hxxps://www[.]bookawk[.]com/register/email_verification[.]php?action=new&activation_code=2c4fb8b4c7ff789e615ef7630f621949

Analysis

user interaction
yes
max time kernel
689s
max time network
681s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 03:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.bookawk.com/register/email_verification.php?action=new&activation_code=2c4fb8b4c7ff789e615ef7630f621949
Sample260724-d7h58ssalg

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: 758681729565rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com
phishing
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1488	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293379490618831"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{39082264-5162-4F3E-A823-85A7AD529768}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4684	msedge.exe
4684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe
1864	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1864 wrote to memory of 3824	1864	msedge.exe	87
PID 1864 wrote to memory of 1488	1864	msedge.exe	89
PID 1864 wrote to memory of 3832	1864	msedge.exe	90
PID 1864 wrote to memory of 3832	1864	msedge.exe	90
PID 1864 wrote to memory of 3832	1864	msedge.exe	90
PID 1864 wrote to memory of 4372	1864	msedge.exe	91
PID 1864 wrote to memory of 4372	1864	msedge.exe	91
PID 1864 wrote to memory of 784	1864	msedge.exe	92
PID 1864 wrote to memory of 784	1864	msedge.exe	92
PID 1864 wrote to memory of 784	1864	msedge.exe	92
PID 1864 wrote to memory of 2384	1864	msedge.exe	93
PID 1864 wrote to memory of 2384	1864	msedge.exe	93
PID 1864 wrote to memory of 2384	1864	msedge.exe	93
PID 1864 wrote to memory of 1704	1864	msedge.exe	94
PID 1864 wrote to memory of 1176	1864	msedge.exe	95
PID 1864 wrote to memory of 1704	1864	msedge.exe	94
PID 1864 wrote to memory of 1704	1864	msedge.exe	94
PID 1864 wrote to memory of 1176	1864	msedge.exe	95
PID 1864 wrote to memory of 1176	1864	msedge.exe	95
PID 1864 wrote to memory of 332	1864	msedge.exe	98
PID 1864 wrote to memory of 4832	1864	msedge.exe	99
PID 1864 wrote to memory of 332	1864	msedge.exe	98
PID 1864 wrote to memory of 4832	1864	msedge.exe	99
PID 1864 wrote to memory of 4856	1864	msedge.exe	101
PID 1864 wrote to memory of 1872	1864	msedge.exe	113
PID 1864 wrote to memory of 5028	1864	msedge.exe	114
PID 1864 wrote to memory of 1220	1864	msedge.exe	115
PID 1864 wrote to memory of 4324	1864	msedge.exe	117
PID 1864 wrote to memory of 4324	1864	msedge.exe	117
PID 1864 wrote to memory of 4684	1864	msedge.exe	118
PID 1864 wrote to memory of 1736	1864	msedge.exe	119
PID 1864 wrote to memory of 1736	1864	msedge.exe	119
PID 1864 wrote to memory of 2304	1864	msedge.exe	120
PID 1864 wrote to memory of 2304	1864	msedge.exe	120
PID 1864 wrote to memory of 3360	1864	msedge.exe	121
PID 1864 wrote to memory of 3360	1864	msedge.exe	121
PID 1864 wrote to memory of 3108	1864	msedge.exe	122
PID 1864 wrote to memory of 3108	1864	msedge.exe	122
PID 1864 wrote to memory of 1204	1864	msedge.exe	123
PID 1864 wrote to memory of 1204	1864	msedge.exe	123
