hxxps://www[.]insideedition[.]com/media/videos/VUSSLHXSIB8

Analysis

user interaction
yes
max time kernel
899s
max time network
898s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 01:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.insideedition.com/media/videos/VUSSLHXSIB8
Sample260728-cbe82awblb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4496	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296772660239283"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{4862FE47-546D-4441-8681-68A6E10FB84E}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 3504 wrote to memory of 4512	3504	msedge.exe	84
PID 3504 wrote to memory of 4496	3504	msedge.exe	85
PID 3504 wrote to memory of 1204	3504	msedge.exe	86
PID 3504 wrote to memory of 704	3504	msedge.exe	87
PID 3504 wrote to memory of 1204	3504	msedge.exe	86
PID 3504 wrote to memory of 1204	3504	msedge.exe	86
PID 3504 wrote to memory of 704	3504	msedge.exe	87
PID 3504 wrote to memory of 1208	3504	msedge.exe	89
PID 3504 wrote to memory of 1208	3504	msedge.exe	89
PID 3504 wrote to memory of 1208	3504	msedge.exe	89
PID 3504 wrote to memory of 2300	3504	msedge.exe	90
PID 3504 wrote to memory of 2300	3504	msedge.exe	90
PID 3504 wrote to memory of 2300	3504	msedge.exe	90
PID 3504 wrote to memory of 408	3504	msedge.exe	91
PID 3504 wrote to memory of 4872	3504	msedge.exe	92
PID 3504 wrote to memory of 408	3504	msedge.exe	91
PID 3504 wrote to memory of 408	3504	msedge.exe	91
PID 3504 wrote to memory of 4872	3504	msedge.exe	92
PID 3504 wrote to memory of 4872	3504	msedge.exe	92
PID 3504 wrote to memory of 1356	3504	msedge.exe	96
PID 3504 wrote to memory of 1312	3504	msedge.exe	97
PID 3504 wrote to memory of 1356	3504	msedge.exe	96
PID 3504 wrote to memory of 1312	3504	msedge.exe	97
PID 3504 wrote to memory of 4868	3504	msedge.exe	100
PID 3504 wrote to memory of 4868	3504	msedge.exe	100
PID 3504 wrote to memory of 4868	3504	msedge.exe	100
PID 3504 wrote to memory of 2076	3504	msedge.exe	102
PID 3504 wrote to memory of 4620	3504	msedge.exe	104
PID 3504 wrote to memory of 4620	3504	msedge.exe	104
PID 3504 wrote to memory of 4620	3504	msedge.exe	104
PID 3504 wrote to memory of 3904	3504	msedge.exe	114
PID 3504 wrote to memory of 3904	3504	msedge.exe	114
PID 3504 wrote to memory of 2848	3504	msedge.exe	117
PID 3504 wrote to memory of 1540	3504	msedge.exe	118
PID 3504 wrote to memory of 1736	3504	msedge.exe	119
PID 3504 wrote to memory of 5604	3504	msedge.exe	122
PID 3504 wrote to memory of 5604	3504	msedge.exe	122
PID 3504 wrote to memory of 4856	3504	msedge.exe	124
PID 3504 wrote to memory of 5356	3504	msedge.exe	125
PID 3504 wrote to memory of 5356	3504	msedge.exe	125
PID 3504 wrote to memory of 5368	3504	msedge.exe	126
PID 3504 wrote to memory of 5368	3504	msedge.exe	126
PID 3504 wrote to memory of 4156	3504	msedge.exe	127
PID 3504 wrote to memory of 4156	3504	msedge.exe	127
PID 3504 wrote to memory of 5900	3504	msedge.exe	128
PID 3504 wrote to memory of 5900	3504	msedge.exe	128
PID 3504 wrote to memory of 4424	3504	msedge.exe	129
PID 3504 wrote to memory of 4424	3504	msedge.exe	129
PID 3504 wrote to memory of 3324	3504	msedge.exe	130
PID 3504 wrote to memory of 3324	3504	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.insideedition.com/media/videos/VUSSLHXSIB8
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe3965c188,0x7ffe3965c194,0x7ffe3965c1a0
