414578d6a6694fd296643f91837d67202614c25d11d00572827ad990bd47fc35

Analysis

user interaction
yes
max time kernel
898s
max time network
902s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 16:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
21.html
Size 124KB
Sample260728-t3qbracp3s
SHA256 414578d6a6694fd296643f91837d67202614c25d11d00572827ad990bd47fc35
MD5 488a82037282fc09a953fbf192ac29bb
SHA1 0fa20aaba22dadebb2d7e0c379529d0077851500
SHA512 d917c56e5bc8969924ef9cd12fa72febe86addf81e90001c113d0d1ba9bfc53e37c27ca8bca91b3e0a963d110ec9cf0e2ce082ff8cd7f592e21579693c22b290
SSDEEP 1536:GdH2bWlu4dTLYdfvR62v9UD0NKFSjQKVoWNjYqqAS508oXqgmagjj:GwIu0LSzv9UQMFyQKCWNzqASqHX5i/
TLSH
T1D6C3E79052B41C386413B344B6862B09E692DD5F9F3ECE74B7EC2458AFDABA4531B34C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4932	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297301261488657"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{FE196F04-56A9-400A-B5E8-69F5D56A5248}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe
2420	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 5048	2420	msedge.exe	88
PID 2420 wrote to memory of 5036	2420	msedge.exe	90
PID 2420 wrote to memory of 4932	2420	msedge.exe	91
PID 2420 wrote to memory of 5036	2420	msedge.exe	90
PID 2420 wrote to memory of 5036	2420	msedge.exe	90
PID 2420 wrote to memory of 2104	2420	msedge.exe	92
PID 2420 wrote to memory of 2104	2420	msedge.exe	92
PID 2420 wrote to memory of 2788	2420	msedge.exe	93
PID 2420 wrote to memory of 2788	2420	msedge.exe	93
PID 2420 wrote to memory of 2660	2420	msedge.exe	94
PID 2420 wrote to memory of 2788	2420	msedge.exe	93
PID 2420 wrote to memory of 2660	2420	msedge.exe	94
PID 2420 wrote to memory of 2660	2420	msedge.exe	94
PID 2420 wrote to memory of 300	2420	msedge.exe	96
PID 2420 wrote to memory of 404	2420	msedge.exe	97
PID 2420 wrote to memory of 300	2420	msedge.exe	96
PID 2420 wrote to memory of 300	2420	msedge.exe	96
PID 2420 wrote to memory of 404	2420	msedge.exe	97
PID 2420 wrote to memory of 404	2420	msedge.exe	97
PID 2420 wrote to memory of 2676	2420	msedge.exe	99
PID 2420 wrote to memory of 3824	2420	msedge.exe	100
PID 2420 wrote to memory of 2676	2420	msedge.exe	99
PID 2420 wrote to memory of 3824	2420	msedge.exe	100
PID 2420 wrote to memory of 1152	2420	msedge.exe	102
PID 2420 wrote to memory of 4876	2420	msedge.exe	106
PID 2420 wrote to memory of 4584	2420	msedge.exe	107
PID 2420 wrote to memory of 4228	2420	msedge.exe	108
PID 2420 wrote to memory of 776	2420	msedge.exe	109
PID 2420 wrote to memory of 776	2420	msedge.exe	109
PID 2420 wrote to memory of 3524	2420	msedge.exe	111
PID 2420 wrote to memory of 3524	2420	msedge.exe	111
PID 2420 wrote to memory of 4256	2420	msedge.exe	112
PID 2420 wrote to memory of 4256	2420	msedge.exe	112
PID 2420 wrote to memory of 4256	2420	msedge.exe	112
PID 2420 wrote to memory of 4664	2420	msedge.exe	113
PID 2420 wrote to memory of 4664	2420	msedge.exe	113
PID 2420 wrote to memory of 4664	2420	msedge.exe	113
PID 2420 wrote to memory of 4488	2420	msedge.exe	114
PID 2420 wrote to memory of 1892	2420	msedge.exe	115
PID 2420 wrote to memory of 1892	2420	msedge.exe	115
PID 2420 wrote to memory of 3436	2420	msedge.exe	116
