hxxp://gioogle[.]com/

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
899s
max time network
733s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 09:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://gioogle.com/
Sample260705-k9aefabt21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277166644416588"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{24BFCA65-7D32-4134-ACFC-08E92D1C0055}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6100	msedge.exe
6100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 4612	2676	msedge.exe	85
PID 2676 wrote to memory of 5064	2676	msedge.exe	86
PID 2676 wrote to memory of 4048	2676	msedge.exe	87
PID 2676 wrote to memory of 4048	2676	msedge.exe	87
PID 2676 wrote to memory of 4048	2676	msedge.exe	87
PID 2676 wrote to memory of 3188	2676	msedge.exe	88
PID 2676 wrote to memory of 3188	2676	msedge.exe	88
PID 2676 wrote to memory of 2596	2676	msedge.exe	90
PID 2676 wrote to memory of 2596	2676	msedge.exe	90
PID 2676 wrote to memory of 2584	2676	msedge.exe	91
PID 2676 wrote to memory of 2596	2676	msedge.exe	90
PID 2676 wrote to memory of 2584	2676	msedge.exe	91
PID 2676 wrote to memory of 2584	2676	msedge.exe	91
PID 2676 wrote to memory of 2292	2676	msedge.exe	92
PID 2676 wrote to memory of 2292	2676	msedge.exe	92
PID 2676 wrote to memory of 1272	2676	msedge.exe	93
PID 2676 wrote to memory of 2292	2676	msedge.exe	92
PID 2676 wrote to memory of 1272	2676	msedge.exe	93
PID 2676 wrote to memory of 1272	2676	msedge.exe	93
PID 2676 wrote to memory of 3180	2676	msedge.exe	99
PID 2676 wrote to memory of 3180	2676	msedge.exe	99
PID 2676 wrote to memory of 3180	2676	msedge.exe	99
PID 2676 wrote to memory of 3244	2676	msedge.exe	100
PID 2676 wrote to memory of 836	2676	msedge.exe	101
PID 2676 wrote to memory of 3244	2676	msedge.exe	100
PID 2676 wrote to memory of 836	2676	msedge.exe	101
PID 2676 wrote to memory of 5096	2676	msedge.exe	103
PID 2676 wrote to memory of 2364	2676	msedge.exe	105
PID 2676 wrote to memory of 2364	2676	msedge.exe	105
PID 2676 wrote to memory of 2364	2676	msedge.exe	105
PID 2676 wrote to memory of 992	2676	msedge.exe	107
PID 2676 wrote to memory of 992	2676	msedge.exe	107
PID 2676 wrote to memory of 992	2676	msedge.exe	107
PID 2676 wrote to memory of 3144	2676	msedge.exe	109
PID 2676 wrote to memory of 3144	2676	msedge.exe	109
PID 2676 wrote to memory of 3144	2676	msedge.exe	109
PID 2676 wrote to memory of 3452	2676	msedge.exe	112
PID 2676 wrote to memory of 3452	2676	msedge.exe	112
PID 2676 wrote to memory of 2292	2676	msedge.exe	114
PID 2676 wrote to memory of 5032	2676	msedge.exe	115
PID 2676 wrote to memory of 3936	2676	msedge.exe	116
PID 2676 wrote to memory of 4784	2676	msedge.exe	117
PID 2676 wrote to memory of 4784	2676	msedge.exe	117
PID 2676 wrote to memory of 4784	2676	msedge.exe	117
PID 2676 wrote to memory of 4116	2676	msedge.exe	118
PID 2676 wrote to memory of 4116	2676	msedge.exe	118
PID 2676 wrote to memory of 4116	2676	msedge.exe	118
PID 2676 wrote to memory of 4432	2676	msedge.exe	119
PID 2676 wrote to memory of 4432	2676	msedge.exe	119
PID 2676 wrote to memory of 4432	2676	msedge.exe	119
PID 2676 wrote to memory of 1612	2676	msedge.exe	120
PID 2676 wrote to memory of 1612	2676	msedge.exe	120
PID 2676 wrote to memory of 1612	2676	msedge.exe	120