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,17110464595528003033,5004337856102858692,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,13462615951352322662,10920149930594219441,262144 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,16825216739304811103,14291811959835134119,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,611311363835334107,13281549900676850344,2097152 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,17946294531570480464,9482231045696344874,2097152 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,538011164852259781,840179724657441402,2097152 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,15943422869758106784,4795172518258497689,2097152 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,5179441380414341118,7451155958239556484,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,645729068053734264,3777560873553500856,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5632,i,15197984036835185546,13227929279206863424,2097152 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,17025837888164110436,14052945037090389985,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,17025837888164110436,14052945037090389985,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6428,i,416745551460812891,5597918908874057230,2097152 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,5572033960109787559,16567431214067770284,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,17388044338680362711,14300748446504335920,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,13689981540600378781,3522753229256164138,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,17148466527919795533,7361463985289718476,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,6473223944248184437,15936493424618968201,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6368,i,13279004981103340331,11708810836502247098,262144 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,3898829851443153795,7818335157644673052,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,5987376502381456817,15847262897525821414,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6880,i,11887018299087766302,8217985577596561054,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,17211406237158007549,2264094189465621044,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7152,i,10590221346112132521,575361282830824704,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7228,i,4612391653864312853,6319794372285459551,524288 --field-trial-handle=2344,i,16541689372499910146,9267938347223031685,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
  2⤵
  PID:3324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8fea892211b23c2c2b325c5bfdc9519eede8b313fdc88dc3951325b930e33861
MD5 ce876a6d89301977e755a97a13d50321
SHA1 da4b3e4f3c15872dc8fb0730570c2ebe7c27bb51
SHA512 253df2df84e21b570dba8dca27fc8a015444a3d7055bcc765e3d27c56196cc8918e4a10544a42b368a04579cd6b0902d583ac8aebab9b2938322b64b07eaba06
TLSH
T1E9E026D626C8C22F9317A6878668C30CC6817A0E96C8690A170C889C3181680A3A2D98
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 e74cbfe343dd0fadbbcf5abafeca9fee73b36371d74a36307d67ecd6715fe535
MD5 fcd64a014842908d48a7a824171309bc
SHA1 b56e6bd3e26d39d03bc6e0ad87d89b9f3b9f5709
SHA512 2b183de902dd5942c50bf49d44c21be41290cd05a3e7c77f4f178f8329098c07f7313aef23098fad16946aeba2c989338f6050ae6df10d00f915002b3704bfa9
TLSH
T13DE0DF5623C0E1BB02A39E5BCA58535DCC936905E68CDADA720CBAACA841005DBB0AD0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 d5a80f087bb107eab4d54cdc4304884445eadde49d9cfda180dd0daa4dc56b36