PID 1864 wrote to memory of 1204	1864	msedge.exe	123
PID 1864 wrote to memory of 3616	1864	msedge.exe	125
PID 1864 wrote to memory of 3616	1864	msedge.exe	125
PID 1864 wrote to memory of 3616	1864	msedge.exe	125
PID 1864 wrote to memory of 4620	1864	msedge.exe	126
PID 1864 wrote to memory of 4620	1864	msedge.exe	126
PID 1864 wrote to memory of 4620	1864	msedge.exe	126
PID 1864 wrote to memory of 3448	1864	msedge.exe	127
PID 1864 wrote to memory of 3448	1864	msedge.exe	127
PID 1864 wrote to memory of 3448	1864	msedge.exe	127
PID 1864 wrote to memory of 4408	1864	msedge.exe	128
PID 1864 wrote to memory of 4408	1864	msedge.exe	128
PID 1864 wrote to memory of 4408	1864	msedge.exe	128
PID 1864 wrote to memory of 2800	1864	msedge.exe	129
PID 1864 wrote to memory of 2800	1864	msedge.exe	129
PID 1864 wrote to memory of 2800	1864	msedge.exe	129
PID 1864 wrote to memory of 4476	1864	msedge.exe	130
PID 1864 wrote to memory of 4476	1864	msedge.exe	130
PID 1864 wrote to memory of 4476	1864	msedge.exe	131
PID 1864 wrote to memory of 4476	1864	msedge.exe	131
PID 1864 wrote to memory of 4892	1864	msedge.exe	132
PID 1864 wrote to memory of 4892	1864	msedge.exe	132
PID 1864 wrote to memory of 3036	1864	msedge.exe	139
PID 1864 wrote to memory of 3036	1864	msedge.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.bookawk.com/register/email_verification.php?action=new&activation_code=2c4fb8b4c7ff789e615ef7630f621949
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff81ad6c188,0x7ff81ad6c194,0x7ff81ad6c1a0
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,13535473387068206029,16158216907686342270,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,17086984966559915726,17574001163104878798,262144 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,14351004873172637506,9563044204213923013,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,9395457888759590963,967340914025199154,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,10004111072469284332,17872759358740511068,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,3334091558664897118,14770910606670316090,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,12777618330325244353,3819571191628028038,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,12260191738074537291,2206469809586336371,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,4531068072392283869,11508407831740322566,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,11676274625252435558,310430333574263446,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,11676274625252435558,310430333574263446,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,13250760207257115003,14444580447306143275,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,16456062225572548122,8576755808966565382,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,1027417742613291759,3268533970697220874,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,6110097443397735610,14130691832929550288,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6440,i,9245896909013211221,11836138948014716992,262144 