hxxp://discord[.]gg/britishforces

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
1799s
max time network
1798s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/06/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://discord.gg/britishforces
Sample260630-e3vtxaew2w

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
27	discord.com
28	discord.com
31	discord.com
40	discord.com
57	discord.com
561	discord.com
562	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134272673665803968"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{9142DC43-5DC1-4278-B1A9-84ADE0DF0BFB}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{263B133F-2E49-43E4-8DC5-1B8CE2A7FF0C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5480	msedge.exe
5480	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2800 wrote to memory of 4988	2800	msedge.exe	84
PID 2800 wrote to memory of 4344	2800	msedge.exe	86
PID 2800 wrote to memory of 2056	2800	msedge.exe	87
PID 2800 wrote to memory of 2056	2800	msedge.exe	87
PID 2800 wrote to memory of 2056	2800	msedge.exe	87
PID 2800 wrote to memory of 3804	2800	msedge.exe	89
PID 2800 wrote to memory of 3804	2800	msedge.exe	89
PID 2800 wrote to memory of 2552	2800	msedge.exe	90
PID 2800 wrote to memory of 704	2800	msedge.exe	91
PID 2800 wrote to memory of 2552	2800	msedge.exe	90
PID 2800 wrote to memory of 2552	2800	msedge.exe	90
PID 2800 wrote to memory of 704	2800	msedge.exe	91
PID 2800 wrote to memory of 704	2800	msedge.exe	91
PID 2800 wrote to memory of 4728	2800	msedge.exe	92
PID 2800 wrote to memory of 4728	2800	msedge.exe	92
PID 2800 wrote to memory of 4728	2800	msedge.exe	92
PID 2800 wrote to memory of 4992	2800	msedge.exe	93
PID 2800 wrote to memory of 4992	2800	msedge.exe	93
PID 2800 wrote to memory of 4992	2800	msedge.exe	93
PID 2800 wrote to memory of 3308	2800	msedge.exe	97
PID 2800 wrote to memory of 3308	2800	msedge.exe	97
PID 2800 wrote to memory of 3308	2800	msedge.exe	97
PID 2800 wrote to memory of 420	2800	msedge.exe	98
PID 2800 wrote to memory of 420	2800	msedge.exe	98
PID 2800 wrote to memory of 3424	2800	msedge.exe	99
PID 2800 wrote to memory of 3424	2800	msedge.exe	99
PID 2800 wrote to memory of 1568	2800	msedge.exe	101
PID 2800 wrote to memory of 2136	2800	msedge.exe	102
PID 2800 wrote to memory of 704	2800	msedge.exe	103
PID 2800 wrote to memory of 704	2800	msedge.exe	103
PID 2800 wrote to memory of 5740	2800	msedge.exe	111
PID 2800 wrote to memory of 5740	2800	msedge.exe	111
PID 2800 wrote to memory of 5740	2800	msedge.exe	111
PID 2800 wrote to memory of 5928	2800	msedge.exe	113
PID 2800 wrote to memory of 5936	2800	msedge.exe	114
PID 2800 wrote to memory of 5944	2800	msedge.exe	115
PID 2800 wrote to memory of 4752	2800	msedge.exe	117
PID 2800 wrote to memory of 4752	2800	msedge.exe	117
PID 2800 wrote to memory of 824	2800	msedge.exe	119
PID 2800 wrote to memory of 824	2800	msedge.exe	119
PID 2800 wrote to memory of 824	2800	msedge.exe	119
PID 2800 wrote to memory of 5224	2800	msedge.exe	120
PID 2800 wrote to memory of 5224	2800	msedge.exe	120
PID 2800 wrote to memory of 1568	2800	msedge.exe	121
PID 2800 wrote to memory of 1568	2800	msedge.exe	121
PID 2800 wrote to memory of 1568	2800	msedge.exe	121
PID 2800 wrote to memory of 4232	2800	msedge.exe	122
PID 2800 wrote to memory of 4232	2800	msedge.exe	122
PID 2800 wrote to memory of 4232	2800	msedge.exe	122
PID 2800 wrote to memory of 2964	2800	msedge.exe	123
PID 2800 wrote to memory of 2964	2800	msedge.exe	123
PID 2800 wrote to memory of 2964	2800	msedge.exe	123
PID 2800 wrote to memory of 3436	2800	msedge.exe	124
PID 2800 wrote to memory of 3436	2800	msedge.exe	124
PID 2800 wrote to memory of 3436	2800	msedge.exe	124
PID 2800 wrote to memory of 5844	2800	msedge.exe	125
PID 2800 wrote to memory of 5844	2800	msedge.exe	125
PID 2800 wrote to memory of 5844	2800	msedge.exe	125
PID 2800 wrote to memory of 5480	2800	msedge.exe	126
PID 2800 wrote to memory of 3756	2800	msedge.exe	127
PID 2800 wrote to memory of 3756	2800	msedge.exe	127
PID 2800 wrote to memory of 3756	2800	msedge.exe	127
PID 2800 wrote to memory of 5140	2800	msedge.exe	128
PID 2800 wrote to memory of 5140	2800	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.gg/britishforces
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe5ca9c188,0x7ffe5ca9c194,0x7ffe5ca9c1a0
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,13827440307004493807,10918668858147147373,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,3177239478771780064,1627616774891200459,262144 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,12617945054433763191,6351517281672875567,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,12381790133220373917,13756856437121048633,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,2173739471005539602,4561830758948454300,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,16900316775715744460,14455693564320701127,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,8555540880337759988,18406702407726132104,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:2
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5052,i,11455440968722091263,18369580206803069905,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,2075620337070582280,18218580641174190953,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,6920905820321314455,15960213158627220081,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,13980949539934479167,9361411795121806357,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,13980949539934479167,9361411795121806357,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,13740466952783705953,7836818557803264929,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,13976159311392362853,2409921803657699663,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3416,i,16012330534900360151,5890646417665527051,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4092,i,12190056292691382042,6685117452603425700,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:8
