hxxps://seegore[.]com/vietnamese-butcher-uncensored/

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
898s
max time network
737s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 22:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://seegore.com/vietnamese-butcher-uncensored/
Sample260628-2k5ygsfx21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5652	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271599918329048"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{123A30EB-71EA-4CC2-B50A-3BD88576947B}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{15DCF537-3A7A-404D-AB69-5A5935D5D5B6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5664	msedge.exe
5664	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 4828 wrote to memory of 5312	4828	msedge.exe	86
PID 4828 wrote to memory of 5652	4828	msedge.exe	87
PID 4828 wrote to memory of 5680	4828	msedge.exe	88
PID 4828 wrote to memory of 5680	4828	msedge.exe	88
PID 4828 wrote to memory of 5680	4828	msedge.exe	88
PID 4828 wrote to memory of 5764	4828	msedge.exe	89
PID 4828 wrote to memory of 5764	4828	msedge.exe	89
PID 4828 wrote to memory of 5832	4828	msedge.exe	90
PID 4828 wrote to memory of 5868	4828	msedge.exe	91
PID 4828 wrote to memory of 5832	4828	msedge.exe	90
PID 4828 wrote to memory of 5832	4828	msedge.exe	90
PID 4828 wrote to memory of 5868	4828	msedge.exe	91
PID 4828 wrote to memory of 5868	4828	msedge.exe	91
PID 4828 wrote to memory of 5112	4828	msedge.exe	94
PID 4828 wrote to memory of 5112	4828	msedge.exe	94
PID 4828 wrote to memory of 5112	4828	msedge.exe	94
PID 4828 wrote to memory of 2000	4828	msedge.exe	95
PID 4828 wrote to memory of 312	4828	msedge.exe	96
PID 4828 wrote to memory of 312	4828	msedge.exe	96
PID 4828 wrote to memory of 560	4828	msedge.exe	98
PID 4828 wrote to memory of 560	4828	msedge.exe	98
PID 4828 wrote to memory of 560	4828	msedge.exe	98
PID 4828 wrote to memory of 3604	4828	msedge.exe	103
PID 4828 wrote to memory of 4420	4828	msedge.exe	104
PID 4828 wrote to memory of 3604	4828	msedge.exe	103
PID 4828 wrote to memory of 4420	4828	msedge.exe	104
PID 4828 wrote to memory of 5444	4828	msedge.exe	106
PID 4828 wrote to memory of 5964	4828	msedge.exe	117
PID 4828 wrote to memory of 5956	4828	msedge.exe	118
PID 4828 wrote to memory of 6068	4828	msedge.exe	119
PID 4828 wrote to memory of 4720	4828	msedge.exe	121
PID 4828 wrote to memory of 4720	4828	msedge.exe	121
PID 4828 wrote to memory of 5664	4828	msedge.exe	123
PID 4828 wrote to memory of 5784	4828	msedge.exe	124
PID 4828 wrote to memory of 5784	4828	msedge.exe	124
PID 4828 wrote to memory of 5180	4828	msedge.exe	125
PID 4828 wrote to memory of 5180	4828	msedge.exe	125
PID 4828 wrote to memory of 4164	4828	msedge.exe	126
PID 4828 wrote to memory of 4164	4828	msedge.exe	126
PID 4828 wrote to memory of 3924	4828	msedge.exe	129