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,1412287354982303711,3042118102682816186,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3988,i,5805953992096394940,7964429820627049764,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3320,i,14375690589135240764,13113196551534292438,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4000,i,3374894577769235961,3105957998588173431,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5176,i,1337530214529765128,17044590614955757469,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6828,i,8521312297083235507,5009141413414472761,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7064,i,16808266561790801891,6624925504582698594,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6796,i,13302814560629074736,4063894764214185836,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6700,i,6313670687842203058,5921201005119094196,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7176,i,4085951887586382296,721509269511558436,2097152 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7408,i,6488728525671503124,10339026596083333069,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=7416 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,8265335141013214452,17045397996187961355,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7512,i,7107741014494887387,16468825609706792568,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,11987029600582953952,5366556302522495925,524288 --field-trial-handle=2304,i,16759259937896035773,3682223618593270493,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:3036

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 e95e9ad4da3e5c7fb6464b89104b7b48dbd36fb42fc2ab63535fd5d49e26cbb8
MD5 73feada67664eb543a8b8547c74dcfb9
SHA1 839f8f43af384a63b190a1373f71fcd3ed6b2e74
SHA512 79d074da81778311f5505cd7228bbef485ba040082dafaa3d361995ee62e709352dbf707502ecf0db3867b080bff098181db1f8c6b19fe3259ab4b53ae8ab82c
SSDEEP 192:4jNGrG68GiGmGmGmGmGmGLGLGLGLGLGLGLGLGLGLGLGLGLGLGwGwGwGwGwGwGwGV:4jkq6Pl55555KKKKKKKKKKKKKKjjjjjd
TLSH
T1C7E1265386E4C3EADB1650CA4DA0535C50B23B0DEBECDA08578CDDED318F49AE9B16E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 54be5c0790e7567f0b9e78132df2bf9097a7c61e14a1bef5988a53d58da5fdc7
MD5 38fc4842ca8f60c59933423ac6b3552d
SHA1 79a6f8a106713f8d772a68b25d45ab7fc434d6fe
SHA512 e1d1a158cc515a3e99a4259ae68c004170aca0a13a6965ff083ba9bdf8232e93c7fb208e50531f3bf09305352d681f17bce614edeb75fac636a01916dc136fe6
SSDEEP 192:djMo6NWWWWWWWWWWWWWWWWWWWrFP4KDDDDDMlLO:djMo6NWWWWWWWWWWWWWWWWWWWrFP4KD9
TLSH
T106E112C38294C29ADF0910DA4DA4525C41B0370DFBDCDA18579CDEEE318E8AFF9B56A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 67KB
SHA256 083e4b904aedf73603201d5b3c7baa27df72db55b3146d3845f0be8dfb9a1fce
MD5 7834c4d0d73c0c39adea3e576be1f3e4
SHA1 d960d84cc5e517feefdc6b23d99ae406847e603d
SHA512 fc336a69e9e3a13adef75e294688845ed03efe4779d901f67285bb91639e9cecca6bbb06f4e45261bec3f8577c4bb8ae803ad9cf70aef085de92b4fd591d1bdd
SSDEEP 1536:uxppd9LrL8qqSlSdwavN8Un5m98oODLLDHocIXhLA1Xbodcwz4RnF:KpL9LreS8TpA8p/wklb29z45F
TLSH
T1DD6301195338F172A5C066C64C330D91B53DFFA636DC63DD490709B5888A8A93FB39A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 402KB