PID 2676 wrote to memory of 5484	2676	msedge.exe	122
PID 2676 wrote to memory of 5484	2676	msedge.exe	122
PID 2676 wrote to memory of 6100	2676	msedge.exe	123
PID 2676 wrote to memory of 4368	2676	msedge.exe	124
PID 2676 wrote to memory of 4368	2676	msedge.exe	124
PID 2676 wrote to memory of 5020	2676	msedge.exe	125
PID 2676 wrote to memory of 5020	2676	msedge.exe	125
PID 2676 wrote to memory of 3292	2676	msedge.exe	126
PID 2676 wrote to memory of 3292	2676	msedge.exe	126
PID 2676 wrote to memory of 5076	2676	msedge.exe	129
PID 2676 wrote to memory of 5076	2676	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://gioogle.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa710cc188,0x7ffa710cc194,0x7ffa710cc1a0
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,18285649742459073672,15648981065444692096,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14490099866237317877,1142065493246503577,262144 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,3046224807979158229,1162296560129221723,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=2480 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,15054138574863722339,10031206240882855406,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3548,i,14999687625949726139,15174151611588708017,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4328,i,8145385700008826312,5825521731256603754,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,11756795465724346459,14448728335947501411,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:2
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5208,i,7376542476240931833,7783070027986601596,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,17367425367394565670,3199378056487390494,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,5471948404279743059,12472758913673823395,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,1742384633128716145,14019084544358871179,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,1742384633128716145,14019084544358871179,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6208,i,13486839663516641942,17468910438085315307,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5236,i,12988057458824646940,8028965460650513117,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6240,i,16026186292334033742,311082769884233708,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,12036533636599700499,436410077739831793,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,1482643137662969206,4145908682002482080,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,18305483274197909399,11556600839564379198,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,7895737146789999477,5182242706297101440,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4572,i,36066461540968614,9613401723490824367,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5908,i,8486566665164656404,8121981485459112678,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3500,i,8114313776758448213,15671200834183581903,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3768,i,4906715035694512277,2719090380962359020,2097152 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1672,i,15062928117812558804,1198092410410971175,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,6836416821941295024,1932066566284779683,262144 