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,3043974570210857538,2640472636109307258,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,5229910366507612624,5643535630894243060,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:8
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6904,i,18038367637954718194,664977343535331870,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5432,i,13420461552260577783,15337939240469133118,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,14996475130907812247,13408143255454837668,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6792,i,16750013109313017519,6656687369945483541,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4728,i,3316301666104733308,11228314315199007508,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5516,i,9862692907507338441,8290403311716130264,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5432,i,5621305772819553815,7106644307988721414,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7548,i,11817518681637578395,18026746605015335674,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7580,i,6463379035987924442,19226689979835172,262144 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7312,i,9860788320858022543,18064660284793455255,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7248,i,7010284736110912798,8729878615446939269,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:8
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7652,i,10425727409740935141,12335083132269972637,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7212,i,16449132485720953527,12484013167494652780,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7612,i,15057210383681019901,7479801072414844454,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5868,i,11224239554923004035,9192058612243072627,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5512,i,1464141662364168494,14531619027497548241,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=4996,i,6894822784490257651,3269921746023777572,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8180,i,12389696772231235998,13296672450967606382,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7308 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=756,i,11501723748792372106,4102380985616328059,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5968,i,4843472581518369034,210144763512000238,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7104,i,10874996993764315541,3642917277060896881,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:8
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7092,i,3723820347611108610,2649720628774300101,524288 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:8
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8376,i,18011519434640795052,15821534457774812150,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8124,i,2443575955436651921,5760790588732538969,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8440,i,2673230579543766276,1096362583033840533,2097152 --field-trial-handle=2300,i,16200918796175513202,16304838871823543089,262144 --variations-seed-version --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:5296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 3f4613ba21168f3c2c7e09e49f265ea32502ed091b1bcc651bc75283e1ce082c
MD5 3ad2e129c05fe39b8b4a0bcb77e467a4
SHA1 40c38a184e7e535f2ab28ae53463e4864005b42a
SHA512 48c5c260e88a6d07d2d775070ad181b548de306210901199259c081242e0d17bfe7689a60ecf5a0743fe39a6eb0607d862f22f134a80efb559b2277e2e147fe6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7M:fwUQC5VwBIiElEd2K57P7M
TLSH
T1FCB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 d490fae3bdc11fbc72c15469ddf01c982a3363228f3119a5c5a9068c6167b6a1
MD5 aec8706ac8df7336c8e574f8dfa2ba35
SHA1 25a2d346d2bc52b2ed0db238240e656e67ed279c
SHA512 168fdf6ba36c5aec8a14ce56811829b0e47374bf3b8cbc18b83c1e1a1d6a12f8dca9c8a4defea77821f5bbd89d9616588eee4bf23db1501bdd649338c7511a75
SSDEEP 192:9jV6ctWWWW5555III6667777QQQBBmmmnnnMgLO:9jV6IWWWW5555III6667777QQQBBmmmc
TLSH
T10EE14557C2E4E79EDB0510DA4AA0625C6074370FEBDDE94D038CC9ED718E49FE4A6AE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 401KB
SHA256 18a80e2e61fc27341cc9e9fbd6412d397ea7c6e2f1b2fe2d7c354f106a856d5f
MD5 ea322c0bc9e34784f62ff1e32e4af8ab
SHA1 fbbba593e03b57f9b18e5b8f0e6e06dbe011412b
SHA512 5a638e3ab863ebc0051777d1c1119ae1aa709f4362adc7839c0f9dc3740f498c46bf34a26ed6a94c1a02141a9e5063cd4cd7329ce4a5c8d2d9e44ae9a3f3421f
SSDEEP 12288:j8tJZaQXLOtDlX0UCkCqFJJDrXycXJHARgB0nfZP7y:j8ta0LOzXdjDh6gByZTy
TLSH
T1819423DC2F26851BA512C6BA561A97BD6C8DCCC673CFEC02F1E821B9D9C741D638019D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 44KB
SHA256 5d225b25d66b30563a00f395476ed701130d3f749620a63531cea09fc537164e
MD5 d295c40af6fca08f8e0eb5425351f431
SHA1 1d246a1e54b3a1f2428883d8c911af73eddffca6
SHA512 9c9f23cb775244eb10f83f964b36224ad2cd5152cfa5ab82928f68ed1cb49be4156f887cc40a857b72efd0833014e4366bf136689a717dd58828a1b195ed486e
SSDEEP 768:7T3lyZzszaXGZG8vNh620Ph+EdGcNo3ITx62hw4oZkha6UK5+Ubp7tSSC5Zn/pf8:7TVyZwzQZ8vNd0Ph9/Nuo6GPUK5+UbJz
TLSH
T10123F1F73985EEF5934B05387F0EBB43068351F69A219C22670498B9C5CFCF629512E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 175KB
SHA256 a981989aee5d4479ffadf550d9ecff24a4ac829483e3e55c07da3491f84b12ba
MD5 7cf1be7696bf689b97230262eade8ad8
SHA1 8eb128f9e3cf364c2fd380eefaa6397f245a1c82