MD5 cde6e0e3fe002eac66ac2b507d2baae5
SHA1 6936b2372692e14e6ffa467881b1c2170570ffce
SHA512 7a10904ca9e94515bee4c63c6410990743adfd2bb9f9ad4aa368bd46bddd9e419a19345a55bdd6c5e4d41f46014548bece86e7a5132bd6de5df30e0274f338e5
SSDEEP 96:/MSQrgkUXiw3g6Uy6qF1av9VVatLgJLnjHRpo2ZgoF+e8Re7hMAkG26JgHifYnz+:kgGuafVnFEcE4Zw6
TLSH
T11EA1B6B4818BB1A9EB084F3080DA0D1936301DE9FDFF3FAF4DA424B5863E3A5051E468
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58e172.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e172.TMP
Size 3KB
SHA256 7da3ce692212d88124ae23bf6efa02f482dc0b26844f87790c122e8c3f50602a
MD5 e8819d0312a2c983f5e354eeeaf13eb0
SHA1 42029ed8647b6a3abb5456941ddedc9d1e014fba
SHA512 27c832b1a148585eb9440d8368fc2571eafcf876b31a34b4ee2307491e361630c57b3ac292d9abf5acea93449a5c011f568706354662a07cc01c6473a2094b15
TLSH
T17181E7B4810B35A9EB0C4F3190DA0D5932306AE9FDFF3FAF5D8424B98778355052B468
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 ea70b5c4d3f66a27afca8d6bd583da87847b77aaa8a93c70c20b90e9ab0802f2
MD5 a041bca01124bf635807a1a76838ce9f
SHA1 1bab413ee338257d934c9066522242c9bfbaa2a2
SHA512 3577da1f3b8d655fcf847d68f2a5bd8a9d94c465f81045c4d6f8d7257cca806c7df6c76269aefa3549caa6480c1ffec2731c37d14663301e2f17435b936e8ba4
SSDEEP 192:DkBwBX6BQeBbB6BQeB3BJBpB2ByBTBbBm1BuBPjBPNBnBKBeB2yBzWBP8BXvBPBk:DkGR6+eJo6ed/7EEBZk1khjhNN8UIy0D
TLSH
T1BD2258F3C3E8866EDA0216F16A142F1BFE6E0524636C385AC5DC9F8F97F1821E24154E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 b28171c6cc1ec32b540abe2f51b90e941dc097984823e22b7baa86930cc479fe
MD5 e47f31e9f2eefb17721b6e3aa5c5221b
SHA1 b1d18a711ad9bc972f6a95b70e4d3ac0609f7101
SHA512 81c1887e5b1326cb2bbb84a01e3382b7c0528cec7a97fafa7697af0dbe0848223d7d6db049bdf6cff154622f286a0a87b9ca5eee94700295673439484fdaaae3
SSDEEP 192:DWB3Bm6BeeBxBkBoBZBYBbBRBvBk5BQByBjeBbBUBeBLBXB9B5Bn1BuBPjBPNBny:DWl86AeLGyTiBPt+5iIleVCUFV/Px1kO
TLSH
T1E73289F783A4826EDA0256F07A142F1BFE7E052063AC385AC5DC9B8FD7F1421E24254E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 0237c1af5d841bc45c1b29d4e06c0099a006ca01c660c1a960733ac555c44379
MD5 6e04f9680d48d873637232ef97be6e0b
SHA1 c645677a0d8ac100a048c3a48ee2ce4df2fef20c
SHA512 4cf182b347962c7fc0d5192e262ea4a2f2a7ad9769794e62746141707aa158bb54e9d58d6b68cb147fa3cb1bb138c053ac488aecb6a2244dee46f236ea12f3f9
SSDEEP 192:DWB3Bm6BeeBxBkBoBZBYBbBRBvBk5BQBjeBJBwBeBvB6B9B5BTBXBVBc1BuBPjBR:DWl86AeLGyTiBPt+5ile7GUdI/PpJ/m2
TLSH
T129326AF383A4826EDA0256F07A142F1BFE7E052463AC385AC5DC9B8FD7F1521E24254E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 b1817089d24f165acb11592c6e50162faf8d131792998d750bff10d9642a04c7
MD5 e5c00b56edb6e4e0be5f2941642dcfa2
SHA1 fc741e9720743b8c9b71b764107a85035ed22ded
SHA512 fc7f8cfa6508749222c325ddbdcd7fd80ddd58d921d99173733108455a2f37667306ad5cfff63ce549b5f7c21deae0885d996f09b1874aafc95695b679f8af83
SSDEEP 192:DWB3Bm6BeeBxBkBoBZBYBbBKBRBOBo5BQByBjeBbBUBeBLBL1BuBPjBPNBnBTBGu:DWl86AeLGyTiB0Pwy5iIleVCUFt1khjb
TLSH
T1292279F783A4826EDA1256F07A142F1BFE7E052063AC385AC5DC9B8FD7F1521E24254E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 b8221e645af613a08d29f76697bc7c8754cbe1e5abc256fcc871d8e513d41484
MD5 2399cb953db40f6d7e944f285c311598
SHA1 f8b11d1dafe46a6e600be160233bdc0d1a4a10eb
SHA512 2dcc5a61269c29b5bbb5547c0f325727f60e2bef851dc06b6892f7e1403556fb528f57cc3acee994c2c661f07331c5a46a9f78bcdbc42535222c4a08b2736c48
SSDEEP 192:DWB3Bm6BeeBxBqBpeBkBoBZBYBcBTBbByBOBoB1BuBPjBPNBnBTBGB2yBzKBPhBq:DWl86AeLgXeGyTiKBZEwyB1khjhNNJA9
TLSH