SHA256 aa6cc85e6422918c8f28615f5a6229fd95551db4866a953e94db3ede85e74157
MD5 1d14a54ebcbc8ab643de128a275df7ac
SHA1 238af131932ae71c9b5904dbf79312969b686d89
SHA512 7c7ebf7520304f1184b033b4d353a4ba4b13f97a9b25e2ec01bf603581e68d961bd62ac512b523203f21d45a3a10aaf570398cb723ed00dde4b27547a1a1bd3f
SSDEEP 6144:+Hixx+mZCMYrU6Em16QfXqI1DRDextUnQngWg/4dHyA6928F6iuHHLlXcJEOXkeA:TpCMbfkz/Hi/eD/2SAq3ELYvXVGF9
TLSH
T1F79423BDB31924CEB2A5E3388E75CF5A050C7E709A980E2FE7EA5445BC5B790704E358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d6
Size 373KB
SHA256 00dcd72487112e44ba2487e5eb363a98d65f14344edef5293c8e9dd52850ee58
MD5 ad6388a08d35f6d67db1213404b7f81d
SHA1 55cb415cfa760fb4beda8422d7c635cd4caf1915
SHA512 1b92070f13725fbe34b18dce86e09ee76536ef7dd7190f2c11d54f71b91acdfd40f03c8972a85099b988fae24eaec038be967cbe7b57783340140481b9362248
SSDEEP 6144:qm2dRYZtgXkt4w9410UKjgGHjMaP8RVkqSRhP58OU5R67u4nORWO7lQ8E9:C8tg599lGDBskZP58B67znOwGQ8E9
TLSH
T1A084232C983F6900BB0252741FD6C76E4FF40988A2C0D4C28254A193F9B7EA7F5A7779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 ead8d74359325be3337345d27a3b369e98b44a03d65b306112241ace271e3c2c
MD5 e3b4d6e19d13a3ececf463edc26a2351
SHA1 b194410c8bcfa73994cc0e975d8d4356bf03ff16
SHA512 c7ab9213fc545bb0235bd4e40d513f8afbc4608f816199a344d2dbd1040764ebb11b729ad87fcebd7560a9800e3c46e5cf14529fc9ec1252086818962ac832dd
SSDEEP 192:vM6ArjDATtAa3Hra9iwqZF0/9hfJ+TUihOgw77FpNN:Oj86a7a9NqIDB+TUifw1Z
TLSH
T1AB12C6B434E9A77ECB450F3680D869A0323175F2FD6B0F8F9FD916BAA4273E008151A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 4a6fc3d964f2d691042b2c03ffca031aefc56fdb03668ec5db28c4d0940bcf36
MD5 6b6e9c1719578b3ce766768a9ec19508
SHA1 026dbb89d16325767d91b099abbdfb231b1022fe
SHA512 8d54f1ea5067f4f13e2c0e75336a7ef26af62b89abc2d0c21b7e2fcb0152fbab534d694dcedde3f33f9fe9b3cef2ed351941ebd4fb356ca53f3d3f9c4540c5f7
SSDEEP 192:pMMAr7DATtAadpta9iWqZF0cnhfJHITOihlQgV17mzQ:6786a9a9XqPhBHITOi7V4M
TLSH
T17022D9B434E9A77ECB450F3680D869A0333175F2FD6B0F9F9FC91ABAA4167E008141A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bc0f8a71e3ed31eb05431768be2ab8154c9be583e78379ca975b2a92e25d2f1c
MD5 4b4b7c22e2e3108c56724076b3575da2
SHA1 f395271faec7b06677dad4a82dcabd79692a4400
SHA512 ccda5c13a4b47486a2e8669c7c0a70147718c69451ee980c72bf554b61b6ca222157880ab2bad9c4f7487f88e05b7c65157ceced49f81b4005d8f8257c69f8ba
TLSH
T1BE712AB4112E26ACE3921F31C0DE42913771AAFAFD3B5F97DC9260FED9017504829038
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 adb4fe8a719ba80a3a242862fa94c71750ca1bba932593f5a24d24df83513b85
MD5 af0bc9597389a6e40d609696bdbb450b
SHA1 5efe24c43b70bb6dd9a8bcd0ed9b1cd713d67163
SHA512 4f0ffa5ef2c607aaaaa0bf7419e01a52ae7ed1527c6d021d6e9019a53602b0ef17a2e4f2bec61790d79dbeea84b01ea9cfc08dfb72595409ab4c446f3137bd41
TLSH
T17C4168F383E5866DD94156F46F146E1FCEAD091583183C2989F8AE1B97E2871E101A8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 3de1113952d7c480ce29d8947b539e9f04c4282fe17d9c5a52071ad890cf8849
MD5 b0458f84c68f1030feb1cbe7404220cf
SHA1 78dc34d53e0d993df94e458a1a073b91d45bc6b5
