.exe	123
PID 4540 wrote to memory of 516	4540	msedge.exe	123
PID 4540 wrote to memory of 516	4540	msedge.exe	123
PID 4540 wrote to memory of 4984	4540	msedge.exe	124
PID 4540 wrote to memory of 4984	4540	msedge.exe	124
PID 4540 wrote to memory of 4984	4540	msedge.exe	124
PID 4540 wrote to memory of 3812	4540	msedge.exe	125
PID 4540 wrote to memory of 3812	4540	msedge.exe	125
PID 4540 wrote to memory of 4724	4540	msedge.exe	126
PID 4540 wrote to memory of 4724	4540	msedge.exe	126
PID 4540 wrote to memory of 4524	4540	msedge.exe	127
PID 4540 wrote to memory of 4524	4540	msedge.exe	127
PID 4540 wrote to memory of 4320	4540	msedge.exe	128
PID 4540 wrote to memory of 4320	4540	msedge.exe	128
PID 4540 wrote to memory of 4320	4540	msedge.exe	128
PID 4540 wrote to memory of 760	4540	msedge.exe	129
PID 4540 wrote to memory of 760	4540	msedge.exe	129
PID 4540 wrote to memory of 760	4540	msedge.exe	129
PID 4540 wrote to memory of 3952	4540	msedge.exe	130
PID 4540 wrote to memory of 3952	4540	msedge.exe	130
PID 4540 wrote to memory of 3952	4540	msedge.exe	130
PID 4540 wrote to memory of 1284	4540	msedge.exe	131
PID 4540 wrote to memory of 1284	4540	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://innovat123.my.site.com/login
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffabf76c188,0x7ffabf76c194,0x7ffabf76c1a0
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,3383057772210110382,12697060148581115879,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,7722362581785338277,8905766981276251707,262144 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,3574640255030639852,6819793275214609829,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,14029781237165033962,14568928535077442651,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,10059273858410050790,16692172955568102686,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,16524871776064014041,9206073834079519087,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,12239527246799386692,13980249943171576849,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5016,i,8630362851511798851,1407770547054213158,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=3896 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,3127786687812330131,9222194993543372880,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,1109455157831827484,2650412345390742125,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,1071220871673002170,17591852694702275120,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,1071220871673002170,17591852694702275120,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,10550587221155815968,7806631134811904884,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6556,i,15347545342803342486,661169725606947096,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6540,i,1080993454477253045,13007724431014141962,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4920,i,8538878398059728553,355802237546274229,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,13655366590076555301,9643993542