hxxp://bloxswaps[.]com

Analysis

user interaction
yes
max time kernel
134s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 23:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://bloxswaps.com
Sample260722-3pegrsdf52

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2488	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292372807991822"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{B1F3AEAD-1458-464B-A449-F039842F62B4}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{27D50943-D142-4904-8A10-35670EE7FE73}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 3336	2908	msedge.exe	86
PID 2908 wrote to memory of 2488	2908	msedge.exe	87
PID 2908 wrote to memory of 820	2908	msedge.exe	88
PID 2908 wrote to memory of 4600	2908	msedge.exe	89
PID 2908 wrote to memory of 820	2908	msedge.exe	88
PID 2908 wrote to memory of 820	2908	msedge.exe	88
PID 2908 wrote to memory of 4600	2908	msedge.exe	89
PID 2908 wrote to memory of 4664	2908	msedge.exe	90
PID 2908 wrote to memory of 1780	2908	msedge.exe	91
PID 2908 wrote to memory of 4664	2908	msedge.exe	90
PID 2908 wrote to memory of 4664	2908	msedge.exe	90
PID 2908 wrote to memory of 1780	2908	msedge.exe	91
PID 2908 wrote to memory of 1780	2908	msedge.exe	91
PID 2908 wrote to memory of 2212	2908	msedge.exe	93
PID 2908 wrote to memory of 2212	2908	msedge.exe	93
PID 2908 wrote to memory of 2212	2908	msedge.exe	93
PID 2908 wrote to memory of 4668	2908	msedge.exe	94
PID 2908 wrote to memory of 4668	2908	msedge.exe	94
PID 2908 wrote to memory of 4668	2908	msedge.exe	94
PID 2908 wrote to memory of 4100	2908	msedge.exe	97
PID 2908 wrote to memory of 4100	2908	msedge.exe	97
PID 2908 wrote to memory of 4100	2908	msedge.exe	97
PID 2908 wrote to memory of 3332	2908	msedge.exe	99
PID 2908 wrote to memory of 2132	2908	msedge.exe	100
PID 2908 wrote to memory of 3332	2908	msedge.exe	99
PID 2908 wrote to memory of 2132	2908	msedge.exe	100
PID 2908 wrote to memory of 1180	2908	msedge.exe	101
PID 2908 wrote to memory of 1840	2908	msedge.exe	102
PID 2908 wrote to memory of 1840	2908	msedge.exe	102
PID 2908 wrote to memory of 4692	2908	msedge.exe	103
PID 2908 wrote to memory of 4692	2908	msedge.exe	103
PID 2908 wrote to memory of 4692	2908	msedge.exe	103
PID 2908 wrote to memory of 2924	2908	msedge.exe	106
PID 2908 wrote to memory of 5608	2908	msedge.exe	120
PID 2908 wrote to memory of 5616	2908	msedge.exe	121
PID 2908 wrote to memory of 5624	2908	msedge.exe	122
PID 2908 wrote to memory of 6012	2908	msedge.exe	126
PID 2908 wrote to memory of 6012	2908	msedge.exe	126
PID 2908 wrote to memory of 3060	2908	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bloxswaps.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x248,0x7ff9cffac188,0x7ff9cffac194,0x7ff9cffac1a0
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,13202969011793987618,12679020139301396830,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1768,i,18409271675238656577,16614754024768657015,262144 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:2