T1C7126AF783A4826EDA1256F07A142F1BFE6E042163AC385AC5DC9F8FD7F1421E24254E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 b7236a4b013d34f1ddbfe15932405b1d7423bd5bf2d02e6e7b166de72af08548
MD5 a856659c8f5e83bbe57c85eeb9bf82e5
SHA1 0a534e5df4943c3ca46f29fa0343ba811bf0e5ad
SHA512 772631a3ab0f6c07ea6ce6c52c938adb7a37f782ef76f6124550a55f8a35b6454504346d6ea727f10a5ee6615d6149ea4356d7d6345d22940a1e1e342e8bd08d
SSDEEP 192:DWB3Bm6BeeBxBkBoBZBYBbBRBvBk5BQBxBjeBbBUBeBLBXB9B5BTBXBt1BuBPjBS:DWl86AeLGyTiBPt+5ijleVCUFV/PpJj/
TLSH
T1D23279F383A4826EDA1256F06A142F1BFE7E052463AC385AC5DC9B8FD7F1521E24254E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 557174f36369a12e6d8368cfb59e51eeaeeba967b57986a17123ac23dc77763d
MD5 3c29322dc38c230fd30e82c74c50e812
SHA1 9dc385aceca72f1a18e4248067a053a756d0b01c
SHA512 d86ba87f7fdef6ae56da6956df41b98f2f90c89ed099927b8b747d8898938914af2063825ae2c963e5ce548c5cf83f8309a193f4849eee647930958454329ef0
SSDEEP 192:DWB3Bm6BeeBxBkBoBZBYBcBTBbByBOBo5BQByBj21BuBPjBPNBnBTBGB2yBzKBPk:DWl86AeLGyTiKBZEwy5iIl21khjhNNJ6
TLSH
T129227BF783A4826EDA0256F07A142F1BFE6E042563AC385AC5DC9F8FD7F1421E24254E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 9acad9e3497cb8f214dd18aa04197f3e07688900828eefb00c9852e92e02f497
MD5 816ea991080877ebce372a3d8a1ca081
SHA1 191068a1bfcce1e13bb1e84c68495e08bff4f91d
SHA512 7233471eb9c3cc1472641e303f3ae60444cab374ebf299ef50559a269019c7db06604f684dd769c1e7cad4dbd9ff48c7991b205599195bcb05d6f2ebeb943361
SSDEEP 192:DkBwBX6BQeBbB6BQeB3BJBpB2Bm1BuBPjBPNBnBKBReB2yBzWBP8BXvBPBRBfB8m:DkGR6+eJo6ed/7Ek1khjhNN8jeIy0h8l
TLSH
T1261258F3C3E8866EDA0216F17A142F1BFE6A0525636C385AC5DC9F8F97F1821E24154E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8b724b786170417fda6020af64d6c6beb87f1231b7322ecb4fd9dbdf1c22527d
MD5 f60c626d6814b827bd4b6e505a18f0f8
SHA1 e0b0d609b9ca3fc2272b70a611f85e4086aaeed4
SHA512 06e8da23959c834de17b776900e190a23aa671ef73c6af3a51af6e22c780da949737f7930644a4d72a03d74cbd591857cc4274f3b55c13af3efdfc0e44679e6c
SSDEEP 192:sxZFRXyM/jK1Ml8MkT/fmsI41VdEdpqGHW6+WNIOE/YvZjvHIgrJ:sxZFjMT/fmsI4GRHbW/o/9
TLSH
T1A242F9126A349977CCCBD209F955BF53DAF91462D2900E48AAFCCA0C05E6BDD230381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 13d0f2c2146b9a53e7bdb50b7123841aa0049a0a1dffb7cae0c6a98ae0f7f995
MD5 316c919c7dab87bb96b966cc2c3cbeeb
SHA1 a536cb3348ca826e690feb7cd8576666effc3efc
SHA512 d2d438cd8d0a87a8aa1b9d45e28bb48e8bd4fa99a6083a2cc36872aa1378565562759ebbae7eacf8a32b0ff65e3defd8a97a2c32d657cb2eb6b7aa0f41ea5970
SSDEEP 192:sxZFRXyM/jK1Ml8MkT/fmsh01VdIdpqGHW6+WNIcSdYvyJjvHIg5EJ:sxZFNMT/fmsh0ORHbedh/m
TLSH
T12552F812AA345977CCDBD209FA41BF53DAF9147292900E48AAFCCA0C05E6BDD231381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 97bd976ebbdb3e9752fc480ea9135b8cdb27b478ec5b37984a55f6f7e9926d40
MD5 407f250267defb6f237a1d570aa13cc1
SHA1 31ee2193f64d6c13cc16267aa5e40cb19e5bdcf6
SHA512 272de9b75a08720f402186259ba0ad1f8fae416fb9f071df9d77b581b47045a303d186764a861604fe31d522349bd56a915925254b9cdf56333decfd44c02902
SSDEEP 192:sxZFRXyM/jK1Ml8UQQkT/fmsh01VdIdpEGHW6+WNI4BVYvNZujvHIg5EJ:sxZFNqjT/fmsh0O/HbpVWC/m
TLSH
T19852E8166A349977CCDBD20DF941BF53DAF9147293900E48AAFCCA0C05E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 238dd690276d0b9dc8026bb497d61098791fac9af54b295785b4240e066cd59d
MD5 5b5e780c9230174268a9aab86807e0ce
SHA1 6b0d367ac6e9ae224fdb12b54c9da3c5202209d1
SHA512 1be49a07a355d2232173491888e5849dde456c36a78ef64473978e4a650cb7ba26efb7e286eee22bbbf509b99e89504c3b8d5aaffdccfd48dc7ba0fbd81742b9