SHA512 7ea071647cd7b7e826f97219cf00fd70f5dd83bee000c15aa98ead663383f8b88c08b623f27eec9139af68734b41e11063099f2d1d147cefd64e8e1bf6abdef6
SSDEEP 192:DZjd7j64CubgQv92FPj1WtOkq5zc57g+qsKhVN12fuqFtyFJ3Gjtkj45Lf3tn4x:DZjd7j64CubgQv92FPj1WtOkq5zc57gR
TLSH
T1BC22A0F7C3D4862DC81162F05F183E1BCE6D096453783D6A89E8EF8767E2472E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 e917588b387d8c2904bfa0f17af3a26bbeab71293195c28beb9e6c4a3afbdc3a
MD5 c14cd5631d3f1e8215e3a50f214baf2a
SHA1 fa46489c69b4e60f7feb047fc3bc80237a03a453
SHA512 003b201ccd7044071755335c6e2d52a120d4d474e1da750f32aa5bf73dd5bfd827664b1eaa7d52fd16082eea53d1201cca2b43bc98216dcd8b5d8a150ae21a03
SSDEEP 192:DSMd7j64CubgQv92FPjWWzOkq5zc57g+qsskhVN12fuqFtyFJ3GjtLmBGj4ht:DSMd7j64CubgQv92FPjWWzOkq5zc57g0
TLSH
T19022A0F7C3D4862DC81162F05F183E1BCE6D095453783D6A89E8EF8B63E6472E251A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 ad8dec72f8269e11e806f520b403a7932faab3964aec77e645caa0f81cc67c4b
MD5 ad4fc0e939f35dc38960605eb311c0b2
SHA1 765fd5697adc60d6c523ec0bcb27cbf3ae93a180
SHA512 bd5069963364c854d4162e574a2e935d2e75e9853978fac23dc0fa7e03f663342bf67ffdfba252854dc065d6638f19f7937924a86430826b9c30e96c0966849e
TLSH
T1C7D0A973174070B5A5B92A81416EF8CEC32621284962DDD422E4A89A0A3A86C4A0B18A
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5c51e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5c51e0.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 25addb9a099049f3507b18500c8b5b7ccc0e57bd0b85f9d67e703ccd21b19653
MD5 afb29b51fcf2269279f01b287f7e0ff6
SHA1 10218b72ee483c37326a982a27ff35307be5ef23
SHA512 a3716e7ee21c914dc8d2284557d9aade10f9f5dedc67983080f2d2493977e652868c0a3692ca3037292e8f66a3ce8f39b8347f2de9cd34055bd7a1928ca027b1
SSDEEP 192:sxZZR5yM/jK1Ml8Mkn/fHsAx6VhIdpX6GHW6+WNkSC/Yv7hC6sIgrJ:sxZZnMn/fHsAxrXRHbQ/zp9
TLSH
T1E842D7566A349977CCDBD209BA45BF53D6F50472E2900E48ADFCDA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 80bec199a99f88aed340d5224d67ef8a61cce3d2e2d64666831fc4677563a10d
MD5 b800b51a4b58245c29ff84d220fdb56c
SHA1 ed8a383995109fbb68c70e304379d0c3379f50dc
SHA512 0f7d7fb11e95492ee0fe8192e132a07feb8584ee60223e52c37e1854b5541c89592eb80ae8e1e5bbe062ae736d2fe500df7635d0b918e631df5980cc9db0bde6
SSDEEP 384:sxZpnCCqMm1n/fHsxjGRRWeAHbDrf/Apt/WLS:sBCNMm1n/fOjGRBAHbfArWLS
TLSH
T10A920953A9208977CCD7C219F925BF56E6F504A2DE514E4CAAFCDA0C00EA6ED231385F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3812ce27fcdd378ddc7d749ed4a1990c5ad5e84f63e3fc7cedb6bd64d04bb268
MD5 8eb1b3914669749e072eeb64eff3cfcb
SHA1 2a4701ec20162cb170982b473aba75e728cbe4fb
SHA512 416e29436ec95bf330c9abefaf03ee490b72438a5791b8353782fca67464868bd9a3be227970b4ba893089e7db7742fcaea3fc4a3602108976eb26ea3b67db77
SSDEEP 192:sxZZR5yM/jK1Ml8UQ/kn/fHsxj6VhIdpt6GHW6+WNkSC/YvUwJ6sIg5OJ:sxZZnqsn/fHsxjrtRHbQ/Up0
TLSH
T12A52D656AA345977CCDBD20DBA45BF53E6F50472E2900E44A9FCDA0C00E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 37c61387a2b25bee59c81d8d5fba192f3473397f36bd5c84e241bcbd411b3c3d
MD5 45051b13919685dd2cb49ca164704b30
SHA1 a304f43c03b8a11ccd0e5be614be8850c7111099