200978244,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,10080553929738977673,13325657326901065493,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6452,i,9703266053988411366,10087225031282872358,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6724,i,7163576288129503412,7287377394631719111,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6728,i,18354890067629781899,8657010410701504114,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,3938189766180718011,15949979111576893579,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,11106815950313552094,3473274476078845336,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,12408497273904027065,7151642350042319067,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5520,i,4212782672296895880,2555732639741934664,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4860,i,11108281306177607654,4536401507385036234,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4964,i,1845769350481592595,7133265891773326754,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=2944 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4960,i,17694424448780486119,7901097348931141149,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=748,i,6476523908424450986,1366788199064524504,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6104,i,18302976176210054654,10708364633554226574,262144 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6592,i,11018591992546213699,14219921859638068744,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3472,i,11774678269660870330,9975712302338117394,2097152 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,4585220798811094189,15982668101458113995,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,16739045393606423301,1052803092775782480,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=3992 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,13008580936889937846,221920633783357841,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,14157575430261251083,10603700432602755691,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3160,i,12565886310363768467,18341331247358454815,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3168,i,5371258411136756374,9341651243743925576,524288 --field-trial-handle=2272,i,192185518473623534,3396676557879589823,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:4932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

82cba106-f970-4023-aa29-eec321a85838.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\82cba106-f970-4023-aa29-eec321a85838.tmp
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e9619c2e283a41270cc7450086b12227c4e6800a36b3a8d51ecdad7aaf16c06c
MD5 0851a0e9a23be0de2adcfb0223ce1f49
SHA1 8d363c4c41dab87400edeee2b51892102c3c7ae9
SHA512 571487cd4580afb88d3f051d5d22f04c27caaa923fd86486208d3615f88d1fa91734758fe0429b5b04a93a81d79e07ba8f4b1da3bfca4f2df4b87d08d66da2f6
TLSH
T15AE0D8C484D9D36E915464C7C168534C82803E0F9AC979D96B00C8447682944A2D1994
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 45f33d13135b2aae6aea23bcdd3ded49165eace6647ad685be0f52397eebc858