SSDEEP 768:TzseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppcroB7:TzseJ3xWvhfynu1jaVcL88pHl
TLSH
T1FAD20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA980C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 1KB
SHA256 77685e4f1ce9b75b4b1287a6b742d6fe90572787dda990e1f573236f87b547aa
MD5 98a81e84becb505cceebed1583ebe449
SHA1 c3c36a2926703a4d2d27c9134b27e234c6a8dc67
SHA512 25e1d333e2db346a5959bdca9a54cc6e31482391ed5e8c89c06406a4d0defc8f36e4757cda424d2c6d94eaf935a1d6fa1cfe76536eab8c984d25bb690c145369
TLSH
T108214F494EA0991BF8A8847715B3A4E0337089EC5B2167A32C3C36350D2278D29472C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cd4eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe5cd4eb.TMP
Size 1KB
SHA256 d8671718de52153156c9df894860ee0556581fd2ec43375261dba1e6b3b8a98b
MD5 c6d6f542abcb3d200157d88e14e245a6
SHA1 504ce4ac049cf0ab3d37808d87ec5cc0ac3e156f
SHA512 75415be6dd3df63291b00528f1a9a1245fe82b0c149e8ff4a86a3b8d05e64f2fe8f87bcae98d134626831fce00014648b1d23634f67f67b4b1a68cf00ce7224d
TLSH
T14F21218546E18A0BF880557B0A93A4F87330CD009722B793697C263A4D31B8E1A0B1C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0b4be72dc42874adba6cc5886385565c77aca62f99090a3f45f00070eee5342d
MD5 2ba053ab33ea70de2e4bbe94d3f3d71b
SHA1 d94d47c8607b4d749b605bda01bb4b5c00727c2c
SHA512 c928f880a9417de2348769d0aa23d4932f11459fbc056ece78f9310445b2809727005bb45bea4e669bb32ff6411b7e5cdcf40341ce4c7bbb05d05ed1c3e95f02
TLSH
T1C5E0C0762DD72450BEAFC3D120308090064A789DE941FC0E541BF6C710B231530D7C36
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 73be95fc873f9e2cba5fae543e4227775dda6d15db9c43ac74c4adf61544464b
MD5 b0f141b042e176e06e5a018f1eeb0181
SHA1 017fe282d0abe818ed296bd9fa6403295a585f8c
SHA512 8dea43621d941d6c462914f9445f8d3b258de5a5556c2d3d863536407c1859ea510f5c8a329237e3ecc65574dad9b6df2c70de7afad5eb295e477aa4d6014d4b
TLSH
T145A0026403648006D0410271D28213513319D9725552834742A10594AD90955494D452
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ab2036e27b7321b0766206b4b1ac5b969123e1772ee3a692615c2fd7873b59d9
MD5 295419c2244783213319c99ce4d60f6a
SHA1 fb9a3517bc026155f1bc5ab95adee1305d62f1ae
SHA512 8fb9807997417b2601ee8bc08c42c5635942429b80b7daa33f439d14594cc3006061e5987c262eac87297eaccedfc6e1cf7bf15587e8be7b772c6b012142eb68
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1Ey:KYHIhKggkXyFjIBKEYcXyBuIXKTagM
TLSH
T10A91F057343F021238BD254CA6A1A9369E4271A37454A4FFBBB845624E27E210EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\59be8553-7973-48ee-8eba-29596ee12470\index-dir\the-real-index
Size 120B
SHA256 95e669b8f22dec1df7937b7bed7ec90b2e667d8a60e1c30b84a220a91555033d
MD5 7fd46a17a43d134c042cf212f58fbd5f
SHA1 4c646c113f1ca5704d1af198cd585781480268d8
SHA512 8ff96d82aa5f8fa97d64b7c8ebe00aebd68332fe0c6582370f0766ff2e5adbec5da6c4df45c44d38a4dcc5846c8782957491ff4217f05cbd9041ef84ce5e2b5f
TLSH
T16AB0122D80E04202C40102702493123635391F105606039348D01350A0531A71551070
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e49e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\59be8553-7973-48ee-8eba-29596ee12470\index-dir\the-real-index~RFe58e49e.TMP
Size 48B
SHA256 ad17fe6f53fb83239b1fa2d02d52579a1eaa71b1538908fa53e6c3d89a18ebb2
MD5 01eb15b7f42f8ae1075be47a8ca06e4a
SHA1 ecd9ab0ca2ed7f47ca6b4fb0a485dcbb8305ee72
SHA512 c7cfce78260b3d9bed2e603e0fce98a0791692a188f60c064c2b261f90dac4d3afeeec44c38ae5910821bb4944849d307c26b638730c3d7a1a5af7214f0eddc2
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 83B