SHA512 7d7c7dc08001079d93ef447122dee49abd2b7a84d1619a055ff3e7ec0009261ab6add018560bfd82ed22b29c1915bfd059f02cd83fed2e15e9af05a5d0654e06
SSDEEP 3072:IkairG/VFWmVX/55KB+fV6ZNTJuvdeDsYaZQ9aFftKn/zfRoJC1NTuGo5m5Ss9fY:5aD/VEIXs+fVSNTJ8deoYabFftK/VosY
TLSH
T11C0423D52CC5EC31E28420F35C6BFE33F5F99B76A811C1C6B8AA83A2615C4670797789
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 38KB
SHA256 13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc
MD5 ff5eccde83f118cea0224ebbb9dc3179
SHA1 0ad305614c46bdb6b7bb3445c2430e12aecee879
SHA512 03dc88f429dd72d9433605c7c0f5659ad8d72f222da0bb6bf03b46f4a509b17ec2181af5db180c2f6d11c02f39a871c651be82e28fb5859037e1bbf6a7a20f6b
SSDEEP 768:w35mZVsqT7RAo+6tbgLdolT9YSswcTWa+O/dm8ae41u37qt+:1xTO3kb0dolT998WhO/Hae4jt+
TLSH
T11B030292A14018CA6EAE219576CCC7A7F4745D89DA081DD619CD01F0FCB326BBB51A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 136KB
SHA256 234feb9a8a2c759d00a4959506a3b9cb94c772186a2d117aed973347c7ef1891
MD5 db985aaa3c64f10506d96d876e350d47
SHA1 aad4a93575e59643fed7617e2feb893dd763d801
SHA512 300d0d35ebb9e27d66489ffb3e5502a4dcd3af032fb0f672d4f004e3846fb795772b6938c99dafed6fad0c25da8412d6f6a7b0221eb2540e84527703db5b7073
SSDEEP 3072:Q69dyqPSD49z56qcFxDiYZHYj3pU5qJvdzqC3dZIwv82phTFsZ:yUSD49d6TDiYZ8pU4Jvlnd42vmZ
TLSH
T123D312F1F12052909F25CC4EA67E9B4288738B1A2513687FF5B29E01357F9872ED13AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 133KB
SHA256 426ae06cd942849ab48b84c287c760f3701b603ebcc5c9aaa4a89923ef5f058e
MD5 f9bf0f65660d23c6f359d22720fc55ae
SHA1 9fa19ab7ea56165e2138c443816c278d5752dd08
SHA512 436019a96e47848533684a34e3c360f516c29b2aa2473d0a05d50c0fd3ad19eac39df2de12b6ec1c6760493efb5abf58e6a54d32080226fa1765983435634d88
SSDEEP 3072:kX89D4n2tV29WN9z2uXw/hqzr7IbI1O1KfB9Bk8WnRSqv2WDc+FC5:kn2tS/IzXIbIo1KZWUqv2W8
TLSH
T1D7D312BDFB327D7CC23244C064CF7242619CB39A9B53CD30DADDBBA8E549E25294A152
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 42KB
SHA256 b78fb569265b01789e7edd88cfe02ecb2c3fee5e1999678255f9b78a3b2cc4e8
MD5 281bba49537cf936d1a0df10fb719f63
SHA1 4085ad185c5902afd273e3e92296a4de3dc19edd
SHA512 af988371db77831f76edf95a50b9ddf1e957f0230404c8307914f11211e01cc95c61e0768d55aa4347f24e856d226f7e07ac21c09880e49dbd6346d1760b8bff
SSDEEP 768:fQelRMAMlg6keZjHGyL9BFjYBuukYbpX4Qb0NJ4rLU7KoYVZ:fQeTWlg6kON8cubbpIb+ggf
TLSH
T18913F16222FD3543C412E42B5BF6B23BD3C516CB231285A3A77B9BCB25B5400A8DF953
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 177KB
SHA256 c2b16fc3b2154b345c38c6e67f231d8a331f2409fb28f72164698ac755f70404
MD5 53f89b0f25398dbb0bcb12d4831c2ec1
SHA1 d6319c345b48d01f606a19efb364d4ae26a824f9
SHA512 3b9c8f67e928fbaea61e5aaf57eb8a7e445bcccf8aecf65265a2b4216b4a6e446ef4388f780f7f9b07c8a6c3f094da23c742e9b1afaeed65523c624723693912
SSDEEP 3072:MiMj6ZqngwXlXa+zBSC/rk3W9jov70l1qaGZaC7NoOCytCEeU5UHNcekFEA6pt6X:VMjoQ/Q+zA9PDsYaC7eOrtCtU5zt+t6X
TLSH
T1C50412284988C888D6DD4C3373E518B4DF853E0EE7653FAD47D834A61977A4226FA8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 466KB
SHA256 91d1cd61385d819e182a4b5fa915c0d263c239e2a62939f2b329623560b80907
MD5 7b7d15d991cc4d1b8b95dabfa893e58c
SHA1 7bc6a83ecd67581e5858a25383c3d30044e41f2b
SHA512 e7781676ae6400b42a61df3b47b98a4fcd3ddb35fb6c4534a8865d43c408500a7b8c36559e48dc5b74e725b09e3269a4d365d7819bbd73075815e66a76fa8bb2
SSDEEP 12288:NLj+GqtheeNSq5aLzd9M/5TAVSQuw241+DTL/8IyBQx:NLj7qtheeNSqMLx9w5T4SIZ+//8IyBQx
TLSH
T160A423E426A094CC11EF6528F19E49650D2ECFB3183556CE3E9F2B1EA60A5D17829CCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 29KB
SHA256 bf086b80808bf8c330bfebcd50cd0999b52b24650ddb3ea7b1d902101dc0c530
MD5 b6c80323e6971bc59309b434437a9a76
SHA1 95a2e836a20d3ffa4fb899b516cdce010b655c8e
SHA512 0fd7d4d90ba48bd6b5602396720f890191c76e78dafc36302656f1485ad9daaba53bee59414d2066d790ef247eff442989c7eb41efe7d499a7d958f213ee2660
SSDEEP 768:0fmZfA6SHNvmqZDqd8XOx+eVONCimWGs+000judmD:0fmZffglX7MWGs+dyuED
TLSH
T1CCD2E097C50528CFA258F7219D6C5873C6E4BF2F1E5A1C34D34EA294FA6C9F291888F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 96KB
SHA256 11de5a5aa3d08f69e1db14ac9c5347b7d09b8ec8fa89a4dd48a53ac13bfc3af2
MD5 601873d8a87f7b6dc6d2be569d361b63
SHA1 90ddce036c5ac461fc0e2ad6d2549625f35fcad8
SHA512 8d0aa2ed004fd07ff6c8cf0b2f96bf2addadcc481e811d3070d206a2862ebd154f857021dc0186eff184667914b6e23239b3886e18521bbe109e9c70df09ea1e
SSDEEP 3072:TY9ViJr6dK5Zi9YhM9Dic9o4EKgg3Wn41QA2kCISlb5:EeV6dmIx9lSg3c4FCIgl
TLSH
T18DA3020ABF4FE1AE46B742548AB607CE7A906241D0369997871107CEB1F78FE5C183D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 401KB
SHA256 38033735ff4ff2ba4762f13ed6c52ff85aeceacadb2612dbf998c5bf79ce6cbc
MD5 037c3af77fa83e73e12729e3ca855f99
SHA1 d4fe4062376213d010bd4baa93331ad18b1cbde6
SHA512 0bfc554b7b318e97a1b9d733e2c436056d4d1b3c01298e2c8cb5124aa7eeda3944bb1a4c71ef3f5578584f71bb6dc61478f56437369e11392799841089ec0a0e
SSDEEP 6144:034q4Tbu7QaXFNQgG3HdOMvUnLToAKm84XBwHwX8qFFVATEvOjHs0BkQ:034qSbu7QaXzZd44LTm4RTX8qynwmkQ
TLSH
T1A294238B514BF27DA3CA4C16F643DF60F041395E8A42E9B7DCB7C84259D0AA90F1CAE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 67KB
SHA256 65b0c59aed52d5314cef4590623727e5fb820f0329a2067290abffb461c9e1e8
MD5 7c03302a4aaff14d6751cdf6195bef23
SHA1 10acd1d65cc7aeb93e3803de8c1d321fcfa087e0
SHA512 d0e1ffa8a4f937a09bec4fd038a17a5a3cce23bf88bcafa391a2107d34049d86536b9dcae2bc534adbfe4b43ede1ba56a7f07bb6d3dd78fb2041bf3fc0d7bdc9
SSDEEP 1536:vtIE9GlM3LTRAismPvWepdCcoANRg+13oWUOR+I9:Ww3LTRdPvWe57UGoqME
TLSH
T17B6312525873974ACB26D9E826E4B0B0D812094F20C9E1F577CCD85DB55A5AEC1BA20F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 27KB
SHA256 4055c08923c81d63735c1691baa778c332bf680b8c4eb057d7b87e2c00c5578d
MD5 aa6a30350189be311d6f87b7d145d85b