MD5 e750186abcad3edc7e78822cb82b4c9f
SHA1 afd0a3f647b760824eafea7e392bbd231e350322
SHA512 28200297a848691cdda8daab59610e512a1a21850bda229d5798775003781c379249fa067af9805fe6445a07f257ec186de1b38598ec35df506bff328af34f07
TLSH
T168E0D898C287FABB910A96CACC5EA35C09C06D0F9549A4ED7606F5949A42102A3168C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 564B
SHA256 f888059a7d9cef5de891937816c94d1840b761a0384f0a22ff0e06e2169a09b1
MD5 2755483a9f1b8ddcd253215c30bc591c
SHA1 e6582127d839a03f25eae51b320d221755a5dbd2
SHA512 94a1d5c1d4bc1ee5550eabab9f3958ae599aa5bae39599e6022679f4b2bb768dc03505b4b275588a0bbd3db8d09d41b9b14cf2703320a05df7d422afe8a797e6
TLSH
T134F04CDA86C9FF76814951CFC44E922C0491BB2FDB8889ADFA04D4A42643501E2851C8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 275B
SHA256 aa004012a24c0c7e1815f3dd31fb6469892dfb77ee08a7f65e101b8f5ed46e57
MD5 7b196a5875d169c30998dab6d1be0cb7
SHA1 3e43d18ff4224ed8355e3efe370904e1c3fe7789
SHA512 d0e60a7718d55de21e5bebf83e5f0e62f9932a76d910813db2eecf6a25417fed948a926257a910005cdeb4a85e19fb91dce346bb1f642d0e40bd89bacb3db051
TLSH
T1B6D02BADBA8C999EC3D009BF9772F4100F6551A3881B9B171560FCD032806F41F29134
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 24KB
SHA256 2beefe7293101d64840c308506967e9e2a0b2a6c4500ccbb7871c1342f2894eb
MD5 dfcada20b4cda38d23f6fec8d0260763
SHA1 373ce141ff860592bfc61220e4b5c82480533d19
SHA512 d8b43808a8ad313a54f2418a2d74dcff9f02648519a7637d580e47fea6fa60e8a57c95e3f00643a33accd6479bf0fdba3a858818e38058775b9aa238761536b6
SSDEEP 384:3xbeyInNsrD5LZCzRFwiSmWR4a7tjVwlgtX/UC7duixIaILK7fjzUmcdq7+RCRHr:lRokgcvP7C7m3SBSIjsDkLYd9dL
TLSH
T1A3B2C6985582703CBA3B852167D8AB4C7234DC06DE3228EDF77B662E0FC67D642B3158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 68KB
SHA256 90e39936fa4a20f0fcdafc8ce17bd53e662b5ac7fe4c810b28ed5356b9da6d02
MD5 8b512e3b59cb89f3f306e9e69f799ab1
SHA1 e0a1c29cf12aa60249c80da1600a2d7778984788
SHA512 d5b39e2618e5cfcde62a34552aa24def071b21cea9913296d33edafc7fb024426ebc8e92550b40f0bb3231c8ddb2945538a7e6c0d4f308c7cdac7d5e53745b87
SSDEEP 1536:phILhlQU1HUf76Z+AGYguWv0KxwhT30N7Xw1RJiuwPy+R3zP5:p6Lhl/1HX9GjuW8KxwhYRXw1z+55
TLSH
T1FC6302008F370176B188A8D9FD49E3B6CAAF58E0914BF595020B188F7F5F8D1A55D2BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 38KB
SHA256 4392ddde86f22a921269feaf788a13509946046047df6926017041ff33d0293e
MD5 04bd0131c5ce154413f71d20017679e6
SHA1 a83459180dca62eb56edee213409f83e12fa6172
SHA512 5818141afbbc45553e72fc106699d9357437f1c2751751dab4f51ad7127e92a6ff85fb67905073addfdec5dd581c8c22ffc8dd6b85919d6a1d72550ebda5376c
SSDEEP 768:hrGgBfBZrOcgLWz/irLn2nTXzHXP0JsdgCQL1/UAv73nWEjvvuUwp5:hrGA51OQ2naXzP0Jsdns73WEaz
TLSH
T1170302AD7D526331E7FB684CC972AA1340C424498063CB1FBEFF098E9D44A4FE056A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
Size 127KB
SHA256 e5f1dabe89a7a1d0ae94bd8e14a273cb5144a6541c34a54192411677c18c43a2
MD5 f944721bd55cbb39c452593638459aa1
SHA1 085940738cf5737b614a586d0f2005ff0445d6e5