SHA256 05acbba66b6d6cc781d9a41bd6696ef9b35949d72ad683aadb11e27e6ff95add
MD5 7fe9499ac0a55bfcdbb451987b26f3d6
SHA1 4c09e1bdb6200a7d3b34ab377466cb04eb44ca03
SHA512 f18d7c992082ba5c192176fedfd69ec07a35aead93ea6e4aecdb9acc4da41a3c8831b6fd9e8c4878689b5946dc56c0fef86ceb84246c70bf7292e05afb196834
TLSH
T1BEA001B74980809A6B71A9E96475B21DE06B819C9CC1DDF4941995562229B7360039A0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 164B
SHA256 03d75c7695ac5a061705c722c10ce7234bb9c4e2cce70f53a64b4de93bad4932
MD5 084a9dd9ce559ab5e9170dee0fc5bcb4
SHA1 19ea30936b60acb878f27a149eccb9f9fe06d0a0
SHA512 64be00c9f09de07b43163b6ca0f617a3196882d5138bdede38771e108d2798c153a2939504097fdf017d780590d74f0986f340d75ca3cc93e97dd81a556b1f28
TLSH
T102C08CF3207089462B70AAD160343A0DD5274C2C8CD0CEF89406B2112138E338603EB4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 158B
SHA256 f6b2744cd4887847941f0de03b889860b9d42f8f0a8b003f2507531859d6d0c0
MD5 a8ba41d89f548f9ba18c090ce123b0ac
SHA1 199ef5a598efad9d204c185a6e02f37565ca9737
SHA512 22d7e5108075f975b9560e0501774ba3dacf68e63f6eb6e2ad45a7b7dc48de36d11b434e67129a7339dd2b218b273131b544f45a91d5e4c9653fa1fa1410b9e9
TLSH
T1C2C08CF36470894A2A70EBD460283A1ED127401CCCE0CEE8940591111138E334503AB4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe588fa8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe588fa8.TMP
Size 167B
SHA256 d7cf8f90b5bf8cfbf7f27a3af4a2c9a20642d45a5f591daf073a522ecdae0b45
MD5 dd3a6f7da6ac990fe9586299b648ee43
SHA1 1ad7b7fa43430bf91d413df407dd63fcb936e1de
SHA512 3224b06008129a1fb6888196aa080a6159b1811873b5a6adf856fb319e2e1a2305a86b0c8310874cac8ce1bc64e7adee8b3059993fc982b5c292d77b3b4f6888
TLSH
T13BC08CABC6B140462B34D8E57832610CC0675C0DACC2DCE48448F24122F8323E1039F0
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\000003.log
Size 81KB
SHA256 08a2133b605da9078ae8e0996046e4bdcdf3fc2131be559f0b3ea51d70174517
MD5 6eeb19d3e9b6b8f1029e68606c18a066
SHA1 7b98c11b5e28402194ac4ff91a95acc30ea7621d
SHA512 6af4a4f20e1b111457e8d87a840c93543e3d810a8c557936ebaddc38d6c7b8b2ed9015f4a49778a6effd7128c9f86f29f5b7ad27767aa2ae0f2675239afc46f7
SSDEEP 1536:7xqfXQ/LzRyFlVEIqnY9dakwjJDlfJqPg:7xqPQ/LzRyFlVEjnYDwjJDlug
TLSH
T1DD837430A127A595A43F431747629E4BD332C6C4AB152025BA72BE0C3AFBB583D6377D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\LOG
Size 331B
SHA256 ce0897222067fdfc2bdf0760403a79648f2b8db847a623ddd410f86b9eb6bb1d
MD5 01e254568a26b18af36ce10b31074be3
SHA1 d089446a4aabfb36659c70e483483ca758e52fcf
SHA512 684fe3244c5b63e6cc582d4f897ea21b0433a85b37716e6b025206fb67910defa02ef06e8c614595138b3df3aa5d6c3e63db3c5c37b77ffa0e1f303ba0c77781
TLSH
T17CE0C048C0C5C12F113C64D68930670EFE67280ADAC83D054F0CD8387487008967D1C2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

cb5d2e1e-3027-414a-ae52-074b8c06aa4f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb5d2e1e-3027-414a-ae52-074b8c06aa4f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590fb6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590fb6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 5041eeb44b29d52f67492aa7f2f001ce996bd2a2725eefd5960c1e7b423821d0
MD5 89038a0345f658d505a2597a9657bade
SHA1 8574f0d50efbb9daac1bea3d2651ce32f2ca1837
SHA512 53341d8fd790865ffed64bce48b1b50a9fadad8953b20141562c80109273d5d94ae3a1aee78c533dc4a36d568e01d7deda4d60631e1006294084520843041331
SSDEEP 192:uQLsNjWQGZHUlsM7/ywQmiU1RdbB4MThcC5Kopc8z1tqVyh:1sNjW47aw5buI5KGdIyh
TLSH