SHA1 79d0105a90db8fe73876d31dc4f54bb9a194002a
SHA512 3563cdd2399d4ffe7f76a2b252800e2b767f7fc776fe1faf1bd385cc41ff9305c7a5367a2d28d6bcb46b9202461c23b86ad6f1f3cec2cf51ffbd181000651037
SSDEEP 768:Y+8X/NT0ZezFy6uLGsyvi7ssXAS39YGiE1TJnhC:Y/ZexL0o5X2k1Tds
TLSH
T1ACD2F104AD3D7AA06468E3D332713166FDA696A10B7702D2C615E625B3983F42BCBCE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 77KB
SHA256 684ec2e74e86ed6be2d8981ad5bebbc6ed827102120ed740b2e837e52ae0dd96
MD5 31b07eb4bb73b0acb308b28fa8702540
SHA1 0b4d9b318df47fff71673057fb70904ad8504086
SHA512 45f160875b06bf16414e6866cbef94f736712b335dbfce202d8506801dfab1234cdfb1e6df5908214d0afdb41f4ef511ce3da3234caa4272d21ee010b8589503
SSDEEP 1536:sNqbcbnWReM8d5wp8yR1VvrvFdHf/Pq4f1hFaeU+Y9M59cJV:XQbnWkIv11rvFliqfFalPeiV
TLSH
T1E3730204ABC75CCFAD91FCF3C12A8A713554D18F869E972A24B3795A8D356C0C24CBA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ca

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
Size 19KB
SHA256 b6ddc4f98771066e55d1066bab6f49633958b3974ff3045e38618e821705ff53
MD5 f57967bb202c5db7ae1e689f5df31184
SHA1 7a2493212d252ad8e81f161245c75eaf58b5bf61
SHA512 a2ff91d024c60f408b74ae9ea7926926970be086e6ad4bd58efa41c9f66c66242f996d2819fde2327a6a3e6a924831dba447aa8bfb397226eedb68e0dbe49026
SSDEEP 384:nwyCeV3IURi+Ac6Jiu4a9EGPAIHxvpupwDmhp7MEDhF10Pm42:jxPna97AmViwDm0uW2
TLSH
T11D92E0B3D30F2F71553399E8A27DE506B85B1C9D03A6BE0D65B37C03418DEAA128D1E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 1a1eaf8bbcbdba7844db3157480811b469f5a0eef976685b940e13a626bac4e0
MD5 ec085b5ef9d0e806600f1ac25e089cc0
SHA1 36b445f6938756e48e8100202f6e4c3f7fd63a92
SHA512 a53f2d0781d98239df84b57e43f3d0dc11caa60ef00005b56309918475b4dffa851218c320df65f8cdc9a84b187b4c7772917444a7816026076456d5fbb79442
SSDEEP 192:JRTVUqTVFHyul4SXA2+uI/1YqpDVRTeLM+8NtLu:JRiCR4ad+JMay
TLSH
T1558284331BAAA0D4EBC7A2733CDDDF917530CA9BE51B6E5384CC603994077A58B47229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 716b30e7a8190a91524e8e16ea858e9d8e6bc2b6356c1854da364039e1e7d121
MD5 e48935bd786684f01ee828f67296b98f
SHA1 b5a18381c1162722392c15c129c85b0520457cfc
SHA512 f60685db44e2d3eb52aee00d399690dede3097f5be66915d3dde47ee6859e661987c8cec1739c35278324f8c6b489b792f05e197e4d4d849277030c94affe062
SSDEEP 192:NRTVUqTVFHyNl4SXA2+uI/1YqpFVRTeLM+8NtL3E:NRiCR7ad+HMaTE
TLSH
T1F58284331BAAA1D4EBC7A2733CDDDF917530CA9BE51B6E5380CC603994077A58B43229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 18KB
SHA256 a4d9cefa9685a97fc78ace11ae276f9faeebef2212ed87c53fbbd653a35bf49b
MD5 96e8db54d36faa8d27165e150213c432
SHA1 4001fc4e74d9d702cd9b1df521a0b675e1882a25
SHA512 b7897e4c899c54b850a719f4cf16a390b8d2582cb20c25e834d016c520ba4430d01e5c7639b049c36cccf2dc1b53366c8cf3d2eaefba198e5cc162aad0ba1750
SSDEEP 192:7RmVPyqTVFtyMCeuYPPA20Wu2/WYq14VRTCCjey+KNTO8W:7RmyCLjCEXd0WZ0PdCxW
TLSH
T1FF82A7335BAAA0D4EBC7A273BCDDDF817530CA9BE41B6E6380CC507894077A59B43225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 de420d49bb2e9c268d893aae8bdc88cde44b6144f22e118a4a9e1119c35e17a1
MD5 a4bc3db553d500d971b699f3640bef57
SHA1 4a1b7b3f636ece1537c1324e471837b4b762f9ce
SHA512 a4ebcd5d9a04347aab91cdf1760728cfe55a7322e73ac8f27de2f1a15acf7dc4d99940343746a04b5c661a5e201605466fabf5b4b1a1f8ad1b171d6a2f1b3661
SSDEEP 192:/RTVUqTVFHyNl4Sdz2+uw/1YqplV0TeLMB8Nt0H:/RiCR7Qa+/qae
TLSH
T1118285331BAAA0D4EBC7A2733CDDDF917530CA9BE51B6E5384CC603994077A58B47229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 5076b6dac4461baaa5b69f2386aa4d1c12ed43ddc957f342e236da87e41fdb0a
MD5 fc811c4b29bfc5d28512715d3421dc56
SHA1 ad1a4a577f7f8df0ffdcf7feb624d7d223a8d57c
SHA512 d4ac228effffde95f3cb3582ea558acd85f98174da39ac485ba8e89935d35959e9580c4f502c705b715db4bcbff43bfebd7627a3a8ef2cc6b781107e96234679
SSDEEP 192:ZRTVUqTV+HyNl4Sdz2+uw/1YqplV0TeLMB8Nt0Zt:ZRiCk7Qa+/qa4t
TLSH
T1C07284331BAAA0D4EBC7A2733CDDDF917530CA9BE51B6E5384CC603995077A58B43229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 19KB
SHA256 defb5762a4a39825650395c64228f13868979bbff673c0261ec590b5bddb7293
MD5 fd2be47ba76aeee8d9ffd237d890fe49
SHA1 9ec8d79b5076a7102f8bc55ded6089513d2a1c52
SHA512 8b32daec5b047558e0d6f4ec11ab3750613771134e1a6b7b0db74b87c4733cb8c27d10a721cf095e3ac469e1e65f78e888226628d2cc5e4fae76aef1ebd6d9eb
SSDEEP 192:/PcVYy/RYhEyT9xeO5HePaPWJSZgMjqD92IO8LCZd0nrNTEHz:/PHyiuypxrEiPWxbHKClMz
TLSH
T1A892FB324BAA9980DBD793B37CDDCE913235C6DBE4171F1380CD507894133AA9B5B229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59d9cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59d9cc.TMP
Size 3KB
SHA256 2d747f0e3e9371ebad2875afec475aa6fa4f937404a6a607dd8957bb9fa4fdd6
MD5 6e7fc134201c1900a7a47e0f8e5b37af
SHA1 4a64d2bd219a9c6483c3443f032ea7780a4c01e5
SHA512 ff7a9aaac808f0255494507b3471ad9a5eb29a3e86ed7d621605ebb5db3c0cd0875355a3eca890b35fe14df0bc12c1956584ca0a27c7c11748738fc14e3bdef7
TLSH
T11471E9785E4708A5D713A0B379D252C032318AF7F426EAB1C16D58B0660776BDF1B47D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 120B
SHA256 a5adefeadca964d7b2ef81458536ec17261aae30cca15c12c31118c767262b22
MD5 a437434d8d993aa13922aa9eb61f3ce4
SHA1 3ffa1836eb85b369628bb3c2bb0cc87a2add4ff1
SHA512 3f4152ec179b615f5f54b8b908bdcb6afde61a92bc52d2449c3e54d9ba8f02c7199eae188bba26537ee937c259506896486ac2a1a9a447965efdc2f0d07eb100
TLSH
T163B01276C4811F87CE408BFC7FCEC160B3B01E5406520B0381C10570CC817D7084E541
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 50a465d8e1a9d2cd2954e7f5fab12c57922ca470e325e8078e972479670387cd
MD5 94fd60261a4e37b23dbc7e2d38161c51
SHA1 86827bbf2bf2e7fc47ab0ba8504134beb4b9e5cd
SHA512 c2c536461f68090c02598a978df99e61ecae0bf87cdd5c5d6151d0f1a76cefe398f617945a657f3ebf04625fd4567cb2eb7e30425db363003dab57513f5bb574
TLSH