SHA512 33c8c2882fc81062027733dc7f1d52f2194957cf94b34c6d71e393ed90f37a378a5c7122cbfe4dc35f7e63c26f7c4440886e9b3884663aea2a8183087611b3af
SSDEEP 24:5bglATIKl7DCmTpHTyxpEo1HM9kvfkzyfkmoyfkoRfkIRfkwhNfkm7usyfk6sRfn:qlg116z1+ukYkwkAkgkw9kugkxkY
TLSH
T107D3356D2F958FEAF0F12770E684BF4CB3D96E6251EFC35E1BCC1906BAA00D01048A85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
Size 100KB
SHA256 27bce9e85eaf3567a4695ba2b612e32615394d80d0a3a2dcb07b1fbfdfababc7
MD5 f134fda98a277b1c8f20ab8fbe2fbd58
SHA1 a922796190a1f5bbb3c410c6ec591502050df04e
SHA512 2b2e8338afb9b0ca9b5fa3d452dfd80368b5d17566120ae6351b6d03572e5a69cedb97f165fbc31ffb3addcc00506a3fc0761cf2404a5d9826a8448a7c4d9f17
SSDEEP 3072:fd/tI0TeVA5o0VgTuGmxrMRZ6aLxuC+Gtn5HBZ4I/:f81VAMuGMrMX6Mxu9+fCo
TLSH
T108A312846579CDBE5EDC1D06AB21ED4CA2BE53F66B5E367483100E054FF4FB49AB0288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 823dc1834a6f59e98c93526ee77e2634e39cead37005d9387f303f6397c40c9b
MD5 d44bcdd5f7650073f72dd5a32e1517d1
SHA1 6001154f980c1aa91590790d950c0bbc0d45cdb3
SHA512 7bfa7ab80cb9c5771fa661b79081fed5d0720afe097433fec6924d0e72b8bc20604d0caf629ab7b2b19ce181f9969797e9230013cb8d6173551d18a76edc765c
TLSH
T16A713C3501AE79ACD770053088E6125E75B9CFECF933CEA6293398F4D606F7586992C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e92b790af3a9de48e6c5e4d423679622492e4c6c282ea5e3ff85fe39eaacb97c
MD5 6a5e6493ab74e502a06a373b9fd07709
SHA1 347ad638ae385cb6758d1d809a3c4d1a07ce6424
SHA512 cf511b4f2c046c9f04e01b3c0d6967cdca4bb51f7dddccb49090d4d8948db2559fe23e95ac7e42fbd34bd6824d5611215bcceda9476b70d752e58e8fd96f315a
TLSH
T149714B3501AEA9ACD730153048E6115E71B9CEECFA33CE95287388F4DA06F3982992C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 7d1742573e664bae553b1a82f855c31c5647602045f94b6b0909d2b2abb14d60
MD5 a3abb492ac76f09ec40fd737c850913f
SHA1 6adba4d2d3197f4533ae7cc286d876446c747d63
SHA512 18e1136e3ee70e5ef6f632001256720306a9b82ed843ef6d005c5a006ec91650b4e318151d183182ab4e2ec7c62f5c77ff43c24e6862b61e01cc556913e28cdb
SSDEEP 192:+7FpSI6CRyU/dhUl1wgotmz1aVUkO3l9k0PQQapXFqZdn3uvk8DhvS/8DsEncmYt:+7FpSI6CRyU/d6Lwgumz1aVUkOjPQQaE
TLSH
T1D6025236715DB958EBED843080D1141E3F79CAFAF4138D612A2F44B2524ABA8A3CD7D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 d398932999e76ad01b0720ef9e60d6f6f7247ae5f0d8631995ce34dad936df98
MD5 cfb95a95deedd6f556aca10a0baa4ce4
SHA1 ec875d985c1285fea93bc35c4e27b69e9ee0c95d
SHA512 5b2414e2af1abea8d291bf9ed70e90a315b4e66f434eaa782f6f6096ea519683754bb2a26d7bf02e35afa3320ac9ea490b840f191e2181b3fde353665e3677f1
SSDEEP 96:IPpBqaGc6ormzSHvDQrCI9/u0lyYHxOTKuk80uWtwwzEnmYjFmVabgNt0fFBtbCK:IPpBqaGc6ormzSHvDQeI9/u0QaxEKuks
TLSH
T13EC16E3551AE7068EBFD883140D5141E33B8CAFAF423CEB6187F95B0954EBB585990CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5852de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5852de.TMP
Size 3KB
SHA256 f1f8f5efc823ee167b50d382f039d90d7143429c79c37f64812bceeb8b62dea9
MD5 effd6a43d0baf793b3a0324f0a5732ea
SHA1 a25a4c0ea607a92f2261c7e72230e13091c4ea4d
SHA512 bf18d6d542efbcf5e109a103b16110f92cc1e3d3bb091dec50ff8f6a14fc2044ceebda7786e86beedf3d1087f4a90ee93740d8eb6cb6ae7ca1f1f0f112db21a3