PID 2420 wrote to memory of 3436	2420	msedge.exe	116
PID 2420 wrote to memory of 4328	2420	msedge.exe	117
PID 2420 wrote to memory of 4328	2420	msedge.exe	117
PID 2420 wrote to memory of 984	2420	msedge.exe	118
PID 2420 wrote to memory of 984	2420	msedge.exe	118
PID 2420 wrote to memory of 5816	2420	msedge.exe	126
PID 2420 wrote to memory of 5816	2420	msedge.exe	126
PID 2420 wrote to memory of 5932	2420	msedge.exe	127
PID 2420 wrote to memory of 5932	2420	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\21.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7ffcf5dac188,0x7ffcf5dac194,0x7ffcf5dac1a0
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,4816542274559748927,13208042364154413186,262144 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,13097113419339099617,6694684194091235945,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,355185086179458470,2524063268810732220,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=3196 /prefetch:13
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,16391680696798409621,2838277424433774903,2097152 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,9668221561327739775,16494951323206599041,2097152 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,102928222311282755,16648468278831005587,2097152 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:9
  2⤵
  PID:300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,5891654997743442698,4771582498574036627,2097152 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,11688925290542005249,7951864871546431722,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,18231827811185425897,17618003697184617388,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:14
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,6461394483922008076,15427008117172649124,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,6461394483922008076,15427008117172649124,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,195410742058263226,4358464115928659287,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:14
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,14415347118162792411,186875815132947191,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,2768870550187165622,17506577416736762012,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:14
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,5153112637509069779,9400239804128730847,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:14
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,12661003479806994008,10244216069018523688,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6716,i,15381785117396424103,2974072380034310977,2097152 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5420,i,6447465990584626209,12961616386217000866,2097152 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5132,i,16767336007879943526,5007870047355626702,262144 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,14764391834057652446,9762535369428439922,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,9433145236075531165,1726639238040263755,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=824,i,5399354272436858542,1743498788075939378,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,15572903888079443992,11295337826487135249,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:14