T124B0123344000802E24447F471C6C505B3310F501393170300C00635488139F08003C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00423fb6-4d3a-48e1-b5ee-6ce9cfcad6d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\00423fb6-4d3a-48e1-b5ee-6ce9cfcad6d5.tmp
Size 6KB
SHA256 57a391984bd7df75f2f49b982eb88e68f6caa3751e06159b5bb692860af60476
MD5 4ce14b73efa0e887bce954d4dac9f60b
SHA1 11f0fd0ee443f6adabc8d0cd87f2b1aee5ea26f8
SHA512 ce6674fac0afe23197c41af40d507f42fdb7a27473bff8eb96c579061de03778cbe4cc8843d11c54513c1884cd8b1985e84d7a35225106df713d3fefb394f504
SSDEEP 192:a7UhzUnUgUAUKUiaUUUgqUXUDdURSUVUIVUOUBU1UG4UyUKU8UEUjLUWHU6KU/BB:a7+zGhHDRaFSicdoSmbVXO4Gfr1JILbx
TLSH
T145E179E7827FB85F502C597F0E54BC0A69BEB831425294F8DAA6C16CF0838F75F16026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 21b8f059b44c780d98a727ac3798e2c84760a271d1645be7e3d347b46f06a3cf
MD5 08f7603e50f75ec0bb695396b82cdbea
SHA1 19eed92598ac7ee4e7637ae7541648fa78a661e2
SHA512 42db6d4cde2bcd1363a024d0521aa9ae8edafe8acc3917d8c3a7e0b2f4390a661801f2ae2638171cf168aeaa5d6416a040f6f3303bcbd446bd17cd24f103daa9
SSDEEP 192:D3xp4dMo9+FIiD2Lsg1kj6VuwM5fD4wyhrNzrurjiT3KnG7g52mOgvcZ/Itn6UGV:D3xp4dMo9+FIiD2LV1kGVXwLNar5rura
TLSH
T12C029DF7C7E5822DD92152F4AA147E1FCE2D0855432C3C2A89E5AF4B93F24B1F181A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 4f61d6097faa588f1b0a8feb2a07bbee05eefc293e2927a5125bbcde1cdb3788
MD5 da7e7f99cfe5b8ce8e070dc2432a5b21
SHA1 8d6d346b858ebd93a25e2fc6b9b7a099dfcfb1ee
SHA512 777cf82a073ec2b0cecdcbdac6cfece1e2848bb96c2061df4165499f7bbf3ec33bd0156a2b7b794b7b8d7e8ffda060f5b746a016cd5f34f9cfb0b4ecbf533609
SSDEEP 96:D8Ousu+uVuIuHouQuxsgzBwBj60uGuwuZ5uODu7wuCZu6Qhu+Nzuelvud:D3xp4dMo9Wsg1kj60uGuwM5fD4wnGhro
TLSH
T16591AAB3C7D9832DD92112F45A183E1ECE2C1D6447183C3DC8E5AF4AA7E21B1F185A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 5f85c6141b66681e980765e6e8cd993c9d68058fe41e04a1eeaa487b7bf11d1f
MD5 2b0acc11e6a6d6b6b8f8b21dbafb22b1
SHA1 7fe183161b2fcc714a9d55059c21aaf262240eef
SHA512 aac25061f95f17811bc9abed81564c5063712c83668ccb5c88e80d3899f77aa364ca6c09690a11ef31835723cbfb592da9dbe28974a31f5d8d376df8c7e7813d
SSDEEP 384:DWl64dMo9+FIiD2XACAeA4A8AmAwA8eAHeA/AEA4A6AZAjANAzAcAUsAqAnAHAL6:nNlJjPBrqpIHjtyUukv8dAgsWCPxgqCW
TLSH
T1AEA2DDF783E5862DC81256F1AA187E1BCF1C0958832C3D2B89D5AF8B93E3471E155A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 822152c5604eb4adc7316d588d6107270d74f6f2c50947fb8a4e0e1b23f55b46
MD5 835bcfac82336f4685adad32b001e85b
SHA1 6656b6269ce5af32dd87294dda49df7a17041e11
SHA512 de0c9a1473745586b8d7f9569825f1a0e64fcc3a4ebf0030b47845159ae18fe3a023aeb74399345345e68247b8db3463f86cfa783d1296701a8ae52e56e7b154
SSDEEP 384:DW6wCNzyvkgS+ACAeA4A8AmAwA8eAHeA/AEA4A6AZAjANAzAcAUsAqAnAHALAvZo:NlJjPBrqpIHjtyUukv8dAgs/CbGgqCiw
TLSH
T146A2BBF783F5862DC81295F1AA187E1BCF1C0558872C3D2A89D1AF8B93E3472E155B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 396554b82a84a9b4cae64b35b64ad706e924280def174400fe21471cf70b5460
MD5 df663da19cdfb574a87feff940b09c4b
SHA1 d53dae0589e73e4f875e3431745bbdea748070ce
SHA512 1f76d664acac60618b519cf4826d7051a4e46fcd034f888ffbfa2dd8816e1087087e7e95dd19819ba68cce07afef736c45589fe4dc02a2ecf6a7616b22fe47a0
SSDEEP 384:DWwCNkgS+ACAeA4A8AmAwA8eAHeA/AEA4A6AZAjANAzAcAUsAqAnAHALAvZdg6kn:TlJjPBrqpIHjtyUukv8dAgsgGgqCipLs
TLSH
T1F2A2BCF783E5862DC81296F1AA187E1BCF1C0558872C3D2B89D1AF8B93E3471E155B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 28a5391196126c846c5399173b7b002cfed6281d8d7cac8b3440308ddb222478
MD5 805c47da01f16bb35fd4e2fb35fedf10
SHA1 530fbd894d4fb7eb560a56c36a7edfd61bf92504
SHA512 25b484729d02d5f611c8827503ce1677a239c2ef6da4a95dc2449e560703ad6c0079aaa0f278ee92e7917fa22471e758d013402b242fa37b8a934acd9974a576
TLSH
T12BD022A3124230F4A69C3FB380AAFCCED33600340E03DED428E098AC25334AE0A1F186
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 7763816a580b422b9992a51c2d07f9903bc5e7853864945bff6e263476d3eec5
MD5 d3061cf2a0e6c59322c5eb08720a5009
SHA1 91c8a229de2a9412f286223f00b4ad14db4d29a8
SHA512 3f82624f8e3adc2df82fefe18727b76b062080d08ee324489d3dbedbf77dfdf758cd0da0b1a66dd3f74c5d838bb615970d637169d608f5a353e83799e2014e58
TLSH
T150D023531141B0B5659C3FB24097FC4FE33600240D03DDD515E0D55D25324DD595F145
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5964da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5964da.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe6b4c98.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RFe6b4c98.TMP
Size 6KB
SHA256 9249df7a8d47927b364e33babcb40b5816b96a8f4b3d2abf50433abaee65f51e
MD5 83815da07acb340469664d97dd374d78
SHA1 2d2177b0dea983e6436d14fcddd26abfdc9f6001
SHA512 3d76040360698658bf6f79e68a069e4f0cc6348a61ba5ae65c8f502bc6933d185054343badd4174ae9e64a4d578a00f4c966dd6ab199a1919cc8446fd7ad54d3
SSDEEP 192:o7U/zUnUgUAUKUiaUUUFqU+UDdURSUVUIVUOUBU1UG4UyUKU8UEUjLUWHU6KU/BB:o7uzGhHDRaFpfcdoSmbVXO4Gfr1JILbx
TLSH
T1E0E17AE7867FB85F502C597F0E54BC0A69BEB831425294F8DAA6C12CF0834F75F16026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 90e5ccf4df84ecec98e2f761577d26f26ec27e82801d82da99f768e68e78af00
MD5 faae25ef8e50dd76c02282395c5101f6
SHA1 1521a04ccda2a5c0d4743b7463f66ff84b57db15
SHA512 9ba2c347d9d5f793e2fdcda69fd7e2dab2cdea76c05e4e15e758dcca3f0e2cda7ef5709e1fa30f15d7455dae3d24e47f5e994bec5e81b6c9c1912bbe57139479
SSDEEP 192:sxZSRXyM/jK1Ml8Mks/fFspHXIdpE4HW6+WNzzH/YIDKbaSIgrJ:sxZS9Ms/fFspH4VHb//e9
TLSH
T17252D712AA345A77CCDBD209FA55BB53D6F51472A2940E44A9FCCA0C05E7BED230782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 68c8f30c34d56dddb5c0251c333c1df3a3270e3e11412f6f6dddd0902610f3e1
MD5 74adcf4fa51660aa63f7674674d370af
SHA1 504c09a3d0d498393ca99e04f8ddaf8e29378461
SHA512 ec036907db9d1401f854ff20b5a0a2c13af3a75ba90013bcc6a14b47f8d5ee97754c36b18c7676837423984d9d6c1ec66ca7e1eb7b02f73ee226c335af1ae952