TLSH
T143614B35016AA9ACD730013154E2125E70BDCFECF937DE95287388F4DA06F3986D91C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 3f6c460ef18a69142712ab82867f6854f42f79cf22027ec245763dbab0be8591
MD5 b23c324c3600fe100a84aedd37d0af3f
SHA1 782a5b9459b8556e24dfbcbaa509fd0b4dbc70ae
SHA512 c8878da1f4ae4ae4bced9e5e231f30753894914e5b4e96c12ed522f3ebd942ea440309454a755f815c17affcab77f8cebd41273747de1c448b8c8a4cb43e50bb
SSDEEP 192:DWfdj/6oBvcGvTw1qfgF5VyIV0SUVmVa/qn1YvFI6j10Eiki905i+iMZ9US9d4jq:DWlj/6oBkGLw1qoF5VyIV0SUVmVa/qnq
TLSH
T11AF169F783F48A6ECB2151F1EA083E2FCE591424576C786BC5E1AF47D7E24B1E140A4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2440b1bb764801525a462621f0be1b92b1a47613b1c7835659ccd63c50a7aef7
MD5 13468e2fd5779435dcfcee965d81749d
SHA1 403dc5eac7207051e3dabcc9182c4bbde5b733b0
SHA512 9da24c9154f3a70810e18e22c5644dd3379677d685553297b5a27be67bcbbc5dc8f6e1803e88aab7a9ec458630c5364a2943a5389243784878927e516ac7e442
TLSH
T17421BEF7C3E586AED9111AF0AA24BE2BCE1D094683283C4985E8FF6B93F6471D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 214b6010da2fe38306cd441bb4bf51f4fb941f21174c63196b26d2cea45e55b9
MD5 30f398a7408cd43bec0506f931bd1909
SHA1 d2f6144184be2fd1056be933a7a95756bbb25c19
SHA512 6fde45813b5df93e53e94e3023c3debc241752e6e039f1aad6b43c1f5b0d0aeef71756062b3ad02e1318a2e3dda084cae19cb00d9cc91e8b04a3ab0cfda5927b
SSDEEP 192:DDf+j/6k1pfgF5VyIV0SUVmVa/qn1YtGF9T6j10Eiki905i+iMZ9D:DD2j/6k1poF5VyIV0SUVmVa/qn1YtGF6
TLSH
T1BFE18AF783F4CA6ECB2156F1EA083E2FCE591424536C786AC5D1AF47D7E24B1E140A4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 9f0397527643541623a273d13f21744e9533a0ee186c725c09ad8b151493ff75
MD5 f4c7dee302131869bd18efc549d1a6a8
SHA1 a273748ac05aa11be1156782aee07bd9642f5327
SHA512 fa49b3b01e12d43386593fda5de6d4ea80cbd02d8fef18057137f945dea985b41ab4673ae693da4dfffaf3862dad7d1c9f2751bfa8e4c741937012d8373778e2
SSDEEP 192:DDf+j/6oBvcGvTA1pfgF5VyIV0SUVmVa/qn1YvFI6j10Eiki905i+iMZ9US9d4ji:DD2j/6oBkGLA1poF5VyIV0SUVmVa/qni
TLSH
T1B9F17AF783F48A6DCB2151F1EA083E2FCE590424536C786AC5E1AF4BD7E24B1E140A4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 f401de57a378f67f374a5479ff1a1d599d2706119855d67c57b4109f69e6c363
MD5 d75c6087445d4f3b84291bad610b9007
SHA1 79b12c9ede3ab86e4b15ce59090a6da9833ad7c5
SHA512 5c8bf84195a956395aaba5559551a05a1fe9fd28998c838f66eb0e257733c0077334d58d341e4ccceda353a250c9a90ba16e11de56d428452a2d7148abfb4d1e
TLSH
T1F3D02353220070F5A55D3D964079AC4FC32600190D43DDD521F054DC197249D0E0B141
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 0ed315720086d507f6cb7836b2ae82522dda98f8607ab110207a32cf7e8f9b76
MD5 2229674efdf5cf34799b3df20af2ef3e
SHA1 4afce6700857d05e536317f1fc44ae8f2135f5f3
SHA512 218051c4a8de0c0d8014ce97783b4e7ddb87d64c952f02b89989544d038eb2ffe0b6713be172d3a88ef8da1b06920dadb002cf5cc81968120964fff89a22c65d
TLSH
T163D02353330470F5F95D7DC640B5ED8FC32650540E01DDD511F0589D29354ED0A1B140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe598dee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe598dee.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ff79f6a3009487c26b83a69677cf4378c17d826ab0ec4bb6eac30dcd9bc67e29