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,937181003884847224,4646485371621949317,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:14
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,14945863399443257895,9911953894026454381,524288 --field-trial-handle=2276,i,17831932812322904839,1524912684460163662,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:14
  2⤵
  PID:5932

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2372

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:972

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

750f4a43-7d22-416b-8bf3-787572d2b758.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\750f4a43-7d22-416b-8bf3-787572d2b758.tmp
Size 23KB
SHA256 831d88902da9c5e213e2249f28f8059bff76a0914c9d6df2cf47914b37fc49a6
MD5 80639ce14407c54d5fdb19f849054df4
SHA1 097716897a2f3df54e8e724e0ed1086ed2e71bf1
SHA512 ab25aafc356302b4460309ee45adeb818ac2c02d3684a60f685a34e8358204e417f45e356fe0f48d70f4e3c465303d6bfd94d45da814b077b048a839bd95bb69
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXero98L:j26H0RWgs2f028F1+UoAYDCx9Tuqh0VZ
TLSH
T1CCB2EB2B640DCBBE5F800A9DEC196FDB6D9802C79B588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f485b8097028aac934ac06229c8fb7423838a9c199a17c87e9f89e00d1eefd0a
MD5 ff74c4e8739b40a2184518c9de277638
SHA1 6ce7f408fa89868475cf2abfdcaa2a220f385fe7
SHA512 a7935a0a6944f13bad6bc70b6fc7d3c1470cc41564093c13c38efed6ddf731ef837f26ecf4168b0ff0e9f0836c067d198876ba8efbebd9b06f2ffe83df406fed
TLSH
T1DCE0269419C9C26EA308685782AC634CC2813B0FD2C9AA1A27088894F406050E3B3AD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 91748fdbdbb7601b7b75b553cacf0d29211f50ceda2f44008b40187d0756be51
MD5 1df77d2691a8c9de4f11b286e426ffa2
SHA1 9a1b411f64736979760b8b0728b31b0a8de9f7ed
SHA512 436bbac0549f9cd968d67c42887681957bd6c0424125b1d9a16c2006bea34b0624b7874da5a6e535408f2e09fe82ade3b9cb065176c00fd30d37a55354e2ab0e
TLSH
T129E026845AC8C36EF20C699B436C578CC3913A0AD2C8B99B1708C889748114CE3B7EA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ff093eca6df8d21ca62d561ef7dd30fde5dc901972973ffe7385c9d7a17a286b
MD5 a645779affc7bc76839c5f67ce94983e
SHA1 d978acb942c33f2db6f6aeec6ac7c2249d32b067
SHA512 e902fdce2b2dfe104e555b1d5857c3f01a833130ef843958048197992d841bab7ea10e385518e8793bba9f8f9af1b2aab12cc39b5c57a0a297b6ad3ec84f4a23
TLSH
T129E0268526C8C26EE20868D7437C634CC3823F4E92D8ADBF770884D5B882448A7B76D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 236KB
SHA256 a1d1a3d3753689663c743c169065a49798db9a53819cba51388f1f4e7755a248
MD5 8c86cf4751353eea511b5a311d399f94
SHA1 a03597b71739fbd91d25f01c6b8f7e0df3f0fe3a
SHA512 812be569b02ed449a133e5ef8c0b3d2a84631a6c6eb654918f8213ba082ee750fafc7e8768bdf49adac02b6c169b521d44f5bcb5946783c2664befa3e6ea4d2e
SSDEEP 6144:izytUFcc3beZyINucGwNyIn+mqLC39PJWz:ifB3FwXGWyi+5uxJy
TLSH
T1F8342304B4C1FF219DBF65B5C2E091466BAB7FE0E4EDFF1CC132114A414966AF296C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1a4a53f7ad9fb148dc16110bae6cc3263b2be9ef013d7ad4d032fa12bf6820e6
MD5 606c0ced5b86e5fba22358d67f1da2f6
SHA1 bdf2d63485049a8634f37ac4e997f2dd612b0a4d