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,1538881835797779872,2298888701954703647,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=1064 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,83069022821733933,15532285448588148776,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=4064 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,16249977524644415989,7477442111266819690,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,10159333213837962323,8293742681812657261,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3412,i,7364437575925705573,16130391540920660605,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,8170824033298783925,4857599755050063709,524288 --field-trial-handle=2360,i,8734605188256937546,4512701173429023087,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:8
  2⤵
  PID:6000

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 528b3047d00d21be2e2c1bcfd9c35d495e7010768427ecac80a4a102833dc739
MD5 7d3874404e7e09b508eea76d415a2882
SHA1 765b4aed2464836734fe2ace2fdc520ef3605290
SHA512 db3efdd132a5c48d707512fc1f9a9a78cc857891341bc37dfb3b60217d0c9c6e92231f08a634534475b925a40d5f502775776715cfb28c69442de98d53c3dbdf
TLSH
T169E0D8CD09C6C21DB508748F4164930C83A1371B92E4FDDA1F1494A4740114C6B899B4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9723b4e7340f4b85d4b1b1974c8dc808701f4b5fceb67e2a70212152de028c39
MD5 93cab1db9c91e954b10e2588ee560ae6
SHA1 29a72c5009d0c3504f91295c96782b0d49e6b400
SHA512 0284db5882ca75823833f5d1d7117ca94a1e77b803c99074da1bafcecc7000389593d3c0bc0a7198ef742ac956b5fdb5af61b806840dec2249d336e61aa74d5e
TLSH
T1DFE0208406CDC77D916075878174975C83C1375A92C869152B248C68300109CE7EDDF4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 d138ebd5788ab3145a8e5105c147795d079f52ab8dcff60d3c3f6154bde8a931
MD5 3984c688739a4c1dc8814958e60cc75b
SHA1 d695a5af0b677a52466d9e5b8838bec50bc8a16c
SHA512 7ae00c5d7b6cc837d681058d962439fde51e60f70ff1ea3ac5d74730c46fd9ab5c04cf0099367a6b6b736b8f0057543aaa9e0bdf3b30ff7f8554cc295b98cae4
TLSH
T16EE0D8A8D39AC5D8154DF8CE8074E31D52C3731D919C79E53E28A9B9940040D6F9D8FE
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9ba9e858f25668e7ce6c8320c6a554de1dc9ac692581acb0d5ad658fdc7d7877
MD5 12ecf6cd2e076e4f8e57466b2383a20c
SHA1 2f702bd24c8df27283fb49c64e0ec624e1cef2a6
SHA512 9154b88baaab587fa58d474f549eac9a969943acb5373418a44d4b892c63b40a652365d16b7042459b84698ac91cfb267c6055151dfdf7612a10b461359cce5c
TLSH
T1BC714FA241B34552F7ED2231D0F23646327EFAD40A0B8F6AF1ECE47F991E725C816008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 fb7b195dba8833af5dbb5a7d0f8a684d7246984897836e5c918927c20566e7bb
MD5 bb4c3e9cc24ddd2ec09b753e038bc0bf
SHA1 f704873fd8b08a51e704aab6d94dfdad3c87d66e
SHA512 9e80e99676b3a12b6056457e0c635d0891b6e72ed673348468d2ee9c4b7f454e90ea6fc1666a2002203462f0644c6be22867b959cbbe510cb52c8af7d12e7b55
SSDEEP 96:qTHE6/nsIYAqw0/l9Z3Qxsf+G3LuaKTcUWBYMVxFC10xK0Ru7CMQAg4T1bQSk:g0jwIvZgxsTyvWBYKvxdAgwbQSk
TLSH
T1C2F19224B2B63792FFD82972CCE07EA5F179E4D4090B6F53B098993E6D0B780758E544
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58afe2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58afe2.TMP
Size 3KB
SHA256 60f31d095d2d5b5a2fcadbb2a20055d716c581685378d21be3a0c1f25f2d2803
MD5 10e42829d5719cface01b09039621d3a
SHA1 7d3f4961a88211e8e6e7ea375a2c9d452e6837f1