MD5 f09d5618d72da75e4942640d902a9374
SHA1 abb07f1b5843558e2d7ca9410a865ffdefc11f2b
SHA512 faf2512f261b685341cedb43584af29ea80732528a74b76c361f670c11cdcd42fde792a594698686a00020c5aa530877975d2095cfeff9b403434e272b9b8c16
SSDEEP 192:sxZUHRdyM/jK1Ml8M9M/fxsBlArIdpXcHW6+WNbFC/YCpgrZhIgrJ:sxZUHr1M/fxs/A0sHbo/Ev9
TLSH
T1E142E9126B389977CCCBD209F955BF53D6F95572A2900D44AAFCCB0C04E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 034ba5bc987a472c9339c84a914c352b11f124b4cfc05319f4c06dabd89a9b37
MD5 90fec03807202675037b1f016f8fb57e
SHA1 4454e65c9daa93565d3927a7830ce58f65f78430
SHA512 5c10cdf65f755bb50b9a986fcc65cada72888a9d644c0a063c3e042581df847fd2405f35555e37d292001538d185de53a7541c83e0b85c717643af303e7a6f93
SSDEEP 192:sxZUHRdyM/jK1Ml8M0cB4M/fxs/9lo/fjdp9dxOcHW6+WN32FCH5O/YCp6prZhIX:sxZUHrsm4M/fxs7o/fP9HbZA/4v+FXrV
TLSH
T1DA72EA52A6348977CCCBD609FD217F13D6F518639A510D8CAAFCCA0C04EBAED621781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 42f9950595cc306e034641f3c8af11ced63857def1c85c91b391ace5957ff79a
MD5 d4b42c32b22405242ae9c0bac5ea008e
SHA1 2abcf5234285b3e4850fdb5d24bd53f01bd3e4c6
SHA512 c5e1ac745ac989347b905f358394f6babfd6de1ed3360a65d35dab6b48cb5aa5984b407f47685b3643d0ab398905c7cbc2ab0f7b561913506683d7a26500956c
SSDEEP 384:sxZUH+qjm4M/fxs7d66s8qMpRiYnazAW8pZS15posJWeT+5TPqSHb2sZ8loSXrV:sOBjm4M/fCd4Mnc7WeT+5TySHbX8H7V
TLSH
T1E7E218069524C8678EC35D18B83D7E33DAEC54626685CEDE5AECCA0C019E5FCAB07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 f97abd95b751068f4b9b04806b5e6a1f2dfd8507655310817078d3161bf9e642
MD5 2047b83cb042e10f787f522fab03588b
SHA1 6f7aa59d8375db4073d8288d551456c71a9ca37a
SHA512 a67f37b49ca54e9f6b559c38f9aa85263b99bfdf4fd53565eee798f59065d81aaf47412c5cb3f79bf9ed383b3afaeba9da9e42cee68d918b9bdcd7ca8b306ebb
SSDEEP 192:sxZUHRdyM/jK1Ml8UQE0cB4M/fxs/9low1jdp9dxOcHW6+WN3M4FCH2MXYCC6pr+:sxZUHrqjm4M/fxs7omP9Hb2tXVv+FXrV
TLSH
T10072EA56A63489B7CCCBD609FD217F53D6F518629A910D4CA9FCCA0C00EBAED221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 0f2e40bd389c5add1c58d05130ce732e29e20dbc6cfd590b70bd27bc5bd601ab
MD5 0dc50da0c94152dfab37e1fb26e2b6dd
SHA1 c7afbc73b7adbfcf3141987c3633a0239144c3b0
SHA512 3767f4a40978054639e9357c39e070435254056abd54f3001c0ef15ec3135a9bfbf64cd16aced78a18e50cc57212f6f18f7a48b7cd9135583cd98b654bfcf35d
SSDEEP 768:qb8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVJroR:qb8bqn+WvSCt6u1jaCZLbWViR
TLSH
T130D20B3B280CCB7E4F845E5DEC26AF962DD801CB6B988D4447FA894C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
Size 816B
SHA256 1d45a3ca856c05c640d037ddd8313e68d8ab9cab4e5254ded269f1718ff90722
MD5 0cc8b9c1f8e0ac762422674660350d60
SHA1 fe2f422680fee8a718c1a93629d1e4c5e705b9cb
SHA512 e931067d8a1ce640d36de30c561fd894482c822221d242af5517d0de6d88271f4c1f08cf94aeaaad241a0339731e482257c11b15db83a095a9bce7c91d3c5ab6
TLSH