PID 4828 wrote to memory of 3924	4828	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://seegore.com/vietnamese-butcher-uncensored/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffcff25c188,0x7ffcff25c194,0x7ffcff25c1a0
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,11476417998832574162,12256181446367742714,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,4235990069108906300,8858284805019110970,262144 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,14423957527004011441,7609318196759890806,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,3574463288432076703,9525083417068819919,2097152 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,7748284835271663396,7746821717874215707,2097152 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4980,i,2285497493819567600,944670227624889595,2097152 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,6803988760918784550,9280557075988460318,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,15530855720356890159,6751999792538499494,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5952,i,662892796074383664,953599128812084064,2097152 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,11004944570793424992,17539955258021621139,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,10456474250769111320,16237815031942044458,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,9563853367875740073,8933805991689488690,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,9563853367875740073,8933805991689488690,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,1298525256307979790,11447642661783722590,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:8
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,2190274216085113579,3495208558966197424,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:8
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6620,i,5631677339406166610,13545906419541489483,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,4894373123503975078,1298665360699565763,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=1204 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6788,i,9661471611678627369,8332678553028788669,262144 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4896,i,17076635152011274160,6155881005983168194,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,2003435300976775090,12349509320767676238,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,3054784360666859349,2887149353283828734,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,8096472496838361796,6416828824744570602,524288 --field-trial-handle=2280,i,15350734636764698642,15344227458098345179,262144 --variations-seed-version --mojo-platform-channel-handle=1328 /prefetch:8
  2⤵
  PID:3924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

81aef5a3-9c2e-4429-9e3c-fdb419bca4d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81aef5a3-9c2e-4429-9e3c-fdb419bca4d3.tmp
Size 30KB
SHA256 69690d2198cc306427fbb8202494acb3e58ca790c539ab8396a31bbe3545a3a8
MD5 9166f7b9794665be027a1291532d1ec5