SHA512 e15c669ccc4c3e096cf8c4a03e446c0a87a4a1101119e070806a99d143e89e166c580b750d60c75d7eb93feb58ff06de0f727a649d44af8c98556fc2485fcf11
TLSH
T1224197644B6209DFDBA649B917F040BA32F6BC7E830B9EDD1250ACBC0542F2361E645B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5423a2ab0a0ad2869561dec1a3426ff1c8b7d82110280cf10ff0642adbd1ebea
MD5 d29145a91cd75e0d53834e1456373541
SHA1 8a0f558a07baa0c7990aa39bed2cddafc0c3e204
SHA512 579e8c0eced6c4222583f40ec0725e897d80e0d19481cde2564c52bbcddf7ae7376d53150a96fc23078ff18665e389f31ad1e3e208e023be52019e4cb6b5b37b
TLSH
T19B51B9554BE1259FDF62C87986F1487B32F5BC3E82079BDE02506C7C154BEA321E204B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9907523758f4a10327be2df7d1a1167c3d878839a7e09dd27083b528c5bbc129
MD5 6d24159edb99ef09d1e2178e95f138ef
SHA1 1995c5bd1277894532affcdbfc58a6a4161fd1fa
SHA512 3c10a0ba2319c926d95b15136d5810ccf18692d22d223741aa2bed5a3af44dc3a1ce9fdaba7b1c83de631e55d2b07ba872425e039e879b4a7aadeb5b3c6c2755
TLSH
T1B44177648B6209DFD7A649B947F140BA32F5BC7E830BDEDD1290ADBC0542F2361E605B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 137ea8da437e40f6f585f09727c501acefcbd01d609062e90a43a5659cbaa034
MD5 cb39e72bdd4ec8f596e78417effaf86e
SHA1 f1d2346c46ca906a10fc0e3bd73941c41bd8a98e
SHA512 828539471e4e25cb34a8f5a81fa5ebeda74da09b159104d36fcf443837c4825640f092867510c899d896a98ca26efd45a5b9f299be33fc9c84307f4b628575bd
SSDEEP 96:D/ODfScTQcjfZiJtzBZDZIwvJGeJpqpdebBjaIL5yBGj4/3:DWD6cTQcjfZiJt1ZDZIKJGeJpqpdetj2
TLSH
T1A6B1B0F743F1866E9A0255F09B047E2BCE6D0825576C3C67C9D0EE97A3E24B2E101B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 afbc1ff0db8282c47240e679faf4974f99f8c6b1e536593cc1b975cbd728537b
MD5 2a142a935618e2647a1f16d2435508c3
SHA1 b348433997794d9d2878c8b4cc9fe2f199ebd0f3
SHA512 1d5fa7b50088d00052d118dac52cceca951475321b9eb3d0970f24eab997df6e27a69a0c1c09b191c5687e3cf00ca87ae8d4539fdd5d55ba04b130a20b20a414
SSDEEP 96:DwBOEFSf1k/jfZiJKzBZDZIwr2JGeJpQMYtuebBHCGaK:Dw0E8f1k/jfZiJK1ZDZIi2JGeJpQM7eR
TLSH
T1C3C18EF783E5866DD90255F0AB147E27CE1D0915926C3C27C9D4EE9B53E24B2E201A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ec062edb71fa8d9140eab6b239adf3791c82e2f69e8613c935b8c3d5214989cc
MD5 ed451cec1157be2e6ac9407eb01ec3fc
SHA1 ffac703526dff8d51237b7dbcb2584d42a130ee9
SHA512 5e102361c25094af910d866c973d1bbaaddcfa075dceca202ab734c401f6b7b67660573115ac6a79f6ca65a6c72e954486af16e5c64bfe45b585974353e93294
TLSH
T1EC51BEF7C3E4867D890156F4AB186E1BCE1D0915832C3C56C9E4AF1B97F2871E24165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 26KB
SHA256 6f95969dd128d2e0b7c83448a5ad7c1f2d4662592b017677cbda0563aa979a5c
MD5 bf8a48bdc37e499d69f4a69b8b2951d1
SHA1 215cc7151d94cec960a6508683f7b3bc71a01171
SHA512 c458cc84468e448c1aad6fc6829284a83586285a5aee603f2f782c8245445e4caaa362e01194f8aa5f4e59bb660cac2a7c39f36727f5f69778ce1e09fc79e267
SSDEEP 384:sxRe+a/fCslq66s8qMpRiYnazAW8pZS15posJWeT+HSpGd/5SxYDRb:sy+a/fbq4Mnc7WeT+HSpE/5SYNb
TLSH
T165C20709A824C87B9EC35D19793D7E73EAEC506222C5DEDA56ECCA0C019E1FDAB07417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 350afb46232bf23203e1f2e01b4522e0666ef47e8041e73e87702c89abe05d58
MD5 2282703a9bb2e441ad3dbb01ed50cdf7
SHA1 da8b3c23297f50ef16c53e6d33c99de67c2e1f56