T12C010C864EA69C2FED950AB314B534F473B08ADCAB11E253643C22372C3A34A64161C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c988e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5c988e.TMP
Size 816B
SHA256 1d42206303413574816e39e19d80700de6d462cf9bcb8137411bc6e6507d4e6d
MD5 3bc2cb0d2b7368c30bc7559891f3f855
SHA1 f7bf0fc832a81c5e9df5015d728fa7ee309a10e9
SHA512 55d244f88937b25a95b94787d4b2747a49cbb30c44d357589dfe89771d51a9f2f178dec3e88f5a0d5c033290f2d3ca67a178c83e6194d873129f1ee08dc7a940
TLSH
T12801E1878BA68D1FE85405B6148560F47371C9006322F793947D653A1C7A38959070C4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c0db4756cfb84cfb9dc9142bb59dd15a5aa4e33a975117470e0a38f78cb14426
MD5 dd47864fbfdc6727f21dbd441cf6b90b
SHA1 57a406c42cfdffb5480c3ff5f746e003fb3c3e3a
SHA512 a76247c390ede3a4d29cb9c5a89bb2c751551290313de3cc9f9a651387390b31c6deb855345cc34524dcf99608bb24c9a28a53583411d744b055b0a465a26afd
TLSH
T1FBE020FA2DE72860BCBBE3F9247048E002597998CD86FC9F1079A1D750F33613856C61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 11fdc0dbd331447ca60100307df98996fdbed59d49d2c3126c069fa4212f5ca9
MD5 144d92e300ae1f9cc29dae3d532fed67
SHA1 295ff7ff02162249530dabce33901f0f0efbde9f
SHA512 46ea987c814f00d0353e0dae34207d4bd71dec067edfea92b26c71caafad5000c9ef279658d6526698c41320b8d25d1ecc7daea7eddbff87a3f6a769569e7377
SSDEEP 96:KAVqKG0CWxS1RTL72JLk97R2KjT7X2nZxsHxni8YKhup:wd3/76
TLSH
T19F91254E35BA0212283D244DF293863B1F4239A37158E5AF7FB850A15F6AE211CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58e829.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58e829.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 58c06ecd514f58c9753033cf21e6307f92f71fbb0bd30ba7a3db5fe01a0948a6
MD5 2d3e72377a7460f0a7256bb636ff67fe
SHA1 5a99594a54e9370d8bc4934ee09596d8daa6c91b
SHA512 d5d4548f724f598ee3b61472d4706e8757a9640e8074fe03fca1eacf2a3b7b84fcaf277711ee1ae4f2472d2887b67c71ecb2acc9def7467fd1e3495b712cd35e
SSDEEP 384:ZtNn/s3n9SfsNhXYVovoJ2Ea+SOOqmNLRmn15wbAjEKyWx9J:Zj+9UioJlanOOqmNLRmn12bfPWvJ
TLSH
T14D927D33693C4C772DA39588F84B36175EE884B79A862E54D6EC9F4C01DB6DC230BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 3f468c7a956bc30f54aaf2609e4de2d447f8437c2ff82b1309f2003cbf7a9e8e
MD5 4296f89208de5528d0b0d60237f01c3d
SHA1 52cd6fd1a2b1c0a3406da677a68b23ae5d09d016
SHA512 6f9d9d74e02e7f11d3dac5a34d21577730ac45ea7c268a7c01861ac94239efaa55c37fda01f1601d0461343002c0c8119d5fc370357388cbbe0f1656e30a94f8
SSDEEP 768:QF1j+9D6wghoJlanOOqmo3Rmn12bfPWvJ:H9Dash0yPWvJ
TLSH
T1CAC218F258DB4836D9AE4747B77E2E034EBCC0A7B5856950B3984E0CCC961BFD30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f4db3ae33270d282f67e25ea50ea6ecbe08f4af6349e94493d5b616953c1b48c
MD5 4b4e36b0ba634f8399972e8754882263
SHA1 c187e1440493d0306a034f7962525a455bf92542
SHA512 44f37c3454f68b01feedc8ad73f7b7c3d4bd9171edc8e8f8bbcffbfb77557781a396fe372670e2e9cd9c566d72473d0dc043cb724dfd82910d0a147cf131c733
SSDEEP 192:vONy6Db6QmiUyCiHBa+jWOmBwR+sRg/7vU6:vONy6uOHBa+SOOp7U6
TLSH
T1D802D735697C6CBB9AB26E49F88727275F94103BDA566F44DAD85F0C00D764C230782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c883284906eb3a3877a8d66a178957e783089482917e7f2a5920192b626015fa