SHA1 48981e4fe99bb26e05e00212afb0383a9fc696cd
SHA512 1519e1ca6e5e68d98f9a18776fedd7dababef57a24ac9285707effaf4f10fe9913e2555e74f75ec093c5981b2a824ccf2c42231e4e98c2f38b6983b65a1cb30a
SSDEEP 768:ZYsv8Od/hWvFvQX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQro9RLG:eY8Od/hWvFvQXu1ja10Lm2Nu/S
TLSH
T1F8E20C3B284CCB7E4F840E9DEC26AFD66DD801CB66984D5447FA884C02C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 d8b1d1edc725f4807196d2eb70f582bdad227b2e3ae98922375b60dc023c3a3a
MD5 f33f1394095c536a678ceed122a7178f
SHA1 d82ddbf5dbd50575c933b155bbdd82737a951377
SHA512 788d0d8adff27bba19267937ec2779c34f7cfc4d54b373d2c58a4a14c367da279ac0782cfd858494c0691169b069b18c809f54dbc6cdf64c9e944b33a1d4ab2a
SSDEEP 192:Mjm7sAAwwweee1118TTT666xx444fflOOHHHgANh:Mjm7sAAwwweee1118TTT666xx444fflx
TLSH
T1D3F14B06C6F8DB9A9B0952CF4DA1527C5170370EEBDED50C039D89DE304E99EF4A9A90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 a7f1c297a3fbaf5feb1f01301008fd9d3ec3f3fdf73cccbef614ff57af5b9341
MD5 998c09b2561de4f2007f52dc429b0685
SHA1 cf38edab80be741d9025b0a04440c4bf5bad8bcb
SHA512 f921129c177b99192f88f4666be1956d3425954bfb0e5974bbccf6c4d8e2987f91c2a4d00739fc4f5aaf816182a29dd3a2ca9738c33d87af4b4bd571b43a2826
TLSH
T1FFE0266CB3F0E3E80129961BC896E33C8110B08F91DE64AD3A06F8DF644D20493FACD4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f6235d5bdf0b231a279eca577e67c90119d516113051efa00a5bae8c9ee4aa0c
MD5 9411429364f2ef6c06f3a3560f8d5d56
SHA1 637609400022728af5cb92365cd04166e369dcf5
SHA512 ba774548debfd9bf483cd23e157e2ef18a7ea48af3f02e04bede80238446f644fc2f19c29b57a5ac87bd890a1c98abb7ac63e4eca45823d78ec543db5122995c
TLSH
T134E07D8C47C8C32ED200A58B5174630C83A0360FD3CEB90E1F108C99308764CABE7BD8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 151B
SHA256 638fc7e45a745683ad16c83c4be835e65031503a39b5c456ce140c71d890910e
MD5 00a76bdd21b71faf50b8ecdd6027696f
SHA1 1e4e7650207c1941c05d1eda32fed3a6de831ad4
SHA512 263500319a5bd0ee03b7aa67af740ba8dfc0c9724a4ccff796526f04be4f699eccb58c2cd738fe74cb967c8096a9d5e6ac7d4ebc11dc1c72a2e721a58da4a4f2
TLSH
T1E3C08C7938DD681AEAA8287AA34AA0040FB042052022FC2642B8EE847A815A40A5A124
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 9489c8e9f2b54abf3d3c0da9e2da6d823625679c8923dd7bc51a797a28ad85ae
MD5 7aeef6383b5cf1eb85f55ae71aa3107a
SHA1 055cca2647b835514d838221b21f21edec2fe643
SHA512 9b7bc4fff3e15a02fc3a0a172c973aeecc0b610f52de658c8a4c54ffafcbdbe119b9247143d07d62837e9935f6fe65d49f3cd10bfd5a8f53e36e829a4b2d348e
TLSH
T1B6D02BB979DC694ED6E418FE536670100F5442511017EE170164FEC03AC55F41B66020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 05ca710c00c9e1dcb8ae38e529711f9ed36d69af43bf95f71984da00604705c8
MD5 fb3a6951421d420fecb9598f99a4b042
SHA1 c6c49eff35c426526af256a36875ff9e85f4fd40
SHA512 8997d1f3c205e786e7c3cba05058b4372502444677b48881eb00023b622a24703305184d477518d21b39744b983a4254254456b62918703b9c91252d4e28a121
TLSH
T19BE022A6C826EC2748FD4B69A05D9746E74523272A50994F3A3C8309CFB163B86C685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 1024KB