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,1471453750385204169,2784998540932388523,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,10158036138584227021,11901355279763659184,2097152 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,12561057335278471409,1427690068322577456,2097152 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,7945005112242283117,10372614998166983739,2097152 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,3833712846542219496,582637725071550744,2097152 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5088,i,6340151644767643808,10109448179140945836,2097152 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,14821953363864657157,18395801417643557446,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,4270488960541063915,15892235705366697995,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,14210136868486403095,3661087408082603446,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  - Modifies registry class
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,4342940355289175958,13701556056700024558,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5892,i,16373178930357347222,8796849222647326243,2097152 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,2982819757087428267,1696331286876821821,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,2982819757087428267,1696331286876821821,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,17499150909836743180,18215436052411067711,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,1822217518760109410,6437509716669877665,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4400,i,18398322809940166417,13614764718392026690,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:8
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,5671859115021982837,4666237953389799850,524288 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3612,i,16346442369163172378,703220131856823743,262144 --field-trial-handle=2888,i,958632629276213613,12050707447603954841,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000e8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
Size 38KB
SHA256 7d5d046b00681ed0abb2e9acf36ea6d13c82671f4a2ae57c0590304ccdb754d8
MD5 160b48073b5003c819de69754bae710a
SHA1 a7e992c76282061196eff188224a0421860423c0
SHA512 5dcbaacdec159e220f83db66e863879133fa2a2f5a8ab087ee913f2d07d021d3492af1f6a3f358358ce8762eb48da0018679274fe02679318be411cf7581a454
SSDEEP 768:0g+VCD0SgQH/P8bicDfeEkhImg+7KU+Qj5xmY2t6tdmWbPATrW+6B21:0g+bY6icDGb7KU++kY3tdmWbY/wU
TLSH
T13103F156741B3B758227A6E84D675D458271868388BF6D71C3359CFB0EAD072EE03CCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 25KB
SHA256 694bdfb3b55c0a1e8b195dcd80c6bfeaa7bf8a5c6ad7edcb65110173049ee05a
MD5 16aa42236a4b3f20d4238a224c1c4d90
SHA1 e52310d988bc8a04406cf0aaedd1e45bbd00b00b
SHA512 c3e5f7719b7fad5ac2c2fdaf788a4d8a6627ab134a65ab0b52b9299e48c02b60a6fe198d9decb12d7822d67abd8c8f9341ded3bf4390c94d50a0212d426f3129
SSDEEP 768:I6xadBkI+1TmzQdc2ihD3tiK24KDWDPR3lBztxVSRdIP89:IpdqI+1TQQd3UD3E4KaN3lB9SRdr
TLSH
T143C2E1E70EA0AC79EC1C722B2F215087F2244CD50A5B26B8A163FD54A07DE39AD771D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 26KB
SHA256 90779e9f459969b553ac3d69da811f25813885195ca0398f151d09125680b347
MD5 4eceb5aae8c1cfba442bb132d62451a6
SHA1 a888a61ff8beba67d66fee1bd315de1f8b691785
SHA512 1c3421d2bb654a9da11331115d721addfd7458ef25c5fc0f58d712a5e01c3d47d6b356a6bdbf9113ef19bc6adff499bc378ddb656a960350e4edbab4b8df9ae0