MD5 26c138e1448bc5b12d98507e6f5ad820
SHA1 cc6ec898fe93163d7a69e7fd0ad9393678733827
SHA512 8a4c8239652828c7b9dd62a03ba46f21a38012a852de16b5aceab3991b668f98cb2cdc80fe7bd4cdd9eb534871c9163b206c57d1baaa631c3538e24edc646f6c
SSDEEP 384:DtNn/s3n9SfsNhOYVovoJ2Ea+SOOqmNLRmn15wbAjEKyWx9J:Dj+9UHoJlanOOqmNLRmn12bfPWvJ
TLSH
T176927D33693C4C776DA39588F84B36175EE884B79A862E54D6EC9F4C00DB6DC230BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9375f0fcf9001b92a76e98ead393992f2bee6aebcbcb10559b0e86b64d7faa85
MD5 d2c5bb7ebcbcbb1d339f6c249ad482f7
SHA1 bbbdb5acac120cc323df3c1e09d47548e1c0c721
SHA512 767c3de8b0239b5a4f90ed9b13fbfd2e02d3e2e001c2b24221fdbb1f32e56450a4d3225bf3e3585df2dd8993148933a8464b39d6b2c3569b271d335f84a5c8ca
SSDEEP 192:NONs6DbmQmiUy0i7Ba+jWOmBwR+QmZxNzBrqIU6:NONs6qa7Ba+SOOqmFRU6
TLSH
T1D812F936797C9C775DA26554F88736135EE84127DA8A7F90D6DD1F0C00EF69C230B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 79e4fa1e4fe7f42542d166366478904230ceec1a77496b7b38aa4872024b95ef
MD5 4e65c1fd23d0053b9f80a84ee5a5505e
SHA1 2997abe1d29d69fccb1b377d7d740edaf9ae43e8
SHA512 efd0e5a4f59be321ae4e73fa45081c484a2da4e98f6234333c421deada1e0e53875333ca9796e881dc43a960e6c21683c5751793d1c57916df79a7a6bc6b69b4
TLSH
T187E00103920045E7C42C13B101C72A203AF2801043F642451A2041792C233402E22E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bc0988782b619a6b110f4e20f6ad6700acaa1adeb428642f10aabd6eaa3d8c3b
MD5 e2d581db698db1525bbbb5a0e3ca51bf
SHA1 223dce26998ccc2b9ff2c886a0c3436cea910930
SHA512 3dc9098007d27c1fd758b419030d830ec9d11a8b7b9f13d2cc0415bb0aa78aed0ed65d9e2a91629fd1a6d8c8f36a6ccf55186e1332b69509fe8f66d902e043d8
TLSH
T13AE00103930045E7C43C13B101C72F303AF2802043F742451B7141792C333403F22E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 013dda5cd84a214aa5dfb3b42e69b62102efed3c8f7f4b932087a877149f2736
MD5 2493a511fe63b2dc885459b5a807c6dc
SHA1 7290027043db2c9ee9cf466675e0001e1d4ccfc7
SHA512 c1077ffedc33a68be5db05b9b71ab4636b928fdb8090fbc36e964cca558a79e6afd8e3781a3ed9cdece5b43134db547f9fb8fdb9772160d9bb93fa250a219ea5
TLSH
T15FE00203520045D7C42813B100C72A203AF3402003B741041E3041791C233002E12A81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe596c8b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe596c8b.TMP
Size 392B
SHA256 6cdcfcfbc4e03e90ba7a3ec27bb4ce3bf06ac7cb995d0288711456b5d2e44d4d
MD5 0768ece873d2ceffe78fead36c81ae51
SHA1 2a09bdc6be35afec6bae5ed56f49b49b369a67ca
SHA512 dd2b0a2acdbb2831b85623811825dbdefef96d69129fdcb3413d2f1a5cfdcae379e0236119ce2bdd56f8836dbc4ca6c42c668aa32d5a4e68a17091654a727e1e
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5d27acc8105e4068c15fc68fd08a3c1df425af278179eb3e30cb097f9fdc5c8e
MD5 850bd4a463571c5290a768c6feaeb4f6
SHA1 f5a8eb84c0f57cddd03f7602ec4913cc879efd2a
SHA512 f805c0148d65def56cc17475c2f705206da15273d7a8f39fa7c5d3a2543d3e2f673d00752094848ba9f5873fd7d5fdfac640245b271352e7698eb269a214dbc7
TLSH
T1BB412A68A6FD1148B3777F5AABF6646D487E7D272E46D19D00010E4F0667B40CDA1B33
MD5 SHA1 SHA512 TLSH

Submit Download