SHA256 792cbecb50077c96db05e4806dffc2b8b648ff0300e1e17f4cdf0eadbe4290f6
MD5 8a8c38c7c410a8e96b614b58ea64bf85
SHA1 b45f6b054cd67466568c4d5b07b4ad19324cec1c
SHA512 d19fe604b117007c5e5ba38ac79ca5c1d072b845614443327d588816101d5acb7fa761b698b613b6fe53cabea96ade0e192be8bc85b57048ccdbf8cab9c5988f
SSDEEP 24576:DgY+46XR6Imshhp9aM7EexI+dJQOaxxFWUjR:DLI3hLnH3+OaxqWR
TLSH
T1DC25DE4ABBB6905BDA2593BC89F7C3183370D0A82B5B474B478C7739BCD63A81D825D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 1024KB
SHA256 f5fe034c28abcd0e98be7fde64615ccb12423792ddb6e7d457e5e386c132acc9
MD5 f01448829e741b5bd331f9540ff2e286
SHA1 2f6a81ea4120ce4f89dc907cf099a346d51f5f08
SHA512 22a13ada64b08ea4ed98d30c1f8886997c84f9c1f6cfa5161138fee908703f4aeddbc5e2d915d76768542d31d755311f84a038e1bfc1cc8f8acdfa9b032a5d65
SSDEEP 24576:mR0HA0FKKtvW8p4vU+/KZgPQNALX1CjneQdv5Uyf8:a10FrK8g3PQN2X1CjeQN5Uo8
TLSH
T17725339F4D65B020E53F20370A9B3FC6E1C28D1C7DAD9E0B3419642F94125972BEF68A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 991KB
SHA256 67cf6aa527d34e8f95bd56ccb1c56a0fa7a65a0382fe687d3e3a9c18a852b09f
MD5 729a5fb7278cae61fa08134734b5ab69
SHA1 2f1523ead569d39507cf39820620d434455ddbbf
SHA512 3671a2b8d781561674d372371fc393d85e7273a2833a41374bdcf74992ec5f00e86f6d0a81f5aa499a1766f1af154148bd37e3384800710e1b48e7e6abac165b
SSDEEP 24576:0yMFLCuZWIBxacv0PTlpbNYuthi6xYtmtQPsXWgNFzom:UlC/wxfvmlHtXisYY4gnR
TLSH
T1212533EC3D9452D4CA88B5B70176A60CA13F7B750840C3D793AF4D9376239F8AD2A253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 1024KB
SHA256 a0eeaea737de904e9fb0c1434341851e998572c2a4e2ff174941d609df4763cc
MD5 c53444454399f7f32b122e91fb8cbd6b
SHA1 4991b3d21794e838b227baa37d1f433b6f86d87f
SHA512 b3b1136f0fee0c3df431d0622e50ad693ef9bba764869a42f13ce02bef20c7513686b3b87ac34fcf512dbcc9ffcfef7cdc9e735b07ca5da099e8628c20583f7a
SSDEEP 24576:9xxL9IVc8yhtb27Aoe6RsIvVxSkJwqYZU1biKG64omEIW:9xlta0oeTIdxSkaS1WKdDIW
TLSH
T1FA25339A37A7231819F404CD097C5F1B7369DA33C3DBC02A5A712119F6728E9DCF91AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 1024KB
SHA256 68a73dfb97f244c7797035a1dcda5432fb0e5786cbb4d16c412528e01c9a74d6
MD5 45274229b98c1ac3288dc0f7e268fe5d
SHA1 e15d7184d66193f4ce13840806c272a4b15e151a
SHA512 adb6823defb4278c9c22e87004ea6cc8611caf5882be59f9ce34b26b4d19192f8df7540fc740cb357c477c8546b1a1787ae739bcf470949a8d26550b43ed1176
SSDEEP 24576:8/Iw9ohET3SfdXRf+R2jxQhn2GqeD0S4iHG/9Et2jRHJd:o+Xf+kjO4GqeD0gG1Xl3
TLSH
T1F925339F99C5B877D09AB0F78357AA896334301E01534FECDC98B15522BED8E6BB3904
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 1024KB
SHA256 a7e7253b6918e8ca9546bfd4c117c9f566bc41948194d624c6968ecea3006e07
MD5 c8b251621a9c69df2fb70ecb3538df96
SHA1 323967d3325803252347d45c3c6a6d8ea3ff8b0d
SHA512 b9513f980d6592e40a3af9bd16b07e62d67d2cdaba67595e198e980bddafb0a06485e5168f24ecea447b3af8e96e0e00c1642b7a25e080b5ade460012ed9470c
SSDEEP 24576:sVDUraxH0HpQUkhHsN0HO35kcWOSd+ATp+J3gvJgOXhSqpcAh/m8M:WxUihKNI02ca+WwJ3gxZUER/2