SHA512 27a7c27dea9a1c14dd43c40e52768b793ba4fe603c4d37f31a31988d426a33c1283caa10b6d6f8652bfe8c528d0657268431a76cac4273ea5c0ac0618e8a0c1e
SSDEEP 192:sxRHR9ba/fCsqqSwG8zoA8p4j/g6+WNIYoX8Y+GeIgIJ:sxRHHa/fCsqqSptu/5IMDs
TLSH
T15332A61A6A28AD7B4CC7D21DBA657F93E2F95432A1D46E48A6FC860C04E66DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9513bd24bba81e71e9165f8966e18e17fabde5cc29f3cb51f5544a489597c8fb
MD5 3ca77ec8eee8b2151e4c945f63cdbab2
SHA1 5c074c93144c6d86c83b674699a1b89da69b9374
SHA512 bdd88b75ac891f0f42e259ddabcf59436625a25f19d20c7db07048daaef8af4466aa55425a2921c126996c00e6d3d3cbe3935c99b276a953571820bccaf89ac5
SSDEEP 192:sxRJR9ba/fCsl+SwGrzoA8p4j/g6+WNIYo7J8Y+GeIgDJJ:sxRJHa/fCsl+SpKu/5IqD/
TLSH
T18A42A51AA9289D7B9CC7D219BA55BF93E2F95432A1942E08A6FC970C00E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0bb33f6b9492a5c78015a7a15c98f4d042db9d796bfefa72b502c8ca8bfcb317
MD5 43cfb92c9c4b068d4a11ee40e14990ad
SHA1 2d95cb14eea3c7c05bf3678b1ddd763bd50df781
SHA512 7710d8eb10a63339147706d23d4e28b8320c752772595e1ab230151110e8449fe370d1ced78859068ac4923f7d51974b0ccb532bc207ad28e98148539e7aa895
SSDEEP 192:sxReRiba/fCsl+SwGvzoA8pe54/g6+WNQ4HZYo9J8Y+GeIgDikRJ:sxRe+a/fCsl+SpGd/5HZYDRb
TLSH
T17442B71AA9289D7B4CC7D219BB55BF97E2F95432A1902E48A7FC8B0C00E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 97f203fece06aa2e883f4c8792e548ff7ec8b63f00e774e599c2a85cfb5796c1
MD5 f89d870d4967d1082a33acf613a3a5a5
SHA1 9b6dad0da30add48ff4f0eb1722e05d1c61b9ee8
SHA512 efd633a7bf9216593533fbd69fc57b2dff251fa175f3cddef366b8d798553f687412c37a715ee29dcf0b851e4f0dc918f82aa1c48fd8f86996f208f4fedbe4af
SSDEEP 192:sxReR9ba/fCsl+SwGrzoA8pe5n/g6+WNQCI/YonJ8Y+GeIgD7fJ:sxReHa/fCsl+SpKS/5m/uDXh
TLSH
T15D42B61AA9289D7B9CC7D219BA55BF93E2F95432A1902E48A7FC870C04E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c521fc55e463b33cdfb2c45f854b2bda97ed4a166830156e11c8db4978fb285f
MD5 085106886152600a662a40498d1f8b9b
SHA1 b13fcf56547d945b425e8a12cdd58d56604fe27c
SHA512 cc12b45939b3f01bf8cbc7094f2457879df2da6798271300d6ab323110c11a987dd6e78d6096abe1b6291fbfdc4a3286d4de20588227ee22af8a1d5152316c7f
SSDEEP 192:sxR4R9ba/fCslqSwG8zoA8p4j/g6+WNIYoX8Y+GeIgD3J:sxR4Ha/fCslqSptu/5IMDF
TLSH
T12032B71A6A289D7B4CC7D21DBB657F93E2F95432A1D42E48A6FC970C04E66DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\6cedf0ec-4e58-4502-8c06-7143e668e8ea\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

29e058a2800c2e3d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\e7d11566-77f3-4d4f-b2c1-837667726942\29e058a2800c2e3d_0
Size 311KB
SHA256 19abe62c0f5c49a89b9fb92ce0ef3c214b2f35e6d4ba8a8e9a91ee7091edace7
MD5 2b4249af2f7a4adb097e19b373c877bb
SHA1 c8b88d9a8a55c93b6d26fb7f16bac647b07410c7
SHA512 32bb4d5a55f1607fae692edcd4d2ef8db847732a539c96eb33f8f118ba31a1735d4d1adc63e40f33bc5f535c54f29b7c17561157f59f9244ec2f92e81de0776c
SSDEEP 6144:xkMe/HUtjAy9pQFJSEH7mrqSiCaLCA5O9io/fAi7BPqk1b/2H:xr00t9QFJSRrzd1U
TLSH
T1F064F927F21A9C65F4006937060D9937233B9890729970A6E78D38FB7CFB90DB55B7A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a3986dae1f26412_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\e7d11566-77f3-4d4f-b2c1-837667726942\2a3986dae1f26412_0
Size 260KB
SHA256 39bb8c4309162ec38fb3ab6b3f18d5afd857b6a5501e9c51a626f14145010221