SHA512 1e77a3d8d71f61458f2426c0f95a493c546166d2f9785f0e11c9a36aac626e6461cc6d0676f1febc12aa1797fcd67cb78daf2100ebfc53394fafdb780456f52d
TLSH
T1FE714FA241B34551F7ED2231D4F13646727EFAD40A0B8F6AF0ECE47FA91E725C816008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 0257884cc426eb1319d686cf307233eebf37eab5bd0e5e0c381d5a6f61fcec7c
MD5 bb6bb2f9785d172f2d33c2b776e3c778
SHA1 ce2a64cc5ae273be1b0a36de4fb88b440348b242
SHA512 1d514dd33606303ed1c2d72b114a7517fb88acd20c37e6996e3db4b63dd6d966fc95ce695fcf29a3b6bf3fac20e51ebf1479f85770e0735143c915c8fd4b765d
SSDEEP 96:D3OAhSJ8xszBwBwTzEo//2cNbWD+yJfGrx:DeAQJ8xs1kwTzB/OcNWyyJfGrx
TLSH
T12591BCF3C3E5866DD91152F0AE146F1BCE1D0956832C3C1AC8E4AF1BA3F2471E251A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 f84d88dec09b0e7724d0ff9de71ad6b9d0895b5a7ede0b6ccfb7d42e69947609
MD5 9c21b99b56f2e56f534c27448034f5e6
SHA1 67b4c09ece78fc9e94e4d7500174868369740239
SHA512 507b198554404102468554fee08aa248712228353e2f33a0f47e176761830842ab1a57a72a08df9327c5c500a502da50622b472bdbefa89ea0e4ad685a12fbdf
SSDEEP 96:D3OAhSJ8xnnzBwTzEo//2cNbWD+yJfGkVRGwBj68:DeAQJ8xnn1wTzB/OcNWyyJfGkVRGkj68
TLSH
T1B5B1BCF3C3E5866DD91152F0AE146F1BCE1D0956832C3D1A89E4AF1BA3F2471E241B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 c0268de78c8388fc6046df72a6aaa8c487e7d9a5c06b38c811373af0ea50f288
MD5 2e4830e778317aefbda8a3cfb29277f3
SHA1 51be61d466d8fb2e98b5277f337cba2085ce7b85
SHA512 6eff96601702d14ef8b07db48c24fea985488ddf7eb44537bcaf1c880f7795c5630cf9d70ad06b9fe636ac83b9b9d3cb09b10825207efa55530f5840166b49c2
SSDEEP 96:D3OAhSJ8xnnzBwBwTzEo//2cNbWD+yJfGkVRx:DeAQJ8xnn1kwTzB/OcNWyyJfGkVRx
TLSH
T14CA1ACF3C3E5826DD91152F0AE146F1BCE1D0955832C3D1A88E4AF1BA3F2471E241A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 2351f2909f835607b694bcd8043665217c0e26ad4d1d49f68e8b9feb96737364
MD5 65b96c2daa7c0f96ef20aa3833b91316
SHA1 8f04048d7af7fe900e003c56aba140243c413e10
SHA512 88ad5b5b08f9f342c70e0744c3fed52727008305f1f8a3b5db4b317ab8f8fd803b63b339627d93ee8c8f29b90004c01c9be4c6c309e96dd89998191c5c824b94
TLSH
T1268189F793B5426DDA1191F0DE14AF1BCE1D0416836C396A89E4AE17E3F2071E142B9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 757b52ad8580d482cb9be46c57bb7a52eb808dbfe2462d1af4e6117aaaa9e793
MD5 e0f3be86b385b417a2ccd1f2f7e6e55f
SHA1 32b90a0ab661cd0c7edd2f4380947b021612521a
SHA512 ab40caf32ba35390516d3e81a8d5181ae8a81b98f83e4e1047cc09bdfed796255207e76fc935b1905dd10f8373045304f1de824f19641eb6213e24546daef2bd
TLSH
T186D0236321457075795C3D964059AD8ECF25502414029EE724E459D8053745C070F0E0
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58d9b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58d9b1.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e4ce3de5fdb3fcad2fca2fddc0137a2bfa11b25a594d1b273495444af078bca4
MD5 ec391bb7f4e13249a640fab5b2a6c90e
SHA1 1d7c20f1c8e49b14997279967e7f5ca91590cd94
SHA512 520dd921f5993c1f3ac65f04429ded1c473888a9327426d16733e4ca6f6f4b91dc041faf81dfd48bbcaa999f6da83c784caddbd0f296df6f234978a34bc6aa68
SSDEEP 192:sxZDRxyM/+K1Ml8MWOo/fAsCrV0JdpLPHDy6+WNdt1/YLTxTrKIgrJ:sxZDauOo/fAsCh4LHbd/T9
TLSH
T14A52E7126A385977CCCBD209FA55BB53D7F50432E6900E44AAFCDE1C05E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 60f80faad3d9dcf47d993343d054b68a6b427eabb101e8536047978b38b64ae6
MD5 4e36b9e001f1c6ba1a641fc6eabb0e1f
SHA1 6721906d018244376cd0ed58294ff78335ab59a0