T114422AB2BC755C2B9CA7A145F44E33031FB4916B96C46B54EADD2F1D01DB1AC130791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 53c09ba9388562619f0a1ec29e01c1174e253b9e6f022401f123d7f0c97db97d
MD5 55ae9a8ac4ae3933061012a316b5314d
SHA1 03e7e1179c1efaa8dd62960481b7e82b59953d1c
SHA512 146a78afac99ab870215e042cf7550b7906bebb35643923d11004567e97121df706d08352c35d2d07670f0d17147cacb6cf55c4d4404d58ff54e717541708de7
SSDEEP 384:hiFiZcIPzsN98TUNTUlIlB47awtbuI5KGjIMw:IFQr4wg0tRljIMw
TLSH
T160824CB35CA4893BADB7A641F84A32034FF49077D6D4AA94F6DD6F1D009B1AC130BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 22eed7cb1320443e9a4b5ecd94fdba352f020326450d160d9f44d6987ca3e761
MD5 63d76aa4c5c4f7709b0b1a49f7324726
SHA1 88662a00da1494397efaae62f37b868945164801
SHA512 462b8721601e78dd46913685ff961091a1edafb04dbf22be9d42ec6130a3e2f72ff6c99f4f398cead40df9bff08725cd5a0a4028802ea016c65f7b436d1fb854
SSDEEP 192:lONny6vMtPQmiUyWDThThcC5KZ847rtU/u:lONny6UtRJTD5KhpU/u
TLSH
T101020875BC785C7BEAA3AD45F48E27171FE4617BA5905B40EAE82F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3a646203ba543fe30cd3199f0316259ad41e76c7aa75030a9f1cb676bba81159
MD5 9fea3246b2abf940d27203bb6feba2fb
SHA1 d2cec77d36a4a7ee6cd58a46a3e234c68da11e9c
SHA512 da2fa835cfdd84bd9e572d89d81bd8c34bb9f05f8dda08f6967b45390ed073bc64a3a8b4cecbe3147a08dac186ad3da10ab67b5863c508c4264c01a3e843ba90
SSDEEP 192:uQm+xasuheOwQxMGsNjgQGZHUlsM7/ywQmiU1RhbB4MThcC5KopU8z1tqVMaYy:6ZcIhsNjg47awtbuI5KGVIMw
TLSH
T1DC626CB3AC745C3A98A7B141F48A37030FF89177A7C45B84E5ED6F1D00DA5A8130B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 13f43579dfb05aa80290a03cb0469c666e51fd5ab19b190878b18a0f68125a8b
MD5 bfbbb0bfc49e2afd9ba6c2df234e95a3
SHA1 53534357d35a16827c29a20849d000eb0b57819a
SHA512 219febeae2178fdcd1ea3bb5b6c350833ae2e1faccd6b38d81e385adb970c87e1cbd9ad48a661afff6a3769f080f966007fcef1237176adb5eeb744c3243a285
SSDEEP 192:BONe6vM0PQmiUyYDOhThcC5Kopy80ItqVU/u:BONe6U0RdOD5KG7IU/u
TLSH
T140120A76BC749C6B9DA3B051F48A32171FB4926BE6C4AB50E9DD2F2C00EF66C1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 9750d56111430948f59d42e71e9baaef1fad34a072d87a4db2a29de89b37464e
MD5 745bffae5a5219e6d533e1e53189fa3b
SHA1 da5fc4eb4792b42a48df77cccc287a9dc53cf712
SHA512 d1ab0311f9fbcb33a959e7e9f2b8681575db5d6f9ce8fb7189a83daa219b5d942d958e01b667f03912715f5138221ae05b111f449e1e6f613c084b9fa6eab6d8
SSDEEP 192:uCm+xasuheOwQxMGsNjBQGZHUlsM7/ywQmiU1RhbB4MThcC5KopU8z1tqVMaYy:0ZcIhsNjB47awtbuI5KGVIMw
TLSH
T1D7625CB3AC745C3A98A7B142F48A37031FF89167A7C45B94E5ED6F1D00DA5A8130B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 23feb12dca31009b28f744bcabc09d84d51187da4763f762580358e740cea9a0
MD5 946a768a08f590dbdd9a9d24dc7fa547
SHA1 3d9c0b5c3a398d32f3dc58e259080c544fb697e0
SHA512 01d9ade61bdbf353ef7693e5269e724c2948090851c3eca6ebc9e14675192e3b21a53f307554cd030bfdbfd8c499baf4eef745a6b9825e6a2c06d63995ca8dbb
TLSH
T180E00162A75552FFC53C073420971B25BEFAC12102E203974A3405786C733443F2ABC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6fb56716170d39378f38586c453701f8ac2c545d198fae29c540455508107a19
MD5 897e65a6697bae5863eba6760e456474
SHA1 c1974300af6bb22ab55ea29b35aa5db4411842d9
SHA512 838252de5b02fe853b3cac2b5ac9b2f52837acb9de2dd6438fd4ba70a3de98a01fc1f817bd52bb8eebdd9ad3b1be5afc69e1dd2dde9d332f5374c8152f6898a3
TLSH
T1DCE00962A75452AFC53C133420D71B25BEBAC12203E3029A5A240978AC773443E2AAC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2260fd0e514c545da99af57470124d0d939b3f9c13616dcceb64e606a2b3a4ee
MD5 a0687378b79ff66571849c57fa4f81a9
SHA1 3374bc2b0caca63db93e465ad1e6a2f77222d6f8