MD5 51971de4f7595d24c27ecfaa3eda221c
SHA1 90da67c9c5d5a85867c7cbac515fa682beb75ce9
SHA512 ec34a53e5b9ef2623d106190f8096a9610e80f29b93ade5554f579f410ad776c83294afb6fc0688b4a41e49ad969ba8342cc58d3870af53427cb903cd9d2c3a3
SSDEEP 6144:hQ6XVrxvC/ax41ZLzwdqbhA8qvwYKGL71q:66Lnx4bA5+
TLSH
T1D7448342A3C0585163ABDFB7771BB5E0E5152D6E7648085FE600BFB4FDA4122DAE4E30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\e7d11566-77f3-4d4f-b2c1-837667726942\index-dir\the-real-index
Size 96B
SHA256 c06958f12bda03a5e02513a47cc90cff038ca958fe2ee33e509abad6ae12fdd1
MD5 4c1f74d97fa9fe094256760300d43884
SHA1 94ca2a58c9fdf1ca515f7a5e1b1947d072c8c0f5
SHA512 5f64d4c2b4c4b401f3e2f1e423fe94ffa2704616ac08751eca38e5e0c89bf6a6acc708b60ecbbd8e6cc44906a0683d3a3cf6e9faee8402cc1498b1af8f77df77
TLSH
T14EB02288C0080003C00203F00AE388B033323CFF03828E2A03B802B8B0303F8A300000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b36eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\e7d11566-77f3-4d4f-b2c1-837667726942\index-dir\the-real-index~RFe5b36eb.TMP
Size 48B
SHA256 d7aada22e8340be3f65556e17616f7bf63f28a4897ed4107959b160947dbdd3e
MD5 6582cc6a056ea8234bc58e522cb4b83b
SHA1 ef8c82923ce81df7cc9531787c78e5d4cca2a1c7
SHA512 df37fe1854418f6c932eaeefce392b826eb5c2ea4549d7297cf0a92baa90aa6866036f23687c2ecf3372d34ac8d7bf44c8573e911f50a27ef4bf105a87c9e008
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt
Size 278B
SHA256 c9dea7a4aa81893a614c9d5a85511fcfc2cb067a6ce251003833df146ad4748a
MD5 8d953635c5cd55072db59d1eff347c47
SHA1 096daefb358d96b878f07c76456ec4ca9968fafa
SHA512 9068b2b5e65b9ae1a610f68f4fb86f22966251104d3895000b880b1ec2af0095e85257feb996aa276391cf08c78ad1eb1344b520656f2eca90ef600f8b5a86b3
TLSH
T17FD0EBD91060440BB1B3CE423416104CCF42BC76AC98006C0004B1D22F30206CC02973
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt
Size 391B
SHA256 beb5219f941c58e8abb10e014337ae3209fb14cb32c0a5417616822091656f11
MD5 8805ac915a842c124cc32e8b5684d400
SHA1 5131506b3413d5eb295dc2853694f3e5d5ba1049
SHA512 000f951881528aab634d4b1135373bff4bb8029867455ab4ebe1c0ac42d12bec01ef2660241e52e01df9558d6bbfcb2df99bdcf4a241c07fc37b73f7f7bd2054
TLSH
T1AEE0F8C622A48A0370B3CF867817111C8E42BCB6AEA8803C000065D32F2104ACD0AA63
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt
Size 492B
SHA256 7bd1e53e9baf5e7d4f6e47ad19cb86b7c7af968c591c8ff6e36d9cb63646992b
MD5 2e8a285f0b2d1762c5187afd32722d86
SHA1 42a161ed26346e66ec9a245a5ff9803897def90f
SHA512 3059dc2575844d7519b8df481e6ec07335b99805a2296de54902834dc89298caabc0c81b8bfed8b041375c70244f72385d65158f4dabea598b59225970fc9244
TLSH
T1F1F09E961294854771B7CF867866102D8E43FC72DE55413C100465937F21549CD07973
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt
Size 661B
SHA256 e602a646dcdeb040770e58b13dac9eb18fae304e08cacd0c0a915662615548e7
MD5 68440de7a96e4bb569c54811eb3408cc
SHA1 1da0254289f9b9c894120b450febb737a97da4b9
SHA512 f34d9b8ab41b7be132103931883c28489842fc8a2e8e145da15bca4c42ac6e4b4fe669cc37cc1ce5bb95c6b52c9515ae0e6a79a057421522b28c876928b55720
TLSH
T1CD0102C201E08007B2B7DF8A783A107C5D43F8319E55403C5404A6A73FA190ACE0B9B3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt
Size 575B
SHA256 ed9e954ccb2d3a98634475554bd516ebd99557422bd86b9f896a1901f4a43f1a