SHA512 f87241a2475706249479eabd483189ab6e9c789fa676f0cdbb7c551b31f955c867b2b283c34988bde38327f9162f458168a95db0921e13b5508f96df59ff949e
SSDEEP 384:sxZDasm1o/fAsRdwrHbV5s/iTKFbzHnKso:sLbm1o/fldUHba2KxzHKb
TLSH
T18B82C75366248977CDC6C509B921BF17D7F51462DE950E4CAAFCCE1C00EAAED2206C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 6efd65204677b632960ab0a78a776b45ae1d4b4d67d307beeae919379eed0ef2
MD5 7dd8f1aa36b5744ab13a8b9f2b058d62
SHA1 284e0236487e1f1116d41e093b9de4223484e01f
SHA512 ed228478aef1896fdb794548a54da8e3b9245f4ac6931e167036ce18156845d52e00b143348c9e62d70ef8300afa64230628d2d3ad98d567996a7ee0302b7678
SSDEEP 384:sxZDaqUm1o/fAsRdwxHbV5s/JTKFbzHnKso:sLlUm1o/fldCHbalKxzHKb
TLSH
T14682C75366248977CDD6C509B921BF17D7F51862DE940E4CAAFCCE1C00EAAED2207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 570a803cde96dad9da59c57985de8ea85b5ec2252df8aff8da8e4e16a8bbf61d
MD5 361e3800861de6d81afbac5310a57363
SHA1 3eed8cf78fd7d22da56503370a5dcad4acb6a6e3
SHA512 ca51cf93d65d9ff023e9b9af1f1a5bdf9a0bbdadfc8e55d3309fe6e7eb5a4ed3c13fa5d96a60e376882d6551e0f3bf3478cabc2899caa64d23b4c5b1b1fec983
SSDEEP 384:sxZDrqUm1o/fAsRdwxHbV5s/ITKFbzHnKso:sLGUm1o/fldCHbaUKxzHKb
TLSH
T16D82D75366288977CDD6C509B925BF13D7F41462DE944E4CAAFCCE1C00EAAED2207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b2fde43424961b69e33e39f804df77d70e40ad060910f5a5e0a5b6a9faf508ab
MD5 1a2bb298a1cf719a57cb2354a945cd4f
SHA1 c51cd7abace25890d46c2963b59c5dddebf16019
SHA512 1f24309f85e1eef7366bc24c0e60ecc915a442ca8edaa9cad566a7dc17146bf3279d1851489064a78a152538eee4092f3cdd504074b8461fe9353b341059e98e
SSDEEP 768:Yqs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVzILlWwJNzroc4:Yqs6pD1WvxzWju1jauILIsNAc4
TLSH
T1CED2FA3B680CC77E4F845E5CEC2A6F967ED801CBAB98894447FA484C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53c5d8cf-f8bb-4264-881a-672dddf80728\index-dir\the-real-index
Size 72B
SHA256 a4a87ee9e841f8a975577ba4b45948a6fb0bf4311ca97b03fdcf150cf54f737c
MD5 2f2135f283b6cb4a50ef7e46ef9c3ab3
SHA1 104c7cc1f45d4ceee49459a880ec1aee18e5d9ca
SHA512 e7a23dfc39f6f50d0e4e724dc94036b52b2b50ffe22946b4cc1b097b5c55b8336532dec9c8200a5e01d611ecb8721d71bf44b539542fbf66fd30ca9bbff05ef8
TLSH
T129A0026052900523D042C7F4105B015473116860419136428290FCE798D96E15565050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592be8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53c5d8cf-f8bb-4264-881a-672dddf80728\index-dir\the-real-index~RFe592be8.TMP
Size 48B
SHA256 3c3b149dce0c83fc7d25260335efb5be04a75caeb0180717ba8b56636723a0be
MD5 c8783f80ee32cfcc2d1281e2cd40ca22
SHA1 8d94cc011ce6fdc1be44b9a1e80cabfe20446b3e
SHA512 d0ca9fec379e9c5d103c040efe9289b85579c4a8f4b86823bbc251b29f399139b8cb61d232d9fdf3a8b35b9f8919b0524553152bc5a8931e8c006a61b6a8c5ef
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\70599668-79a8-4baa-bc5b-42404e70b9c9\index-dir\the-real-index
Size 72B
SHA256 97a56bdb22f8122c1dc32738de0711252364d9ec280493b94fd83e32554ca8b1
MD5 98db178dad01354f99da354edcd6b980
SHA1 790bb2f2d80ed58f578faafc63f66810c66afa62
SHA512 2f2ab5f33bd3a1a793e1f74364d5cb514ea2079aeb31f7049ab3b7978527f020e9fe89e3b6ee260eed3677d0c093dc3a82e1144e880436a2fa67faeb61e83840
TLSH
T1D6A002301375A355C01287F15342016627155C194507630DD09016D589A65D99501278
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 3KB