SHA512 b2cb9d457c2e9a5b9c1380308d72eba5327626db4c5576b7844b200fa55abb824050648e253e85e5b06eef7966d20a3e13aa4115560b8ded2a4038753239fc46
SSDEEP 384:sxZpnDnqMm1n/fHsxjGRRWsRHbDrf/Apt/WLS:sBDqMm1n/fOjGR7RHbfArWLS
TLSH
T1DD82F953A9208977CCD7C519FD25BF56E6F404A2DA904E4CA9FCDA0C04EAAED221385F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ab782534e3e6643f5f6dfba00b74219a72d00c82b7c38874568ca972ac02d92e
MD5 352aab11b28ef6ba4f8ad2d6353e1035
SHA1 f04400af872ebce6f14c877dbac21b1a0d75b25e
SHA512 210f2e5896f744b4894385586a0c0c9d9d37765e0ec36a05fea1978cd0a8c0cf997f10d3ee85d4c7442a2847f864280e590911a979f91e81956b3bd0711b1444
SSDEEP 768:lVseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppTroXl:lVseJ3xWvhfynu1jaVcL88pg1
TLSH
T1E7D20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487FA880C02C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 a9516f5aa3d5277ac181793312001ea397f6e7f225ae7c4279fafb8861470647
MD5 75c7e719470d43eca3926c7c7bd20e5d
SHA1 042f8cc52cece0877b5b0a037667317071519bb8
SHA512 8a2d37c001bf3d6087d6ef3a177cbfa37d9a08fa203850ef7494f552dad1ab6dbaa253b90d6fed7e087bfae3378edbd33afc457781f62477e6202f404d293b5f
TLSH
T190A0022413D03005C052A2F3ABD642A132104ED18601136942D2108CDCD0745574120C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 7727e45e7dd6b1027adfbc8f7f2169aaa7f454c20f3614eaf0041917b322b53d
MD5 6434fe56b981afecd5f17c37524ffffc
SHA1 77ccdb6f3c50ee536c9f597867b6f46b52d4d8cf
SHA512 82e5992ee2588b2966d99beea92621c3982fb8fb9f476108019e50c06675fd1392004417d9e28be78f4a1ddd0dda232adbcc635a5f82866d978be08849f290e1
TLSH
T14EA00230CB8040C5C42256B1295707493319D8A42D15230B44910145DE604805D4101C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 2KB
SHA256 8f1df21380573e30162e0e3bfba6cad6b6ce50901f3c455658e46eb54e7c7bed
MD5 e01fe69f31982d565209462382dc799a
SHA1 d6115a75ff59d4ec8bd215e11e673df1e761e534
SHA512 f3a196b098c306dfaf93319d475ec1a9d704604815348b03c62fe9b3f33a57db55c07bef07f2cd3da8bb764c4862e097403236d0893cc1d42457a21eb3330723
TLSH
T1E751B84D5D4B7F66CDAC15F324B718C2373124FE8A884B07A59CE97468C32252D69619
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 624B
SHA256 f2755d1b8617ceb73f79b9ee957546e0682c93ce0da55b490a8978c81966c49d
MD5 2ac7631fdd9d087f4c64b901263e5250
SHA1 a0dde016d64d87f5283a286bce68896c0263116b
SHA512 5b3c94e5aee959446e526d2108805cff390446f12be6a058c113c33bdd05be2c8a5df23c2676fdf31e364035b3a52303c298415e4dfa22d8211f665dc26fb74e
TLSH
T106F0DC144E800C2AEA2845772AF6A0E0A3708DECB361997B286C5C6E2D213CCB4563EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5bfcfa.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe5bfcfa.TMP
Size 624B
SHA256 c5d737cef31d0a08ac06551c7445097b32d3f6293ffc72c14c4dbed925b74a54
MD5 359ac32fc312838f45db0cceb7b14979
SHA1 c11f7fdaebd3c8c8f1350933255bcbf539fc0bc8
SHA512 6469281d85ba94b2caa11f90fe316de650fd019646afc653be6fc99e872fdd16e694ba91cf96c8fb13cf46692f7ee5787ed019ab20bd8170ef55cd712b85a4a0
TLSH
T197F0A3554BD10D11D46009BB2EEA94A8F3308D507632FAE7346C683F6C717C959422DC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 2fc8ced1931f9d1ca60efb8718e83950809d8fae6c6811af018ee049d47b1e6b