TLSH
T17F2533848A9E54D5E19D2CB80343FAEC075A8F6C805DBBD49E4AC83A9DD970DE5F430E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 1024KB
SHA256 d7c61664e7c8a96b9221269ab71f66e44517a46125934066354e612528f5577c
MD5 f9170aa425a9cc31030d3cefbae5f142
SHA1 815cd5976ff70e593fff7b3cec569d1b29f73d04
SHA512 11d23c47f30b92a20343219b139542eddde2cea967d2b3cc9553ff7daed8df436b310e229abdd4558c36d22edea67f588adc2049f5167b5c0a3710645e8eed98
SSDEEP 24576:MSrHTub0lsJ0EFb2078R7NErqfyUSkul4Fm8aMs:M10CJ0y2078ZNmku6FmKs
TLSH
T19D2533B7CD1A840AD0C0C3BF10ED9D831596D5ABEED31EAF764158B734DBC596B28A80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 1024KB
SHA256 81a4418c7b15e307ad78b6c5bdc412b78739f0974f890cdb35a23e1fe1a34031
MD5 e9d9ea6fed371b3121d972fb8e17d475
SHA1 bc339109d636dee6e4684933b5cfb26aaf90612e
SHA512 047ef6592d47b538f0d36549724cf82939db357116ab0bd234c40c229ed820b05a0a759802457016e64e72511dabb2a3d5a1cb56f5475ed8cc1437fbea87441f
SSDEEP 24576:jCCIlDgt6IxVTMRgS0k3rElU0QWyMjtEZVte2zOIYRlXBEE:+v06eIRH8DZtEpzOIYRlXh
TLSH
T18A2533015A18F81FFFD76D1F5D227A1EB9C2009540BA683B38FC6E86D566A0ECD7844E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1b2c5d0fe3124d4b352731b5d65e4c26a3e1508e4d0a788cf641ff449eb4d4ad
MD5 240c3a1eaa59c4404c64c1a0e899631e
SHA1 9937075f527426870c63bf6f0b597769c9cd7f45
SHA512 6185db8406b0d566ea20f43dba552d913ae7a30491d062d9b5039c119ef6b612c89f5d999dff3a37b06a72f37753295c4a22867592cc6e90a0b7479d9734aebb
TLSH
T15171803638D186E2EB10C93DBEC4095477336ED9F5C32E2602903CF8192EBA2C10A2DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0655198a12102c15046f1c2ae3314439700a540f497ed041d54c0d0cd2c9a6a6
MD5 bfdd5f2a5950e74afc666ce597c0d262
SHA1 75a5d2632eb8c575b22d45d16cdce7bdee8b8829
SHA512 2d01784b2efd5da2c89c6432440c2f1bd3e6f49cb405ed0cd745bb54020f6eff9b21bc9560eec83638a8de54b89936b31ffe7e349a041ba6c04fea6e17d85d24
TLSH
T19671713638D186E6EB10C97DBEC4095477336ED5F5C32E2602903CF8192EBA2C1192DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c61a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c61a.TMP
Size 3KB
SHA256 990f6eaa965d8be10a4735a4314fb82027f8ed780d985a029e0441c4eadbc7fe
MD5 57f140f3fc1acc872f095ae93f9e2a7b
SHA1 81c89f0039ea7cfc16e3f2aaedd92c9b1f286280
SHA512 e610249edb04c2d4193baeb53c668bc375d8fa0603f463ebe19f67b2487a4c7622799b028061e8c26932c87e9adc59e6f37980b30042c74d1cb77651f27690cc
TLSH
T1FD51B4383952CBE2EB50C27DBDD4025074736ED9F5C30E6510603CF92A2CB62C15A2DC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 21affd338186811feee5e0cd05f90784476adfed2a514bfea1dbc6ddc7ea6850
MD5 b981b3c05e4a8fe15e38c73bee04f13d
SHA1 9debcd97cfa88e49807e1a961c9b82bc64bafaa0
SHA512 fe77f04ed846498e9f83bcf77d92fef0e304d6502c161c651140b1e007c60903f9834bcdedfc62aa7755bab11dc0846252c4a9017803a051fa687ebc69b99524
SSDEEP 192:D1g9IP7EpQaaij6d1IDbsT4mDyoIEK6i31hbiiEbYNGlkC:D1g9IP7EpQaaiGd1IDbsTFuozKPlh2iQ
TLSH