SHA256 40374443cd0a7c6c66adcdd7bb75d279c5883b2cd5b6c07dd2a659d535ea6eab
MD5 de4b11e4f3d290aaf318347c90931701
SHA1 0a980179e9221100d021701e3b6e67b302f7c330
SHA512 d980a4ddf4403015453a9da316229bc9023168cb0166066909dd92f3c418d4078f74078af890eb7dec5d482aea93b174eb8c11562dcb4671e77161619bcfa6c8
TLSH
T17051B71E4D46395BCCBC127264F6048527B5B5DC2B849E1754EC9138BCC7B28246922A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 feaa0961d33e74cad2c758dca6c25f76ce0e737ff7ef87dcde3d87a45f167c2b
MD5 70c500ad3cd77e60978950c46f40e79a
SHA1 71ba96dc8d538eb7614e4e8b0c29721cdfffb626
SHA512 9963a5c9777882bfb08687d83aa583289df8e6ed6f433cf2fb6c3d9572d0a8685daf47604e4a627182ef5b1a39710ad6e64ad0dd1273d73dc706cd5a8d1f085a
TLSH
T15151C68E4D824639D8C4417709E3A8B437392900CB09BF5334FC9636AC837AE3D1E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 641ca51465f76ae20ef40dbe395640571b917b97d586614d5a55cb4d0fc8bc7e
MD5 449000e40cd3ca3f226e4aacd37b7688
SHA1 1fed2147cac4500d1550944573f0f456e32399ad
SHA512 fee956571d11b85aa667dbb54e55843f735a17157f1df521a700a276ccfdab0eacbda1e7c154305acb30bfa77568592d2ecac38556403e253ce3fe2be317768d
TLSH
T19DF05CBF6FF76824FEABE3E23431507102413D1DC850FC4F146BA69390B12597869C62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 b6b3c3661abc435d98da5accc14e51a0a7f5329906ef4eeb3fc97fc25811df21
MD5 a2682a62fcada9bbfb45aa4a28560167
SHA1 a88383bf9581b3139050369e2a4be12115cbdde5
SHA512 e7bf841bedf8fa7b38946343cec11357deeb3e50421c63f796a8cd3b56e3cafa06019881721891902288924d0805476fd6af83e27ce7ef94c61d18413c8da9ce
TLSH
T17BF0277B6FF72824FEABE3E32431546105003D19C841EC0F146BB68790B13196859C62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0176a4a589e97f818651e741287db95d26bfdde9883126fc449852b3c21f41d7
MD5 228c985434f45282a2da739f91b8b781
SHA1 c9c6d4030cff0ef49eaf2cce8c133b4019626389
SHA512 51df7feedceb254676fbb476ace38ca673b00de8e10b8b4bd5982c28812a8f07a3319e1b0da13d16515d8804cd8cce10a77492b1cb807d4054d4186d0e1f1ce5
TLSH
T17CA00252D6CD2529D90496B59047666037504D290305139388D8E0ADACD654056A1149
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 361aceaf212d72775fe2749121f7c77e2e6fcd70ff88c9b470b31ccc7890db3f
MD5 7e494131d96ab3fa8211e36622205f91
SHA1 f4faf1ee6e1d84695ce5aeff3e198ccab0aab16c
SHA512 892fe831a713a0ca586b3fe38de672724b8a60199ec22c6ebebdb443e7e20aae0acb2a298f6b374172b0379323c2f6064659bfc8876242327a15ade540ead61a
TLSH
T15EA00293815A0846E4144274B44506897324C85046497257C6E8A395F9535508316044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cf80.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cf80.TMP
Size 72B
SHA256 823d5b7dfed1527ed55389b1ec478a29079036284fc5cee842d5394b5da4e2bc
MD5 1ebd0d1d6fe62b873f61453994209774
SHA1 e4ebcabe680042b9bab3aba033f246d6166c7a11
SHA512 6dd69ad6e18aa69b268ecd660232653e7ee8cb5b8d6e06aeba277d057385b0fa856b35ff21f0bc01769e0f151a5e9225491c478c487fbbf9a2f1028edd467f5c
TLSH
T13BA00252C69E2828DD0045F11007366027408969030062424994909CEC954C05A6521A
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 fbd2c659505b73334dc231966bbb5d3365522462c00788e16ffdf5e8f6196d92
MD5 7abe2ed38109c96e3d189d8cd33dd9fb
SHA1 3155407ea1a9aae7f58f5503067bb98fbcbb9668
SHA512 5df5c3703819c1e7699939ce2ef5e0b466e2ec91f83ff2c49bd1f938f3bcb58876b31f2c4f6efff7e1efa709b9ca902f72ddf8dc2bc8317727e4c91482844e7e
SSDEEP 96:KUAAKtePWNKKu0S+FeKWchsAK9aOy+YKT6tinOiU09:iiJFxhjnEinOiU09