MD5 f7189dd521a5e3d81e74454ddd1aed64
SHA1 6598d5bf425f0894f3bd582c64cd7ddfbf9b24c8
SHA512 0d95ac42387c27f6fbde8c4ba55d9e2096d3b4b8015a3e45c86c031672eff5347fcd68fef5c90c171ae52073aa855178783916ec995b3921571eee7205baa49f
TLSH
T121E0C0B62DD72414BDAFD3D22030C090060A749CE901FC0E542BF6C3107231530DBC35
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 d111794a84084044b66e2e44c2d99b8356a93d0e15a26cd22fe709b1d21d3dc6
MD5 8550c5c2debcf4287f24f20bc2e28b85
SHA1 8b2906bdeae2390f3efa900d6a3af686f835b7fb
SHA512 bc8893ded1e8b96f532169093e0baa7f637a1578b28cd6e0a41eddf579ced3cf9693f500376bc036a1723360ab9da3ca08acc1d88a942bddeec1eaeb88a3d6cc
TLSH
T18CB0222080AFE083C00A83B0F0CE808E32200CA0230A28A288B8E0B88A3230B20E2300
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c7b04.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c7b04.TMP
Size 48B
SHA256 8a5118691111dba038981236782b7a87f4449759136b0415ab752bbd5c560c78
MD5 ec9cc4736496aab011ab75fda6c88f09
SHA1 e2ec10dd9fca195a89005d7fb445b70a78519fc1
SHA512 dc9de7a715119e43611378be0874897b670b69c761e8e58cec910b6aa25e9843ebddd075bf12656aed89f7b1fb08c6865ed3dab1d4f4f05a0d1ecb4642bd3038
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 5a81c02989879117bc44d76afc9cd1cd77ff4ce39599cc7dddaef92226d822ea
MD5 36b9ee7484d946412baea25dda176106
SHA1 0ac056c9c407d094e17b666bb7a216f19c8643a9
SHA512 8af4afba536e7227942008ff61c69cea77ed9ac58f389ce0fb1f981c243cb89faf96d1bbee78eb5ec425f2f9b0f38f743a7576be04e839bca712a97ce5abb7be
SSDEEP 48:KYHIhKggkXyR8IHKZW0DypKIPKrCYfytJIZKSc0Z:KYH+KggmC8gKZWiKK0KrCq2JyKScC
TLSH
T166C12446303F42022C7E2858B2A79E368E4271633454A5FFBBB900911E67E255EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 abf9fb777a66640462b83a7821b67e318b612827f6230399362a598b0cf11ed9
MD5 2c429ec7114898c2788ae3946723f383
SHA1 8a342a5348428823036db03c5e0df9f139947b3c
SHA512 76818e7c1cbcfa867a7ef9c47e5c374e3eedb100331db7c121f47e9b5cbf8431df68558a20c9bd8c163941e72acb7cedb12b5e0e9bf3f33e3107c34cea6dc267
SSDEEP 192:ucLsNKnQZauQM7FHHQmiU1LEz4MTZS+FdLK7Fd3E18z1pqpUMZ:dsNKns7dpy8GdwdUiAUMZ
TLSH
T1E5422B316C749C2B59E3A585F44B37035FB4917BDAC52B90AAEDAF0C01DA6AC130B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 46cd7e564b71a4abec96d6781a34fb1431b26d70eb5a67b4556c98f28c8b877f
MD5 7302fcdf15871e546c287562e0809cc5
SHA1 5265b3b2ebccf37220d6580c778fc8fac3579ed0
SHA512 7c92612c1adaeb3c1f71514d0b1ccff205be9e48a5280cb7b77e8b6e46d6ab0b5e4b0b477138370a16c7921ee6e3733f7d2a012c398d316a4c7c2c6a087303a2
SSDEEP 192:uAZm+xasuheOwQxMlCzsNKTQZauQM7FHHQmiU1eEz4MTZS+FdLK7Fd3EH8v1pqpL:PqZcIrzsNKTs7dpt8GdwdUQAFR
TLSH
T1ACA208F158E34836D4AEA347A77E2E031EBCC067B6845A5077E8AB0CCC9657FC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c7d391ca44a634c6c8a3786cd0253292b90dceda7ae410eee5d8772018ba0187
MD5 b4deb23ddd9eab3fa7e41fdfcadee75e
SHA1 df2c0be0232cdf3ef3487eb265b9ce63f3bc3eee
SHA512 3d671c920c20c00346dbde91747c9f7d922aeac85c4f6a59731d532a06c9e07979f5a1dc6635a32dbc805569a51cec9ccd79eee07c5c3d6abf3eb8db16aacd90
SSDEEP 192:lONnZ6vMtPQmiUyIpThTZS+FdLF847pSU/u:lONnZ6UtRdTFdJQU/u
TLSH