T13CE19EFB83E8866ED90552F4D6583D1FCE5D1D245318386688E5BF0B53E2471E280B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 02e5de4306be2fd4b8bc86c42d283a5343da7342c7405610d4312bbab9cca266
MD5 3ce1bd6b9d788c3c91a66b8874284cb4
SHA1 689558b4c00c44cb1e7c9fd6518571f1dddcf26f
SHA512 a3c0fb6b69df7e38f7a6b26128fa1e86e13215d9914bdc12e2fdb3682e60c29638a801fbe7ce041ed835e2ba751ec0475f74b41237c42734e0e2bb71460d225c
SSDEEP 96:D1NOuqQuq/uqXuqWuqTuqxuqFCaaCzBuq8uqD7uqsuqguqfuq0muqHiuqkEuqkxf:D1g8r7KHlhCaaC1IDYsT4mDiIEK6irhd
TLSH
T12EC19AFB83E4866EDA1552F0DA587D2BCE6C1920531C396689E17F0793E2072E280B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ef01e54f219811ac9aa805e6f917d0ad93cd194b9514587a320fa81cfb0e0c61
MD5 0721e6b0f790b7dadb2f1a5bb48e0459
SHA1 fddedfcc8e0ea5cac66b7d34d13cfedad60ad461
SHA512 f03500c29c35d8f7d838406f45131af98350aba29d1166d227256234f3a2deca40e11ae1750a48a804a225f7e2ff800663bdfb999c1cfa02be8cbcb33fd81b10
SSDEEP 192:sxZ8RhyMqZjK1Ml8UQJ9z/fYsrwZdWzodpi4HW6+WNvH0dYvbwuMbIg5u4J:sxZ8uq3z/fYsrwztfHb8dswgc
TLSH
T1A762F8166A345977CCDBD209F645BB53D6F91573A2904E44A9FC8A0C05E7BEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c7d7746c8e9c339fab49a36ecf6806814bbe603d22db37d392df2b321efa9211
MD5 134eae1deb6922809dfdaa89e6fe1ba8
SHA1 19279faf2d6e21fe498e398048a8dbce01220bae
SHA512 9bc2764926c856c418d9117e91a4089848cc606feea5cb672edb27a5bdc97b72de385020bc41c952b7d44211d43f006f87922d43b26971c4f813ef6c0cc3ef50
SSDEEP 192:sxZ8RhyMqZjK1Ml8M9z/fYssSjaZdWzodpi4HW6+WNvQP/YvcuwOMbIgj4J:sxZ8ulz/fYssSjaztfHbM/Cwjc
TLSH
T13A62F9166A34597BCDDBD209F645BB53D6F85533E2905E44A9FC8A0C05E7BEC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\temp-index
Size 2KB
SHA256 429f1a3cb318019ffa33ecbd805f56628bff923a7b1ee34bcdb126ac42810ce8
MD5 d7d5708c9a790d6c509ebd38bc12779d
SHA1 a5fe8476fd060575688b0ca5541b77e9b24e8537
SHA512 19eae37583b5544b5fc626e3934092c061a00934df2a424dbbac92d7610cb176e996c18ffd6d4a4fb43bfd196468b6562834d930577df503c1ca91cbb6218d1c
TLSH
T18F51D88F4D128B6ADDA845B204B250903B78DCCD2B008A175CFC6337BC5362E295B6A9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 373B
SHA256 ad9c5c6ab938c2ba137cb6cf34816fb2ebb8906813365aceab0d57386cf66deb
MD5 1bfac18b266d4145228330dd0b749806
SHA1 eb0308a441453e0ecf64aa951927965a77f8f480
SHA512 ecdfa6671d870c08028640bff9f4e0bd89bad4d944f06411f68e64b6f4dddaa0b6ba3ce052c482e694cbc298e91194f5db0c157a8a3473c599ae1f8a2a7f318d
TLSH
T1D4E068B33EFB1C50FD6BD3C6213008A004497550D840AD0F241AB28720A13192059CA6
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d065eac8fcb68038869199685ace6a43190b0170384ce76681077fb28dd83b0b
MD5 8e059069937ebf775cf2a3e7cf284b0a
SHA1 cdcc64959d2ca535a6d0e2f31120c27f276b635c
SHA512 b15357cee8abee4aa5d783921d8f62f090a5e3c24105f6d4441278a169d075104db442d412c342fbdd012a92ba8ea7fa60d2d78cc2a296cc37ec6723564bbcf8
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGj:05ppxnY753RNBvRJJdt7p5J9D7n7
TLSH
T1D5B27B5A713A0212397E2948B39696374F4235A33058E4BF7FB814A14F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ada3be198dfe426a8ba245ea6ec25c2243ebdbdb46ce7dc51471bc5e2b8aa044