SSDEEP 384:6zrxw3Stj7sBguGkyB+jeawGxb51sWjGeXWjMJSF8YQNUo554OM+oe9tXxC2bZcN:6zrl0fyB+P5zsWLX4wGw9Bk2bZFr34
TLSH
T1D8C2D0E57E8C53B21B8E712253488378DC552E1C65942389245BF5ED8A79F5B880C3EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000eb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
Size 41KB
SHA256 19449cbedec817c02cb5556b9dc32e41c49531bfd4815144e9a3f9843537711c
MD5 d003773450f755f40e5c378d3d532938
SHA1 37403cc35160bb1e7ccfad817b6f16ce32206701
SHA512 5f8156b5280763082afe2ec752eea3fbc3b1a1a1ad9a2d735be48573a2fd5e428ba4ca7e96b9f958b0ccee7ed1346f053128c1836db6a218ba92a29a866876f2
SSDEEP 768:HgrHjcdpusQLUazSUFrIfFYkUlt6/+M2DPZLEo1n9H1yIfmCv8wq8LY:HkHkAs5ayfHUJjtr1lfmqpY
TLSH
T1951302749733C2D75FDE27C73F2AA8B30E27123BA3B233055ED54AB9049B24B8611514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ec

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec
Size 30KB
SHA256 fd317161fb1c258a8c4dc3f8b0a198d25fa641e8a9eeceddacc2303c465c0295
MD5 7f10f1cf9d88bc53f16ad2bff5aba6e1
SHA1 2f6f00675177d6476a1e5463d596da6b8b213a52
SHA512 04d7c9137e040e7c737aeb91656b18ef1582ef046c687af8ba0f439c4c0714a701ee0854172e9ef2a1e52831e7897ad64c7b13d7fe889c36b2f556035d33915a
SSDEEP 768:fKoePY2Bxjh7en0gRDHKSQwvNzEtJeG3ID76/AjF:fK1xjE0QHpjKtJeG3ID76/AjF
TLSH
T18CD2F2F060541BA5893313D0A65A4E22928AD0F09977E82CFA1F272B3DC08F25F9D91F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f3
Size 18KB
SHA256 1f557a59257d91440f6bd9864a3f2c975c8b26fd8c25555899aee950d88c8eba
MD5 2bc7455de6822ca3a97e8213b6bb8e47
SHA1 79d96ff615ce3f7bf815bacb3d3d483617a5d2b3
SHA512 355309d5114ff539b346cbef2efa7bbbb6a6e16eb88d238d953145f113c3018904e7669b63ddf80a6516aa88bd58f050450cef89fab7bd61b22ff6cb9908d7ab
SSDEEP 384:r2tKl2dbV9Xnx8UC4rNyJzgxMvKc0jtVDSSFeUmX9s:s1dbV9s4JyJzgyKcWeCedXq
TLSH
T1F482E066E340398443D21BC3CE59EC318057CFC57E4E62201ABBE8DC972C9B6A5907E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000100

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000100
Size 25KB
SHA256 f2d6416dee5600189c599d795a78b6e8f1457389d7413f8819811978f241931f
MD5 50107b4d18da6942773e6d698e322c73
SHA1 300a6f926443a47990f26e5679162cc08e18933f
SHA512 549ad939e580adbb98303e801de9313c0ad8c631e1ecfc4f3da3d8b4a29dead8618c3d0f3818255a0fee057517d836c72aabc55279c82598d911045fea2fd042
SSDEEP 384:Ij7GnBeORALLW3mru9C8aa33UnkT2ZecIL0uoo2rooOdiQ44/4txlJweRytldXZ3:Ijyh4WWCA5kT2ZecILX/4HhRoldX71
TLSH
T14FB2F196C467E2A2720BCCACED6B0D2DDF434CE82410D615E54F76108484F95BBFA9CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000113

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
Size 22KB
SHA256 42ce508f1aa0e309ea4d999941a353c976b00b777d9e2bbdf5b55a6282fd09fd
MD5 372ace99770fbba406dd9499845ed37c
SHA1 56dcf41f5bb8d4176b14bf34b68992fd783f55d0
SHA512 f02875f1310756524ed2c454cc7845fb4bfb2af9ce00c7392efcdce87ceb573698a963e0fa5d2af047589c6a180341990cb68fbe2f1d529a6effa37635ac34fe
SSDEEP 384:iTu1/HZfQwV3WO3SguRoA57apff5QcRv3SwA9R38BCLvIjHbUZMWpaklX8ZQuK0T:cGHawFNwoq7YfhFRKwAya87hWpDX8uKj
TLSH
T1A6A2E140C18BBFF5BC2F0F0DE55913B2D9E38DEE7884EB928695E00B56156C8AE43D52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 8c63cce1a795cbf8d80a2f8d5f2ff0a3aff18240dd3a9ce17e21ef040a6ebb28
MD5 2ed67ce26124bcb813f3a68427649869
SHA1 fd296a23e0b8971a00bc6614bd2231aa7bb26c66