MD5 c4906c1dd673d3a359eb00a2ad3ae859
SHA1 a0129c1b76106b12626f863a59b85e08c7687f66
SHA512 63777658e984567460cb07a9e001c11974951549c4a3a08c18a0db4b5675b6a2f12a2ef112a8acc99a4912710d0a69af58d1a794bdad358a3600580825eee120
TLSH
T119F08B8611E4844BB5F7CF9AB826103D4E43F8769E55413C6408A6A73F91949CD079B3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt
Size 656B
SHA256 8e4db85a8b790175f6c2bab7f9135ae1936c2eb133d38520285a357c896488f5
MD5 b34e8b7f6dbcdbfc5345f4cb69e11672
SHA1 bc39ac804b49c7114ffd49ce1b57c06c50e493bf
SHA512 9121f18a3fc60e1cdbf4c4627a1c2031a00f7b575fc75c390ee376f9cea310baa26d75f64a022118a2ac6aab405cbd92ef949b2f1c27c61d183999475b450423
TLSH
T145F002C601D08047B1B7DF8A782A103C8D47F4318E55403C540496A73F81D09CE0B9B3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5aa29a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\164eee7ff0cf7fdd49bd2f946c1c909c843a3e53\index.txt~RFe5aa29a.TMP
Size 165B
SHA256 36fb90bd40f2b51f3df0631e589ca92e47007c7c7c4b2dd02b8d25cc4ef994fd
MD5 98f37820141297ec74aa8f5af5c23fc7
SHA1 e4a3966e6014becbd7e84253999b45ad79011739
SHA512 024d0f9748fdc745bdd78b50110bed7e5ae7b255644b7c81443299a88defc3ed0829654cceeb86040e89b701b50cb5d179758cc5fc155fdb3f17caa847b090ee
TLSH
T18AC02BFB4260140F72120AA33167219ECF83FCBFD6E500680110F9D3A3352978E06771
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 273B
SHA256 dfe9df56343247d1c51cc546f1b78dc760df0ce721b10086e7960af6d946c867
MD5 ba3d21a70f38d891231053f46a8f5c18
SHA1 e433c5f60913b7550894a859cba629832a15870a
SHA512 78319e4c4edff2c39a9fdc85499407609c6cff78264c3f506e650508f1948a7bef062f85d77925b76e684a2abb5e427597feb3aab5befe8b95b63cd677e6e436
TLSH
T1EAD02BF729952820ECBF97F51435A4940141B8A4D949EC8F211D93C310F12527C67C20
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 3d4844f1c5fb624b5e4ca1cbff69c7afc3e2046cfa193a43293b4792ccee88a8
MD5 75234b6d63e45f5ab7430af3aa486b51
SHA1 2d7b3188503f58380323bbe337e78be92e87a06c
SHA512 994b0f26b2d701cb60f5b02ad92798eccbab7246ac783fc6263d189b1b4b0993bdddb48566c168a67fe2b912b93930f870f56e7fa60cf62d416e79c39a5fc419
TLSH
T13CA00216C34913F9F50057B3F055214777B0C96741022381E498F0AA8CA634D7141781
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5af09b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5af09b.TMP
Size 48B
SHA256 43309cfe8b2353ee46dcfaf629930365b92c3becb40eb06163989e8c3f64f87a
MD5 4e595a377150f2fa3ba3b336cb504888
SHA1 b5744cb01ef8ea650d7c6f4a2979d38e26efd2b0
SHA512 73987bfbc3175c9aaf5ad5458b5a59362edc26194ba74b4f896e183157820c6e58d7fd313ec2720f0cb83f3a86a032b9bb9d6dfbbe185da8464d5eb22c0a43eb
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b96d2e6aff6b7f7fc644c9d04086687dac91158d7b71db7a23329cc6128b23d7
MD5 e8f85104aa10060a0d9b91397a74e086
SHA1 a18740694e1955b1c4b1f06df3679fc12bd72150
SHA512 76f1603c1e192463b3fdc910ea0da3a3ef3daac86a6d5792e30ff92f41d86eb46bf3a79c9ea4fab82cf6dbd908f9aba36e1a4bcb05be794648293229a6281321
SSDEEP 96:KRVCbvlfjHWLQeg3HK4GgJHcNVIbTMHRu/bpLP7W/cKgD7K4CgN7cRZUn6iMKHKt:CVCbvlfj2LQ/3dGgJ8NVIbTMHRu/bpLW
TLSH
T16E919501347A5280387EA98C81E5882B83C274A63659F52B3FE805E74F6BE175DFDDC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 c28d522542dcb823581082e60dcbc80043bc27ee8819ab745735caa2d7f6214b