MD5 4176c1445ea72a260f0d966d2f9b6bdc
SHA1 c67e9c2368b328f6422e16769a3f05ddc1f6753f
SHA512 aa4d5234d59d7097078155da53e379c8f9617642f246b6a36b19edf9cec55c8b410afa1ff384a05a7aec80679dd042805c4051a4543dbb50b0ae9dc130c693b0
SSDEEP 384:nziF1tNn/s3n9ShPsNE8TUNTUlI4OQckCr6WHphifGGY6sx8rQCQscm9UMty/7IY:eF1j+9OFwg9kkJFGYBCQCQ3R
TLSH
T158E2D5F698D39977E99E4B87A33E2E0299FCD153B5885A94B3C81D0CCC861BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 b157ccf738f293c1d73d5d2574a4808ce5064209aa24b3377ef6931b26e91cd5
MD5 ad28ef7dd5c04191a047c95be6585f8f
SHA1 1f5b885aa7887bf322cffbe6b97acdcbf3823157
SHA512 fef8d8af8a4ba777ec53ebf0bfc0be70c3fa6e9b8adb6dec0b3ad8e56866fec2bb3ce2796532a4497eb2890f1f6738c4b71c26fddc13b6051407da9322814ee1
SSDEEP 384:npviF9CcmyWCs3sNj8TUNTUlIm2QckCr9l6KphifGGY6sKppwe4KV8p0lHrty/7a:p6Fccps3CwgbkUAkFGYaUI8p0V7
TLSH
T1AFB25C36EC58D9BBEDE74F99B74E7A07DEE0112785989AE4CAD81E0D00971DC070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 439ef25c5c2ccf09edfa2e0f49d3a24cf861d422c22e9885ae52346d9f4509c7
MD5 03ee7d182c665e6e5776f64c80ba5510
SHA1 8cf279aa41bb0873bc022cfa74d1684fb52c359b
SHA512 d30a77ec3b992bc9a1fd7f8f955e3f84cae4cc4c2b530dedd9edbaa3aacdb473f32089bd63a3ecb311e39191f4685f32a770d78e2adb23dcd4a6da5629b3e84d
SSDEEP 384:npciF9CcmyWCs3sN48TUNTUlIm2QckCr9TC0phifGGY6sx8rUCQe4KV8p0lHrty2:pHFccps3VwgbkU2SFGYBCUCQI8p0V7
TLSH
T1E5C25B32E864CABBFCD64B99B74A7A03DEE051238A8C9AE4D5DC1D1D00DB19D470BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 b5916adcf0abbf8c85ce959b5aff1efd01960abe9a09ba854525544ea88819ad
MD5 991e511b3de275dfc4e3c336096beb17
SHA1 5ef580fbf017ac7dd0ff76bbb34c41624187719b
SHA512 3f215255bd6bb313104fa3df9fd17fab893e7ed2086a325ca9197ba80d3c3bb120076313afe094f6e586f8ec584a922cf07af717b636a7ad04bba6a95238a01d
SSDEEP 384:nuiF1tNn/s3n9STsNE8TUNTUlI4OQckCr6CHphifGGY6sx8r1CQscm9UMty/7Igp:FF1j+9cFwg9kwJFGYBC1CQ3R
TLSH
T197D25A36E864D9BBFDEB8A89B75A3A43DEF051538A8C6AD4D5C81E1D00CB19C430BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 34d5c768d7b2e7d1f7eaac1f817ae074dd28795f024d712b4543e07f0fabafab
MD5 25c37a28bd7961d8c5965e13b943a545
SHA1 8b01e245a8f705be0efe4eb56d433dcc07433065
SHA512 fdc8d137b94955964c06979d113a21f021ee2f3aa6c9f7d57b66b6355be7ef178aee6f71b2d334b0fceac866e4be52ff8d3b73178c6de91b3804b6bff86acf84
SSDEEP 384:npBiF1tNn/s3n9STsNE8TUNTUlI4OQckCrDCHphifGGY6sx8r1CQscm9UMty/7IY:poF1j+9cFwg9knJFGYBC1CQ3R
TLSH
T1A2D24A36E864D9BBFDEB4A89B75A3B43DEF051538A8C6AD4D5C81E1D00CB19C430BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fd1a7a76e89964c3f71fa8b8baccbe6e42edd26a9cd14629314095aba4a20d69
MD5 b12a40209c73bfc76c389d5d7b67b466
SHA1 cf1db5c5e3e546cb3e669b7a5c2ea02acdbe39c0
SHA512 d96b5c6b88e9e1b66c1abf120529ab9bee4ddf96b9263640028d9a3b962e83aeb4ec784c6dbd5a9560a5b9d33a6a09f0adb016377dc42d9ae630344975477128
TLSH
T1BF412D98BBEA1108B3B36E569BF7B86E447EB9772F07D49D10110D4F0627A45C861733
MD5 SHA1 SHA512 TLSH

Submit Download