SHA512 fe4a8b66d9d3ae0e48b1d22a6dbd825c2a8af23541cb98694af4f8e8e2cab4097d38b1a13508a71b8951efa8bea8128a14cdc158999c377638fc761cbd453e24
SSDEEP 48:d+1tkTVk9gyD6uoHlcq3zzxwy6Z/0NhpW5TVYlcbz1UDmVywo5LfY8Pwguf:QIG9gyDkHvxwy0sNheVYlcbB5w/LIf
TLSH
T18CA195D7A5C62496DB100E32E4D12946793ECFACDE23BF5A536C407DF44A6D22C91CC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5962d7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5962d7.TMP
Size 3KB
SHA256 94b73e0fae4409ae8fb75b4ecff67c384fdcd5d36f62887d3af9873b7aa0829f
MD5 515382c29a40b1ade4489284cc74222b
SHA1 066b41c6143e00b70eedb735672b1df36fe35de7
SHA512 25c29ac5fa2789a59d759f01dd0148d0de320fcbd4772c5626482589a9cd0d048de37480a79281d5b67f815b7659bf7c2117155185c21b77211b60758b90bd51
TLSH
T10071F92B06C31459D7200632E8D14206793EDC9DCF63BD66537C44BEFA0ABE28CD60C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 fbf7f84b9379dedeedd36f1ca319ef7d7256719b4c707d8eaa05369a32abed46
MD5 4b11d49ded3b4550bbbe7befeae03947
SHA1 010a34e50b758fc84eab3ca836ea6120fb6df400
SHA512 ea7375f9d6a5c340b2430916bff90b99b7e9ca5b2ec06b8b1989ea8200b6973124d83dfffc0095d1e4d2ab844876889685cef50950ffcad66319ccdf959feb67
SSDEEP 192:DeniIJ2loHNeRYiqQwpEITgQVZDjrAVvamzCZsrwkZqgwGPkp:DeniIJ2loHNeRYiqQwpEITgQVZDjrAVY
TLSH
T17E026FB3C3E49A6ED8191AF05A147E2BCE1D0919822C3D59CDD4BF4BD3F2872D112A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f918fcc86af8f2665275cad0a30f2da8fe029413282845c2533b93c963a7ff5b
MD5 6769b2be04de502148c2e6857afd4a1d
SHA1 0b308327fed036e1f93dfe78fde03306fd97f8d9
SHA512 a958c1a1f71ba6edcf5e3e61d6c77f642e9e91b7fc8c95404be32f33588da67e07d663a977b44fa244b564a6ce66011b65d00aafa08e21c15e6fa6c0d6c2d0c3
SSDEEP 192:sxZ1Rj5iyMojK1Ml8MkM/fCsSDyIdp9UZHW6+WN0sD1YwyegdIIg5gJ:sxZ11XMM/fCsSD7+ZHbH1BW
TLSH
T18A52EA166734997BCCDBD209FA41BF53D6F9557292900E44AAFCCA0C05E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9f4f853026f0d082da33c6c302b5610a3c449c37d3450d1ba9565f6977b9d091
MD5 bc2e99a9a8c07768b99858027ce214ef
SHA1 c98a2991cd46bfbc500422cd42a753f301153a45
SHA512 8a76cd26750026cecd49320fd7557f4f4fa7ad3e71dee51729ed7cc4e98314da8cab37f385190b6a434f879fb51d658780cb6cb834b6951336fb1d294cae951c
SSDEEP 192:sxZ1Rj5iyM/jK1Ml8MkM/fCsOZyEdp/UZHW6+WN0Uu4x/Yw3ZzdIIgrJ:sxZ11QMM/fCsOZFcZHb/lx/lE9
TLSH
T1FE42FB166B34997BCCDBD209BA51BF53D6F54562D2900E44A9FCCA0C05E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6d49bab4e0e1880153fca06d676f7399f4b626958504abc1674c70142db93a83
MD5 fb59d0eb0b6432a03a1cebfbf5e0c730
SHA1 e9dc9a9c71a077a30320aaf1677e383d77b110bd
SHA512 bd08501f7347aedbf7e5287c8893f4d1c9ba134140e697c25b7903d5926982906afef4f45bd0488d8087365145852707605a368a2df069f6d3d983469f539946
SSDEEP 192:sxZ1Rj5iyMojK1Ml8UQWkM/fCsSDyIdp9UZHW6+WN0gnnYwyegdIIg5gJ:sxZ11Xq9M/fCsSD7+ZHbDnFW
TLSH
T1B552D9166634997BCCDBD20DBA51BF53E6F5547293900E44AAFCCA0C05E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c663c03ee42ddfda8f9f56b67de20a6a8cd58311cb52ebe03357aa3500032902
MD5 ea0f8322a76553f6d50926f335326ee5
SHA1 603785e2d90b3887003a2c9f76770dc4a6b12df0
SHA512 c919c5d5c562b292b89363ef6a069030f9a2bfec716147772aa6113f0c8e03f06a814bd5adc49bfdf3a1c6b511df2c68ae1cff3a40fbaf760e838b6bb48e123e
SSDEEP 768:Po4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dArohEecSac:Po4jeXmWvmKLEu1jacPLZQdLEm
TLSH