SSDEEP 192:sxZgRXyMojK1Ml8M0cB1s/fFsFvR+sgjddp4cD5HHW6+WNoxahwvVbjZHZF/YIHS:sxZgQsm1s/fFsFvRsFnHbNOZf/JC
TLSH
T1F472F85266341A77CCDBD619F945BB53E2F8146297901E88A9FCCE0C05E7BDD2207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 82a3d78aa5b7b7cb1e3c7d1738f67abc674a18b1125f54059fad757d9f8a5bc6
MD5 fcf7412d0bdb0856c88e695cb0aec132
SHA1 84606166af1c2702c7d15f57a3e988278997f599
SHA512 34e1e57533ff9c6aa2dce7d0d99d49035853354da3b33973d677db866a910269547d84e99c622f491a75ec5b86a2e6f77fbb14035e91adc7b619b9656d6a0ff1
SSDEEP 192:sxZSRXyMojK1Ml8Mks/fFsFHXIdpE4HW6+WNzmbXYIWKbaSIg5aJ:sxZSQMs/fFsFH4VHbMXxY
TLSH
T10B52E812AA345A77CCDBD209FA85BB53D6F50472A2901E44A9FCDA0C05E7BDD231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 60860525a8c8b9cc7ed51bb3373210cd934645b62a7f3bea9ff6991e6fa4f3ca
MD5 70a1a81c37c0d44a07e900028d3b965c
SHA1 fc75d71b868cd5622fd948b574492dbd1a8c01b5
SHA512 b123e76521cef6a2fcd94dd90333a373d803734cf0f05fa2971cddb65630a4a40d414d3a2f1381aa946fe1f49405c480ace0bdfc0855d2e8ff3543dc72b0dc8e
SSDEEP 384:sxZgQqom1s/fFsFv45lbRHb+kZf/Zrbck:sYXom1s/fkv4jHbV5d
TLSH
T12C92E71266248977CCD7D619F971BF53E6F904628A510E8C6AFCC90C04EB6FD221782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f8ca40b1c8a135c1d8389cac2987af5956b8e938bde5daf733019afed25de54b
MD5 45afea3a13a3fdf621e8d5ae84858cc8
SHA1 20964152782f6d16f8226104a66f8f79ace906b5
SHA512 40899045e64be08dc19d6046c938e4d0e039bb200f4e72ddea756fa834035d6e62a5f9a387c20bcbe1d1e170ebd44b37cc8f82b72ac63866c6c98246cb133d88
SSDEEP 768:BJsqxXlWvJD0T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9CroArvt:BJsqxXlWvJD0Tu1ja54LAs9ZALt
TLSH
T1F0E20B3B694CC77D4F840E5DEC26AED76ED801CB66988D5447FA880C03CB6EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 1KB
SHA256 eaf3a2c42d68da470995a1345b3c507001991d87323525d5ace26066dc6de460
MD5 faa2ab36b567c395c981733ee72e87d8
SHA1 09421bca61c44af22d2388365d3eadd0914afcec
SHA512 6503e398c2cfbefb3a6f2332b06064b48cd01d236cdfaf6827f32050f2646903bd631e23e8840e25e5ac96ff31c041bc131cb845a3b836a38c53de15febe494e
TLSH
T16B3154CD4E50959BECA488F21472B1B532B0C8CC1B11A7138C3C22777C2736A1A6B2DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 3KB
SHA256 4a8b9f735961f144656b9ea7748290aa7e4829667377f024a7a028ff1e55b023
MD5 67e10442f4a7ed39469019dcb2bd9311
SHA1 825a026a19d8ea9c752f3c884926b2c8e04f4594
SHA512 05eaff5b1612e72d71aec754f091229515d95d15cf63411ca428d0703d47bbe97667e1091ad9e70881c38bf67006b419aa2441efb028fc0c26fa399a96400471
TLSH
T11651B88D2C0B2F0BCC6C627364B50085333A79DE2A884B0724BC65397CE762D2965B9C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591e4c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe591e4c.TMP
Size 1KB
SHA256 dfdbede38adea973faeda18dfabf17e6800dab56553c6a26da6a4b663e0afaa9
MD5 d06279e6afc6353a0fc99ffb724e97a6
SHA1 b2b7566e7dae3a01858b66971fafc9dfa4ca445f
SHA512 796b8e92148c945f79b01adac5890927268f05d372398db35b941246ec17610101b01135c661c2800df16f56a0f72db9b17a23a34d11014b4a4b091c68897c92
TLSH
T19631638A4A459A0BECD444B20993A4B83379D8405322B387947C6239B8767BD1E5F0C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 cdafa7b015fbe61cf59e73397ce5be2faeb35ce97f133ce9f4689a640d9e3a9c
MD5 9904467302b5383023427b07035e0adf
SHA1 09ad6930ed647e8ec8101b60be0ff808f4259d5d
SHA512 23fc9f83f2c39c74280558c9545bae08b9cbef368efa432a0f157b39ef64ba4cdbe42b36267f32dbe29c263c6bc96c9bf766dca4697de23e30ca8cc18c18030c
TLSH
T16BE068BA2AF70840A8ABC3DE187344960410F428C891EC4F1029928350722602821C26
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9fb5184ab0d0f44e33e104b54a6d342971b613a8d45ab987029d324eea9f5747
MD5 168f38b61b957cbf40312cbe9c41e22a
SHA1 e0a9fb10d9171800c13f70b64019b1ecb1c9ce0e
SHA512 4606b07fc0611bd9b54ae764644ff32453fe5f4fde75e8a2ca885796e2ca3c3a34f42a719ecfaf4f1eaa7d0f23989154607c64c44396aeffd6e5a3506a287c73
TLSH
T17CE06FBB2AE70800A8ABC3EA187344AA8410F828C991EC4F1029A28310622A02822C26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\84e4b44c-4fd8-4bb7-8e5c-bb6b62d42b14\index-dir\the-real-index
Size 48B
SHA256 993c2275f991f4a3cc7324196d30302c57419784b269812fe22be44677505f41
MD5 3691bd0959d54b1af5cf7d4c7c36a0a8
SHA1 ac5e622e91df9d0128e019ee4c692c37142ea3c7
SHA512 1aa6c7f7324d864536a616c28864ba3b9817f6df2d3c5e0dcbcfe7e76f3251f70eda20cb68527e851bb9cfde4993278ad7c642d0a4d4ddede3b23c95dc352317
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\84e4b44c-4fd8-4bb7-8e5c-bb6b62d42b14\index-dir\the-real-index
Size 72B
SHA256 0e5130d52ddca13d10c7e6482c4dbc737f076bbdd7cc1caa0943bf9095be9914
MD5 0d757d205e9e799544a6eb18b1dab2c2
SHA1 82db79c8ada502308131db377ae12176439d0cf4
SHA512 ba5621bd5559887d2f1407ae7ace89cd99a8c1ffa43bb12e87c18c08f8f9ce97a8d079186ac55a3676286faa4d8e2396d04314cd477b4d2f4dcb6112030c21fe
TLSH
T1D1A00233EE54D612E54267F03CA145483B60CDEA09693A1B61DD0E48C95B3D04E854C2
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c5ab2538-c457-4f37-82c0-cac72a3fa539\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c5ab2538-c457-4f37-82c0-cac72a3fa539\index-dir\the-real-index
Size 72B
SHA256 adb44c61472668da1bf9645c684aca8f960b332e87f1e6ac30e92ec01b2e69ef
MD5 efd73c14e94ad910aeff96294673fcd7
SHA1 bdf6240a204563c0da6588a6c5046820455248c9
SHA512 628d0441cc850573a721de4587b8c0de17c48546d1a4673d51b541f38e3c130c69768c7b46d09f95412deb38857f73c9bee059eeb43b13cb322f96241bb9904b
TLSH
T1DDA002D681400146C13A1F7728F3866136145E21450142D372A0005DAFA42944602500
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c5ab2538-c457-4f37-82c0-cac72a3fa539\index-dir\the-real-index
Size 48B
SHA256 25b849a1fdcc761b3bc3bd80caee1e6f0c84229427e42224e0b85faadc07f59c
MD5 bbaccb4d4c87afd4585814368b78bcbf