TLSH
T199E15A5673BA02023C7D3B0D82D5D7678E82B1637018A46B7BED14728E66E218DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f75ebed-1f0c-4231-a028-e029f1aeaec5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9f75ebed-1f0c-4231-a028-e029f1aeaec5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1a33b926cb9f554e0821e7129a85004b96c2a84d8b26a913fe80150496851bb0
MD5 32da3c71f42771e1d13c4d32ea0e222c
SHA1 1241e1b33683efb8c620e17a80ceaf917631b3ac
SHA512 c831786e113bb8a847f0a40f9367cad8091055e6091eebf2bf25256bd05bb56a29ffa4f8ae1d107ac50d05930fe0a3b7ab3ff4da472a803be71b3572bfdb66ee
SSDEEP 384:GtNn/s3n9SfsNBtj/du92a9OdsMBZiQ3ucV57:Gj+9Ur93gNiQ3T
TLSH
T178928C326C286C675DE3D246F68B3A075FB485B7CAC62F5095DC9F1D01CF2AC131AA1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 238fbff9a90206e6ba4afc70079f579334354582ddfaca97169dec4974418a0c
MD5 bff68720cdf6a2b503380d683dc71d61
SHA1 7c09cf60103782fc12356658540e30ada7d66450
SHA512 d4b440d3736c4b23e34292f54cb25c2f85bb6b4bced4ba648ef96d46db660511c5cee797586049b38f7b2b4799720262648aea08f662049000c2946cc6a7be02
SSDEEP 384:4iF1tNn/s3n9S7zsNT8TUNTUlIl4Tp/Ax92a9OdsMByiQ3ucV57:DF1j+98+wgz93gGiQ3T
TLSH
T1F5C209F248D79876D9AE8747B77E2D074EBCC167B9816A50B3884E0CCD8A1BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c9e95e2fb4234ac6b43b00903a335743b52856db220da8feca001cd1d1052784
MD5 7f8851ea206b1f0c64d96ae43cd4b86a
SHA1 9df66d1c004b768892a6c66df10acd15f8b61ff4
SHA512 528c6cac0ec730150a1b347b01652073a3a93922ddd4eb03300206f27174ab79a6b14f1538d886948d1b85f2d3dc9641a0ddf74c79b81ef16707dbd4682faa28
SSDEEP 192:qONq6O7+3hQmiUy+iGttb0M+Fdsh2uPgGdFU6:qONq61AGt9OdsMUvU6
TLSH
T18002E835AC386CB78EF2ED46B6873B135FA5113BAAA52B44D6E81F0C00D765C2347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3305724cdba469cda4061a5e94bec8635d8d4a2b4dd5cc791a19b4ba81f952d7
MD5 75e5384ebc3b1082749766610bedfad2
SHA1 bdd066bba389271347b4c3f67abd6e02bcc2c847
SHA512 6a03ed5485f68795e49e70835092d7d32f4f507bd0db606063866cd0aec1a9ed118eb7a47bd4e020127f7eae72d32fd332bcae308145bd4bb90ebc2d9f0cfba6
SSDEEP 384:ttNn/s3n9SfsNB4Tp/Az92a9OdsMBZiQ3ucV57:tj+9UA93gNiQ3T
TLSH
T149928C326C286C675DE3D246F68B36075FB48177CAC62F5095DC9F1D02CF2AC131AA1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8414858e7a544d9f545f8213102131e77ce46b68d5ec32fa44d0d859947d5f60
MD5 bc7a8d3e9536997a98d8d683fe3729a5
SHA1 4bf5384606de9c541ea467bddb45886399cc5512
SHA512 bd59c9c0f0c43dbaf2bf6fac24ec22022afc56a91cbaa0c2da1fc0095c23cab19881fb34702ee7bb4b93ba17f6cc96028dda75c7782371d8a193901ac8648ab9
SSDEEP 192:zONM6O7+3AQmiUyMi8ttb0M+Fdsh2ue7NWcN8q+/U6:zONM6WU8t9OdsMB3iU6
TLSH
T127120836AC686C675EA3A541F5C735139FA5412BDE8A3F80D2EC1F1C01EF66C234A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46d54156-912c-40f9-be83-a77e4d146c5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46d54156-912c-40f9-be83-a77e4d146c5b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6cf50f0e4ea58b9bc7d2eddca64de78cfad1f7cb6df78b6ca88da48849766f7b
MD5 5c373d058c6dedb3477eed35b7e8dce0
SHA1 34beb456f724408d410d3f9e5893f0a13bcf43f4
SHA512 60395dadc3893acbb55534affa783dd4379646526aa40d245c6be351dd4b43ea6b3d4d6a35369ac33260c7eaa8a1a7a132bc09b3421d1da005d564f9b8d32df2
TLSH
T16D411A5CA6FA1148B3B76F169BF6A86D487FB9772E06D45D00110E4F0A72E40DC62737
MD5 SHA1 SHA512 TLSH

Submit Download