T1CAD20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 95f877541ed9748fea45bddae855bde6dc5387b7efc5731fa6218b4337d67b98
MD5 e0d57ef339efd008ce024b6c3c1dd5bf
SHA1 50102d0e134c7486ca81a6854d01477fbdadc408
SHA512 199803948f608f3a7d3a69830df787c6ecfb5163fbf8934b93ad5bc4af06b0918f20090a6dc0be3c97a3f507637c7480d1ac5ded1a82613222d83ef2457b5d85
SSDEEP 24:KdZ5fZUZ/ZmaZjdZLZHZv4Z/ZD+ZmIjZTZvKiZIhaZNZv1EZZZ/SmZRMZE8ZXZkn:Kk8IXKdOcfyl5IFKagIKEIDKdqs3y0
TLSH
T1C0915319B5BA42013C7E2A1C86D48B5799837167341CB4AF7BA804A28E77F205DFDACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\2c97d03d-6674-4c61-bc09-48c59aec7d15\index-dir\the-real-index
Size 144B
SHA256 fe194cfe7bbd624cdbd2b1b1ba160549097608f44548e9fb7c556d3abc937cb0
MD5 183018e8d9c18c22dfd5d9be4047342a
SHA1 b00d6d8fadd93e24c94b0dba578d70a841430c0d
SHA512 b02bfc4db4b110cafbd20684f6a292970ed7ab961d5d8eb269ea564d0bd1a77607ffd82f7c272707297e4fd3282c87826bf3f176cec720f6aceb5eb1833c9e0e
TLSH
T11AC0127CD4B20340C0940470B127036635791EE0FD0C165260F1714CF452049B4F32BC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590872.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\2c97d03d-6674-4c61-bc09-48c59aec7d15\index-dir\the-real-index~RFe590872.TMP
Size 48B
SHA256 29295235f792ddc55f0f2123bba0076d97df61cfc7edb8587e43b8f480d0b232
MD5 8b1fc7f4ae10ec38a6b5facd2f0bee5e
SHA1 dadf67bdcaa1fc1d47afa15e6d752f15dea02366
SHA512 c44a73a57502b08af200ea5b837622434e2022da251b48455be71b1c551f196e2df8a74529fbe7d8ffebd03a1650cabfd78b3a77c42caa35dca2d347df8b126c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 237B
SHA256 01ff2dc47a8b7bb8de05a4363d8d61d49f09d254bb3cc1c3af03d1390bf80288
MD5 7edadbb464f8310daabb23771c92d973
SHA1 f191ca944851987c24557c4b8882ff64cd6c5ca6
SHA512 3c1276bc85c8d63cf31bae6b4f7baac192e7ff8535bc0bf2fd2ce093dcec0d6a1a71609ebbdd31f9ecaf90d195cee6d13275863c7ed18776f3787c48623dd2c7
TLSH
T1AAD0A7EB5130C95A5B34DB95212D369C923B8D4EECC1CAE8C804755625B8A13F405575
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 154B
SHA256 1e5cf71975f053480c18b616ecdbfc5d5fd23afbb3dbc777ad30f919eb1b7017
MD5 40f615b7e99d4aabc35e5e8a09c795db
SHA1 9bca80ca6defa632616bfdc79048da98fb1c4e6f
SHA512 9c81f1905a0613bad2a188c831c9312d398838fa89010840c5ead90e2114163ba606716861f1e4a7a5502b929cf04b57cbc1f66cfd57227a17529afa32610c8e
TLSH
T15EC08CF31420C98A0E3097C8312C7B4CD227C10CDCC4CEE4C40848062135A239802878
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 153B
SHA256 84de0673dea67174d36eb27126dd077804263b8e9f11b9d104b65d49343a8fd7
MD5 60c836f2466e4fee241dab8f4de62c05
SHA1 d90b3007185f64a9c7abc49891d29603c4a51d06
SHA512 d7d4cae8598d23ead660f4e268f55ed3cc45cd8da8d41fb16c9f8d565795a093e1899de0d9bf78704b62b468778a2231852fc29d5b02df9255b961c7ae5cd216
TLSH
T174C08CF31420C98E0A349BC8222C774CD22B820CD8C0CEE4C80849062035A23A801878
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58b541.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58b541.TMP
Size 160B
SHA256 88fd8b5b01f0ba5cc5e2f294cae960670815015a01384b1b9a0a0c5c19e0f7bb
MD5 df9b161a229c00badf756ba44b4a178f
SHA1 a220fdbd368d187406ad93ebb78ccbec96b5bbf3
SHA512 cbdb7b2cc919bd7df305ece9a0d2ad6011236b77a694dd38dc61c1ed9fd5b0f89c75fca3ddc0901bff5f48088b4449c8c01544ff1e64dda4d10c6d9cdf2d8428
TLSH