T162020735AC786C6B9AB3AD45F48A37175FA4507FEAD01B50EAE86F1C00D765C1303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 69206e42d896fbe02ac6db57ebc4e3cd6c150723e680c65b91115f8a42131ece
MD5 50dc3fa284182cc260af99f94071ea58
SHA1 b56ae6313f70b2751b2d4ffe492d7075786b3ed8
SHA512 4b661e4df91488f71ddbbe6d318b32de7854e36482138eb06c3918217ff279cf9b142852013f58d481a37ef0ad5605640caebbe2886e53c9db3a5379e0f2439c
SSDEEP 192:u5m+xasuheOwQxMGsNKTQZauQM7FHHQmiU1LEz4MTZS+FdLK7Fd3E18z1pqpFjYy:7ZcIhsNKTs7dpy8GdwdUiAFR
TLSH
T11E625C726C745C3B99E2B185F48A36035FF89077DBC45B50A6EDEB0D01DA6A81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 5e21f1eba479e6ea228e06be00ce568c3acfedbfdf0f51096991832eb2efc390
MD5 27d7df7764c252cbbebe7a4f05e01907
SHA1 3052e138e41866969110f18a889ccac2183e343a
SHA512 76e88bfeb2d505ea64f2c99ce2072bba7d64094a783555956d4b1bf9f671906de4e6073d15da7dbb41c88c0ca034eef66674d7957aba5f30f1e11e53c08b33e7
SSDEEP 192:UONr6vM5PQmiUyQpshTZS+FdLK7Fd3E280IpqpU/u:UONr6U5RvsFdwdUvAU/u
TLSH
T140120932ACB45C2BAEA3B485F48A36075EB4817BDAC56B50AADC7F1C01DE66C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cff8330672557577deb097242e57e1a6011846c8d1320ef9f2184405378df025
MD5 bdb719d07b23ec352b6c8bdd63212f3f
SHA1 4e1ddcfabf7282e62599da49bddd1558bc907b29
SHA512 0709707683fb9927d08edf469e6e8ff523f2beecfa667176728e158f9a142cb2d6f7e0acc3af7acc72800862544cc1a33db483e519d2eb5b471bb9dcf8f16e52
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5dd0d2a85939308bf0cad1a5aa03f3bb625793440cea91978b42a0b49f1bbfc8
MD5 a91fcf4868113c631db1545c7a374bb1
SHA1 ca5b52c9f40005989e3a4bfa129ee8c698d32046
SHA512 aeab7f7b3c6b2410874c3b2a6c93c8c4cacb7161ebe0bf7246cae97fa2b7988bc338ed22726a644bc3778d1021c9e46b3d84db37b66efe7334820d725610c3b5
TLSH
T1CEE00203974401EEC075033000871B302AE380B1027202054D24426C2C233552F21BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5c2ff1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c2ff1.TMP
Size 392B
SHA256 9adce8abebd196a3bc5b5455e2e495d6ab40d01d2e90730dca949da044f89e35
MD5 87325b3f0a51f6238fbc7f1a2a05b4e8
SHA1 36bd6a433b355b2a1ea5e98ffc2a1f74e938963a
SHA512 42fd94df9bb30710e1fad0a365d0a21526d36f136616ffe397472cefbbcf48fec37c0895f4cf62281f44cfe296ddee632770f737e85a3e0791cee6f9ce38f95d
MD5 SHA1 SHA512

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 7cc27d29d72553597d9bd328534d057ee7f5572c94cfeb6b82628bd2686da1ee
MD5 0b5bf9555d7718d30b81cdfa9a987082
SHA1 97ac7f9668abfb133b5e37f0daaed2fa4245ba7f
SHA512 08a2e5fd7454df7a4b472a975f7b75ab9b59ae4bb0a63647b337197f7179a1b782c22ddf71bf92c74da7bceebd10eaaa238e8f79a6579a7e02479bec9ed1a62c
TLSH
T1B8513C75799247FA9D652A7A9B00CBA57E98CDA41AB70080C32215A5858B1B71C033FE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 118f93a0dd5ec72e473dcb61fde96e3ac45867814672395623a5532610bb760c
MD5 ad9d45e588adaa8d96b2fed59ade4924
SHA1 5afc0568ea4d52f28c3cc519caa817eaa45f3f8b
SHA512 48e31cd1704b02fb59a569234332ffa6e89c4149c741791ed1f7b4aa8fb2298fad337e0b96b517c4f20083a459f6b4f473a7be51e3f0a4026adeb7f3606d0eb0
TLSH
T1EA41185CA6FD1114B3B76E5A9BF6A96E447F79772F0A959D00110D4F0633A40C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download