SHA1 35d65da71a8c0baa25c506598a423bb796658385
SHA512 5a2750001884698f7d5fc19afa804682bd77d710214554e562cdd0fa52f2a2ef3e583430abdc9d33dea9c7d7634e647fd782b7884d80e884f054c71f3981942e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c5ab2538-c457-4f37-82c0-cac72a3fa539\index-dir\the-real-index
Size 72B
SHA256 05fcc13374be7abe3fb71bb52a0ed11d7b13c0241b076e480f5e2c3e533faaaf
MD5 01502986127fbf4ffb0930c16391b58a
SHA1 2382f768c2c410ab78012678bd0e3090a69c97bb
SHA512 8408a4392a31d2d1f7bae9a9438bc9bc2512d58e77437eb81ddd0eb204782e89d2e50b79db7997782c288d5aca68f8d8522857899ecf7cfa9dfa3d1faf29f12b
TLSH
T183A002648580910AC1641E7134B39150375848214211025BA1B10049FCA42884583100
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 26c9f493001b55736a5072d53129e9a4828c13543e081fa3eaa35311a79759e9
MD5 d692d100f69dee51b99dbfe58d1c03fe
SHA1 0254f95e0a4e1bc102dfc57b02094d1a7e5a0251
SHA512 a753e6e15983f461d5b50e269ca1e8b09021dba5933a8fa1fd0865d9aae865aef58199e2e505948f91e6a005d8c38071b8ca5ea4ac00a3a53e9362e53ec8f761
TLSH
T1F7D0972BE42A0850DBFA0A81427B23670B322CC81440904CA543202C6474B83D201F82
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 8881bbbdfa20133a6f6f6b72afffb5ff26ce2d56b6c2f0e1057f02d02b309da1
MD5 b222a794049eef7c591f64b23df4f585
SHA1 ff1a7f19373cb835de654d27c3ee912fe6480700
SHA512 5fd847265693a857c7ba0239cc65a427c10e428e32f338bddeabb83cb4a855c9e6e26b6539ea8229652a4f70f09385bc7c4dec5248c9d897e1566037f8d5535d
TLSH
T11DD0972BA0290950DAFE4F91027B22370B322CC41094904C6542002C9444B83A102FC2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 daadcfff2cb1642b8f9ccca364c01bec616a02c5fc0b37a4ff68f2ccb7b249e7
MD5 77efc9791d98128a84124e2f808cc70e
SHA1 ca1cdb3d3a768ff5734ca51f59d9f217ee794ab2
SHA512 eb6dc2de7654b7a81e2d6fed541fd3a75851e622b1d43517686e9435e117f9e815f987b6e8d19cb6a299cacca0ee7631947b9ccb8b02f44db07557c9b34ae846
TLSH
T1B8D0972BA8290960DAFA0F904237262A4B322CC81089A04CA952401D5048B83E102FD7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5828a1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5828a1.TMP
Size 138B
SHA256 2700ca3d992c311e2dc02e68d279da1af947125bb429fcb5d27dd9d336c87091
MD5 5c842e29dc5a28401c6705f55bd15237
SHA1 8adec5b397fc775acf7379d6192aa1982540fef9
SHA512 5298624fa0d18b947f29be8bae8c4f2e453f8d015d8dc2753b5d3fb554a98e3f74bd8e818d1cbe123f5f5d4c3760e357095697245b8b26a14812f5f47bcbaea8
TLSH
T199C09BA7E4550D128FB907528336675D47352CCC59C5945DB153356C3074E57B206ED1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 d76bf7287bba730158c13546d5923a176cacb64f8e5b0c0399786845206acf39
MD5 5360a3ed6b39fc411c2d5a984667b454
SHA1 588863e469d1fb3d653b18af7e457ed45f210007
SHA512 7124ab3bf35822488f8c006c20276b425d97b26744ea3788a98ce6c623f322588bea26c5ca701fd76b080d7a1a2ac7e10833a0343137c2ac3e053b3395c3ed23
TLSH
T1B1A00296C96B3947E4141775B48151D96254CD540615231742A40558BE561908572104
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d0f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59d0f2.TMP
Size 48B
SHA256 4f806e6f1aecaec779d9af58b272a3f3f43aa7850c9bd50d7241b52bb45928f3
MD5 a81420f450abe18dcdd328801623edce
SHA1 8f1a99bbcd200e0d870cd30170baa5796f306eab
SHA512 74fb80299e2f3479dbaf12f9827efd0244722661b4a9f0a2bc5eae58dc18ad4a421fb5701f59cb05f68d3b882884cc1bf13810fefdbe4eec8a858ef56e614541
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 113f4deb07279bc575359ff8ceef11da817e0e09e857a33c8cdc666107a70e20
MD5 ccbeefaf6c22f73d1a485bb63f306f54
SHA1 0626362dec17614291e256dc783417c6544e0a8e
SHA512 005c78b827e6dbb9af6132a7a4a99d1acc26b170bdec61400c4c3f0ff6599c66b80dbd566bd96c3b11c06ff39c7ebbb4d35d02e27877b665698d742c93473453
SSDEEP 96:KYbaKYIKSogKteiCQQKp2SAgKdG6Wh2KKgC:Exb7j+rtr
TLSH
T158E14A56B13B220338BD2948A36696769E4131A33418746F7F7841B64E77E224EFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590ad4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590ad4.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ff227d5cc73eed3810612e9cfdafc29e10a9de4bdfe67bcf03c23865534e44ad
MD5 85e2d1641e11f0393d8a3f0cf8c535ef
SHA1 c36cb1adfcc9ae54aca3cfd55c156458f872e359
SHA512 5f9da03f653f94a98fcb83143baa900b5cf3590e040e82fe119c45d5aa95042ed752c6db2b26597074f4804be42a643b7860c6956650dd80e1d8e9ab2e496c9b
SSDEEP 384:xurQXjZxh6VVsNlvlAbsBEuVRN+Oi+p9zBlw1a1PmPc:xur0h6/spzH+Ois9zBlw1a1Cc
TLSH
T1F7929E3678785C774FE2A945F08B32574FF4406B9A846E54E9DA0F0C06DF69C230BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 91c8ed1382aa869fd0983fb0e8fd66eb97288b6487da9467f1efd1c689beda9d
MD5 25692af0a348bb1dcff6ee7f434d3be8
SHA1 7510c7400b09d1e1cfcece3efc71cea559d07810
SHA512 4cf13463ee756ea73f8695c80ffda30a33b38109bb62eaffe29dd5f3dc943ec9d642d790fc5fe0d5ec90b9b3f44a74542b6098c536e3e58b93d7d6b45e306dc0
SSDEEP 192:tONd6JkRtQmiUyPrW+RN+OmJ+Nh3LRCU6:tONd6UrcW+RN+Oi+3QU6
TLSH
T1A302D835AD385C7B8EF26E05B58B27275FA8203BFA856F94DAD81F0C01D765C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f2f26e45b1d20ab664af83c393dbb26e211fab2db4f6de9e63b56b033c476b88
MD5 6488e544a3ea065623a9c0307ed204f3
SHA1 cb7ab1fe0303e83b7aa95b10a49f6fdd189615ed
SHA512 e92a5393be47b877cbda102e9fdf0e891a6aa6e7a50ce963facda56ef792a56bae97db5121236648a878fca786b59cfa8c456680238ba481182a5d3f03561016
SSDEEP 384:jiF1urQXjZxh6VXzsN/8TUNTUlIlvT1AbVgEP2VRN+Oi+p9uBlw1a1PmPc:OF1ur0h6hSwgbB2UH+Ois9uBlw1a1Cc
TLSH
T139C218F218E78836DAAE5B47B37E2D174EBCC067B5406950B7C50A0CCD9A1BFD30A911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9e1b22353554ecd105bc8b6b057afb79dde41659aae75b3cb9ae11058fa336e4
MD5 5b920f94a4c9af39e6cb14b9abee3009
SHA1 04dfe029fdd69f726e0ba7310773091ac71de8db
SHA512 0298fe76d57d9682219c61475de640dbfd4e69e05bb35562a88adaf6f70829b2daa23c763244236af05e5cb3bae3d19df7652516026901ccdf5557d5a28a07ff