SHA512 7a94025d280e997a2e2b50dcbed8cee5a4e62a6d54fc1bf79459de8311b9fbc593bb561cf6d1218e2ce3a69cc787723fc21d70bbff72970ee5e636de60be9aca
TLSH
T132E00222531142EFC43C073420971F20BDF7C02003A202554B34057C5C733003E21BC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 232a68f8816fcd6b9da220fd87d67eb528160b923917257b6c05b5363d4ec0bf
MD5 e7935870e70beb624f6f56020fe165c3
SHA1 968460f33f44ddbd5967763540d854206a6f2d03
SHA512 b4aacbe8ccf1c945098210749a791813bc97a66eb0415270458ece4d66814afc8962242312528a022c38da0e902ee507b3da914d54abe091134fd1c2f5f69cf2
TLSH
T1CAE00122635142EFC538073420971B24BEF6C02103A203564B3405785C723042E25AC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a22d22b1c7ac85848053fb9420e7fd6dc9bab6a1c7a5fed3f5325c533aa65c64
MD5 c6991d622ffa02db35b0aed21d5ef4d9
SHA1 8c084f2e71327f1a7efe8963bfe4921b307f0f09
SHA512 46b8ed4a8352d3eb0c2725c98d5040fd3a1f555f04688dcb9bcea44bcc47e6f43d8f372955373bf75003e6059806ccc9b6be00aafca0ada024fab1d59b2329db
TLSH
T100E00462A75452AED538133420D71B26BEBAC12202A3029A5A240A78BC763443E2AAC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b20db0b304f07babd247804998e95eaa91e086f6b8283e3eab547da7fefe302d
MD5 f4c610138475c2654e9e4d94b296ba60
SHA1 e3f076d48d0ba511ae3b18cef261957f922350ca
SHA512 9ff3887e5169723ca988488b7a63144d38ab5179601b3422c865ccd7b5b755ff17814039322ece55cc15209a68573b6a5ac0efe016362a30e7cb63539d38986c
TLSH
T198E00222531042DEC4380730209716207EE6C02002620355491405645C533001D117C5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5c721a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c721a.TMP
Size 392B
SHA256 403f20c34d13868273a7f3d7446e84b7b8574058c1ce7ac1681158ccdc6d8890
MD5 f3f769cfde00947d356b49e05474f84f
SHA1 59537f8c5f6ece222485452969c5f6f0ce429e5c
SHA512 88de744d43da6c487b5b57171e608a691bae5b237b503acdfc2e0efd2d5ae4f8fa33d5132b628b0d68c78f351b80fffb9bf394f1b427e2d88c46ffdad95155ea
MD5 SHA1 SHA512

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 a9a0edfb5243d2b02ff25f6f5b5eb064cbdaa63dc1aea887e331652203e7b198
MD5 4365d4f499071282c765069f1c1b2dca
SHA1 f68d29b322f24febc29875a8c5168b3675140175
SHA512 8bfda2db32654ade04e12c5909d5575026beb68855f206ea909a91763fe2de055234a416c6f60c85eca67248fd38fc5df24ed40f3c8cdb4061e95c9be2059275
TLSH
T19B513C6938A353FF8D792E7FEB00D6647A98CDA51A63008096120AA549DA0B70C073FD
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1~RFe5878a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1~RFe5878a6.TMP
Size 584B
SHA256 42fbb2dc845d5c4bfd312b1c792cc783da9ba3024627fe682ef20ab9f1d51099
MD5 3a01a269db08e2eeb4d7dc6c52a21853
SHA1 74ceebf63fef0a512915fda02de30e4f09b5e2bf
SHA512 222dd0a9906a32145e0fe551d6de3c4c6ac9e6524b18e94e93bc87a828f782bf6d68917a47da6caae430a5f042210f528294c19d6ffc316daa8de54a6c7cb402
TLSH
T1ACF047A719E5D0EEF77012B453FEE184641AEEA90940C659182CC322C1F4936D250B1E
MD5 SHA1 SHA512 TLSH

Submit Download

877ed5e6-bc41-47c5-9bfd-6f604cacb89d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\877ed5e6-bc41-47c5-9bfd-6f604cacb89d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 d1ee922096af7906900b43da04faf9b8ff399fe758d372cd6847ade3e038a8fd
MD5 6dd860f66f2d02ab975fac57fca2291f
SHA1 64354c95d4b858b2c1d98e3f89c78ba92888bf6f
SHA512 9aba6d52573f39d4feffcb047fcb5f585ef17e504b9c566005e224f9144f8284fa25a79a6de0068e92d1d2e097db92da953ffcb5bb13830fcb20ed8f4ca51315
TLSH
T189512E68BAEA1155B3777F599BF6786E487FB9332E06D45E10110E4F0622B00CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download