MD5 77b5e539edbdb492b40baf0432fa4c52
SHA1 3cf253294d3c6febd7fbc84aff46e6995bc04110
SHA512 fdf566b57b5b1d99127704a64e436d676a97cb9737ca3bce376eb2ade9dbd674e308e42aa6ac8d32945b1870d955471dd23f82d166c1e45d9660dd7762d495f3
SSDEEP 768:srv+4UNbdH32hV/TBOWMUtm0StSONXyer1IRCzni9seVH1SK3:sbsbF3KVSIqn7EH1R
TLSH
T1BF13B032A5949E338DF2A3D6B443B6437FF86067C6C40690E9DA2F4D069B99D130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 819a355356f28fa70a967e2fb9841ccd4f02b9b09a75440ec7d9ac490e708ac4
MD5 3fa1cb382a7d29db0ec96a3044ac6c77
SHA1 cd8925d9995c6d9af2fd4ee7d51ee044ade9a44b
SHA512 287fb1c4fb95d169ca14940dfc98f9f0ede489769d9c4dd216e486af15b5ba7050bde6a904575e1c3b4259984d82933349269b0c05315feae47ea8e44e9c27bd
SSDEEP 768:2k3QjV/TBOWMUtm0St2jONXyer1IRCzni9sb9Mgo:2k3q/jSIqn7b+go
TLSH
T113F2CF31E8548E738CE2E3A6B54277977FF46077D2C85A80AAEE6B0D059796D130B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2e36934fc32320d2e60a36e2c7f2776bd0897c8aa3f0a85b0b948d882d6558e4
MD5 26b39600c96b9c450a01dab96b7c4c28
SHA1 4a03744ab1b6013c26d7a6f52cb11bcc6df1c703
SHA512 b81be08df490200e56600dc42ed405afb93b0bfdf5fa9bcc575045a7d550506010edb819499e7c6f709d3a0a016396ab211ab26a28ce928b7cfec4004cff7dc8
SSDEEP 768:hrv+4UNbdz3kc/TBOWMUtm2ONXyer1IRCzniBmeVH1SK7:hbsbV335SIqn5EH1l
TLSH
T16603CF36A4989E338DE2A3D6B047B2437FF86067C6840790E9DE2F4E069B59D130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c03fee3930fdac56bd24811f12a10966360d07b9923314a5cb23d391555371c7
MD5 36f226a900867cbb8db0481b9209b8dd
SHA1 8d0988af28207361bcfb7c1bf8d440a0c67210ad
SHA512 bbb3beca8683f14dbd97d802c3de16982dc2e6fcfe1310a43e627da6d215f9b3470903afd8add5e397c8d65cd4eda07ba79757618e84c122f19c52b11d2de48a
SSDEEP 768:2K310V/TBOWMUtm0StRbONXyer1IRCzni9sb9Mgo:2K3QQbSIqn7b+go
TLSH
T134F2CF31EC548E738DE2E3A6B54277977FF4A037D2C85A80A6EE6B0D059796D130B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 336187494b47164a58205ef9025f442973d95076c0f55bca9764f6de3e7a7dd8
MD5 9c55c3892cc583bbdd7a8985ddc5bdc3
SHA1 0274576b79427be400fbb74f2b046947db57cc69
SHA512 f618078b16cf555cb469480457ed1bc3237075d62168c7f377afe236c9adb231c4746a6b6519ae2c4b06b67aaee8304e3a919d59701f6016ae128118a2863e3e
SSDEEP 768:/c319V/TBOWMUtm0StSONXyer1IRCzni9sb9Mgo:/c3FVSIqn7b+go
TLSH
T1B8F2CF31EC548E738DE2D3E6B54277977FF4A037D2C85680A6EE6B0D099796D130B40A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c8ebece3631e24f96e9dabd3f20e7d5feeeb572db66559761c96f66e9cd31561
MD5 0f68a6f521c9ca4c445e07441b747dc8
SHA1 9e5906485a959a3840831c82151f820c4dd3b7ec
SHA512 da916ba51e8e21445c2eeab44fc3a4ec21c0aa80ed24b1acc31f4e0081b39a2b61bac5ae58487bece1e5f12b0af0a31c2139ee2f5ff3446833b8f551d92ed5e2
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5aae52.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5aae52.TMP
Size 392B
SHA256 e6b018969bb56df200ec233256bf539aa13ddbaf6630d13c17c2e8b991cab556
MD5 bedabe2708ca4c070f663babf34462c5
SHA1 5de83f0f915bf94af96f076255c7a220a4f67dbf
SHA512 fb1d6ed6db1d6d137baf683d3242cf54e9254b2554615d04284186e733c3a14c0c5f04afc443ee072fa8db258cbfb16f0d94fea94d0609ebb86601ffb75e20b4
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.acl

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download