SSDEEP 384:QurQXjZxh6VVsNlvlAbsBEuVRN+Oi+p9zBlw1a1PmPc:Qur0h6/spzH+Ois9zBlw1a1Cc
TLSH
T175929E3678785C774FE2A845F08B325B4FF4406B9A846E54E9DA0F0C06DF69C230BE16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3b0598f8188a0b393e1bec040074212a8986444e6470340475ca9e4d7a69112
MD5 012bcf370a8defb20903ca50dc8dcd0d
SHA1 a747866c9f7046e96e906d4a0ed25cac0edbf4dd
SHA512 08ee9b1e12716cc2a77a473b612dc403710ab3b6117354ac89c1b872a037fc029d121e946e131f38d78c8080b660d0a4af9778015bf54b0bdeafbcc84193e198
SSDEEP 192:aONw6JkRfQmiUyRrP+RN+OmJ+KG9CVceqO4U6:aONw6UhcP+RN+Oi+p9lBU6
TLSH
T112120A3668385C6B5EE3A945F58B31178EA45137EB867F80D5DC1F0C02DFA9C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 51bd9905d98627adf3dbd720ce260843e8b0f445acecb599094da5d6737bedde
MD5 b46d2e318423bce9bce90617cb7205ea
SHA1 e140035542f039df021f1648afc4aacbfac9caf1
SHA512 dd2970f5f9cb6a885e9a93e6bfa5bb3f42dace7df928b0adee8621c0415cc3d703067d5cfb5e733c928c156107d60d89f4f0f51b369bd739ed9871d9629643a0
TLSH
T157E00112A31404EAC179573400DB2F64BBE6C06057A703264A7516B82D677143E64B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c9f8e934cdfea97900b06d343ba50a485765742fa183d6e63a27a4891e681da6
MD5 e7905a45f76066409fd0c6f18649bf02
SHA1 ac4fc383463ca6fe4b18fc89748d33b9c9779055
SHA512 49af9c15783558748b3a3072b5fee02472aab76195f030b63f95ebbf059bdf3ad4131064f849eca5688b10122c4cf2d644da166dc4c7486c6c804a8015a39116
TLSH
T192E00112931404EAC5B9573801DB6F65ABE2C0A053A703275A7516B82D677183E58BC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f79a027bbc70dd4e1d10ac9cdaccb2de997aa078d184a5f91cdae4659eb0bedb
MD5 100c6901fcf0c1c8baa29e92ab7b3f63
SHA1 1c6f7e07f38fc47abd1575e45431bc680a3a1b2e
SHA512 12791f5984f5ccf1b1dbb838309145d4fb45b9018d9c1dcfecf88db3f7ff60cefeeb6ee6f278443933278a89a7138c7379a5b8d3faa1e8c8f9625bc6756a996d
TLSH
T192E00902A31908EBC238173400DB2F64BBF3C06013AB032B8B656AB92E377046E64BC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 74d8b7afede448153f09a953f14670837e279cc5131fc432f24a24f82a9eed3a
MD5 5b53bd36b19d6a6af63a976cee9e00c0
SHA1 14a94ff63788c47113f17b0a173a94f4e4e18889
SHA512 5e3735d2b73c90c798e305c721e3b3e7594886be5f4d69fe066dc716f5a2f3a8ec647ee2adbaa60b0f65ab23f0881d4a8328d0b82ac83bd1f0df67e67af58f43
TLSH
T14EE00102930010EBC1BC033800CB2F28ABE2C0A053A6032B5E3426B82D733183E68BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 279ab03e900a971bea49b4251b55c306ccaaec1897c94b0c468f624712c3d8a7
MD5 16e358d21eaaafe0afd09e41bc37f35d
SHA1 07b6240c1c7ac85e3b49d2cb791624f738d5c662
SHA512 ec17fbe23abad37c418a506f201fd01a8800da28cfd9ced2f82a5051a80423d103919c53e2e721c093597a4692cb7cc641400ae9506e930b4dde3a06ed60bfbe
TLSH
T159E00903A31908EBC238133400D72F647BF3C06013A7031A8B6556B92E377047E64B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 99bee3c37fe9e31643d37a1ccd9f83eaeecb8e819534a7a9d22290dd418f017e
MD5 bf66582ae63d092cadfd818d6cfbe4ca
SHA1 69d36a80673f44d2435fbf7b0cf8df777de1e223
SHA512 deb46f0b53a677d98ec722ef4401f502ca510c284957d20163dd69f9377a23d7b994f11d046903362281273d10bdf859132799721be45356d4e38f87249af4ba
TLSH
T1FEE00203531404BBC238133800D31B2427E3C07002B603058E2415B41D277052D34F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7fe2c76e90f4bd4ed74ff6554fb09a64e4a43a5c1b1c2fab42879e9011a6d8d0
MD5 79827ff29b78867d7738e4c397b3f71b
SHA1 249e8e425f7012c025e43afb32eca7d3f13e37c9
SHA512 8a04f6c09f90b7b81f9885c2e05e3fc5b07c8af3a9c6b08f592a76668bc10df31b4d8c507d5d3c6cf1a6a9645082dc6c12ba219b49f6c0be7eb50bbbb3e6ae7d
TLSH
T156E00102930020FAC2BC033800DB2F246BE3C4B052E6032B5E3526B82D72B183EA8FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ceedea31a864be67a2f84b40d5a3339e66833827c14421286c5b71c7f3b43c06
MD5 7fc5e7f20162139c5e2b97eba8fa0dae
SHA1 bd4aa5f575f8ce9d7c68d696f56ef08f4a50f25c
SHA512 83e954c484da4b53c64c53d8ca72f12e0bd2da250911215af2aa693d8d47a3a005bef878a9ea1a7b066f6fe9aebfc23cbd7f83a04dd90b2a00642f3b7d756033
TLSH
T19FE00812A31404FBC13C173400D72F64BBF7C06017A703164A6516B82D277142D64B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e7742e21472f5f45d976dd077ff8c961fcd2a702f10105d3f68f5d6bd4315551
MD5 980aea9caa1297ebfa5b01ed1eeda9ec
SHA1 180f18e4bdc52be57d852fcd53a83ef0fc1d0dc4
SHA512 76f2fde71cc4cac40587b055ca13a0275573e4cd7fc85d09d3aa71ec4021d63da2765ace004a9a68981f04d6821991a74fd117a8f0ab4382e4140d1653067f5f
TLSH
T1B8E00103531404AAC238133800D31F247BF3C07012B703068F2415B82D677053D24B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e060546e6d86d9709d51ca1941f5aececaabec49f70e7f8bde08057dc2c6f99c
MD5 ebd7381f494216d54c31d227c3ab3a7b
SHA1 3d631148e7d7fcac67e6898749f3d6d7975ccf0a
SHA512 9fa6e7d39a40a0382dc7ce69e62d29f6be65a985071b05a94a27ae98b2899dbbb6e7e90c8516a9b8802178fa290ac5b4a322a3c6cc335758ccc12211115e7b6e
TLSH
T101E00903931908EBC228133400D32B647BF3807013A703168A2456B92E277046D64B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe592a14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe592a14.TMP
Size 392B
SHA256 f341e04e978fb5f1c83eed41068002cadded7e594428f0ff4799f5355b852504
MD5 8d9e8d3b05c9f6a0fd3491ad6c1cf84e
SHA1 b64383fa9eda3ddf29fd68c202f28f3b2b1bcb0d
SHA512 73022c49d3a45ad2bf8a6ba1934abb29296deb01132850a26251d3526ccf5e6e210bd2421c0a6d0b6af6f8b02ced1fbb53a13404e0fd3f0236c019465b9e1fe3
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f4b3ed42ea360b12d7c1216538365d759f6e7da7dfaf89842dd3c8f0229fba1
MD5 46fd5856946d94fb49555ffa4e3b2f66
SHA1 47bb02a830d05ccab4c868583670f32a63276192
SHA512 4d56560b7387ccaabfe53df545d85558212db0c6e62c2712898a708ca1d6156740ea50f25f7526ba6f26dafa19fef18633138ec7a815f7f71f97a68844a477c5
TLSH
T1A2413D69AAEA1148B3B36F5A9FF668AD447BBC632F06C55E10110D4F0733B40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download