T1A4C08CF31430898A4B3197C5212C778CD2378D0DECC0CEE4C40978063035A2398008B8
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597b9f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597b9f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 396106f954b545559c43c4f6fb11bfa8b696f3822391e06971fa6f336daf7323
MD5 bc40bece406a31398aea06458b2390f7
SHA1 0dee2d49248eb2d672da4a37574fb14776425232
SHA512 d84b1c07274e784442aa9d050fd12cdcb3dfc729f8254bc6d42be2c4afdce76bf1c9a16ec4c9fe70cb124d645aac5f80f9c4555221c92458cf7f38c4f2a722e2
SSDEEP 192:EONs6hZ0QmiUyiKpc/+jVLjzor2Yl5wOZyjU6:EONs6oYpu+x82Yk24U6
TLSH
T11F02EA35A8786C778DE2AE46F48737235FE5112BAAA56F84D6EC1B1C00C775C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d00daf803d21109178ad5cd6d47fd978775885438c2206e7918fecef1666c5d1
MD5 b3b839046b90a16fdf3584e3a83cb62e
SHA1 4e2f4e46675fef2d9372d4a4bd885856084ee011
SHA512 4c00463c05b6c37187536a1e95a790bde0fe57bbbdc5a48ac6f4dd0a5fd8dabbd0d70ed01948641bd74e2563882bcaac6b4dd869a17e7143a7ebb74b724672b4
SSDEEP 384:GZcIhsNB1sPEtffuf+x82YEX2KFeOObjI9G6w7muj:UhQm628e29Mfj
TLSH
T143928F326C389C775DE2A642F48635235FF99127E7E86FC4E1EC6B0C049A5AC030AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 2bdf8b8a3e4a5eb3bc3b809f0f2962f394c9e4c3327073850bfaa0d4121ebdde
MD5 9409fd7f3b1cc41136f1c909d82449dd
SHA1 8c7e6853bb5da9573fe44cc562007db5ae22b677
SHA512 5255a7484448827d6bf9b759272c0b1e7423b7d34250a3272301e332416a8b86d43cfeca47e579216a8da512333fe21dde09794152867d23dfdda1f8eecd61b0
SSDEEP 384:BiFiZcIb4zsNT8TUNTUlIlYsPEtffuf+x82YEX2rFeOObjI9G6w7muj:oFQbE+wg+m62Ze29Mfj
TLSH
T180A27D335C68D97B9DE6AF46F59A31135FF55027D6E4AB84F2DC6B0C009A5EC030AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6d7912cf915d1dd9f8bdc7a75b11cf900aeb3f01fe8d12cd2e6a61a5945e8a8d
MD5 24c9cc6fd6a4653e514de44a805fb25b
SHA1 c2429141373dbf1be22ae7373078d91dff09810f
SHA512 56b0762ef9b817529f0734fe9a89112e1e018f654343f96896412e59c3a3338ba27de5842ee990b02cd70fc36fcf14ab0e15f202a8d82ef38b1d7a287e23f314
SSDEEP 384:9ZcIhsNBYsPEtffuf+x82YEX2nFeOObjI9G6w7muj:lhtm62Fe29Mfj
TLSH
T1E0928E326C389C775DE2A642F48635235FF99027D7E86FC4E1EC6B0C049A6AC031AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a3215b8e8e7d1722d58832419a2752fb4d6506cd761ba6fbb65e6cd8bd56f588
MD5 1449b51c57b60a0ea6c55d31732c2423
SHA1 720a176f0f2fb5eaf6ca0547750950634da2cde7
SHA512 74e5baee1a303156e2cef6c4adafa8869978613b005c387900e87ae0a8b0bdff2de2a6d2a296f9860a5da0741e2207d21d84d02ce6750e706619acfcf26b322d
SSDEEP 192:XON86hZaQmiUyRKic/+jVLjzor2YEXxEUmm5cOqYrqAU6:XON86qZiu+x82YEX2D9eU6
TLSH
T1DC12E9366868AC674DD2AA45F48732235FE55117EA897FC4D6EC2B1C00DE6AC234A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7b04151-7c03-481d-9dd2-950c932f1b7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b7b04151-7c03-481d-9dd2-950c932f1b7c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04b8032d1f4424ca52e5a4158dbdcc0290ab8c411c7a60a216f86323fa57cc75
MD5 c4c5d3dd2bb8f600c215c19144598a4f
SHA1 58bf1fecf2556e9a15f7ce8570cc8ed4779760bf
SHA512 ec5a52eac1a113d25bfea7bacee1a7e1f9e22f419ee0b80b2b3580de6cde701828063eddbb0f24dfa1745e45f7ac2f15a568cc42a3b6911b28df409c11a78a5a
TLSH
T1EA41F658BAF91148B3777E5AAFF6A46D44BFB8772E0B915E10110D4E0A63A40D871B33
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download