ef5bf2de5c983caf575a11c4eb57bc05c7e6dff57465b0289bd7460e61bb807d

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 63KB
Sample260804-dps8gsfk6t
SHA256 ef5bf2de5c983caf575a11c4eb57bc05c7e6dff57465b0289bd7460e61bb807d
MD5 327a0391516feb89b6bf26b8ae037535
SHA1 17d1d570574e3d72ced731e9cbf6a14f3042c0e8
SHA512 a2d4596ae8d56e755a4cdc1c389c7b09d7de673adb4cfc9a60b5146c2600681a86d716ff2d0b17601e6f4dbf136f96f00c99b9033f18dac9ffa7226cefe5a4c6
SSDEEP 768:M5hHm8+aEzHaVrqs2oV9sbFkGXMI7KUyuatxLqWBYIEY7Nx/Cs:M5hHm8+nHboV9wOGCjttq/Inx/Cs
TLSH
T1FB53D75BB9A241211313B2B9A77A530DB23390438605DE42B6FC439D9FC9F92CD936DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4380	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302867266741550"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{E18092F6-D9EA-4DD1-989D-04398E7D18BB}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5280	msedge.exe
5280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 4408	4448	msedge.exe	85
PID 4448 wrote to memory of 4380	4448	msedge.exe	86
PID 4448 wrote to memory of 2520	4448	msedge.exe	87
PID 4448 wrote to memory of 2520	4448	msedge.exe	87
PID 4448 wrote to memory of 2520	4448	msedge.exe	87
PID 4448 wrote to memory of 4668	4448	msedge.exe	88
PID 4448 wrote to memory of 4668	4448	msedge.exe	88
PID 4448 wrote to memory of 3412	4448	msedge.exe	90
PID 4448 wrote to memory of 864	4448	msedge.exe	91
PID 4448 wrote to memory of 3412	4448	msedge.exe	90
PID 4448 wrote to memory of 3412	4448	msedge.exe	90
PID 4448 wrote to memory of 864	4448	msedge.exe	91
PID 4448 wrote to memory of 864	4448	msedge.exe	91
PID 4448 wrote to memory of 3524	4448	msedge.exe	92
PID 4448 wrote to memory of 3524	4448	msedge.exe	92
PID 4448 wrote to memory of 3524	4448	msedge.exe	92
PID 4448 wrote to memory of 3364	4448	msedge.exe	93
PID 4448 wrote to memory of 3364	4448	msedge.exe	93
PID 4448 wrote to memory of 3364	4448	msedge.exe	93
PID 4448 wrote to memory of 1828	4448	msedge.exe	97
PID 4448 wrote to memory of 1828	4448	msedge.exe	97
PID 4448 wrote to memory of 2792	4448	msedge.exe	98
PID 4448 wrote to memory of 2792	4448	msedge.exe	98
PID 4448 wrote to memory of 4472	4448	msedge.exe	100
PID 4448 wrote to memory of 4736	4448	msedge.exe	102
PID 4448 wrote to memory of 4736	4448	msedge.exe	102
PID 4448 wrote to memory of 4736	4448	msedge.exe	102
PID 4448 wrote to memory of 2988	4448	msedge.exe	107
PID 4448 wrote to memory of 2988	4448	msedge.exe	107
PID 4448 wrote to memory of 5044	4448	msedge.exe	112
PID 4448 wrote to memory of 964	4448	msedge.exe	113
PID 4448 wrote to memory of 4072	4448	msedge.exe	114
PID 4448 wrote to memory of 6004	4448	msedge.exe	118
PID 4448 wrote to memory of 6004	4448	msedge.exe	118
PID 4448 wrote to memory of 6136	4448	msedge.exe	120
PID 4448 wrote to memory of 6136	4448	msedge.exe	120
PID 4448 wrote to memory of 5280	4448	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffc1aaac188,0x7ffc1aaac194,0x7ffc1aaac1a0
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,6945962682953210453,13686721027662052216,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14118171990776649886,14485964322045132184,262144 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,17258846978987172362,13457943509372115294,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,7031365354404819607,12627087367317400991,2097152 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,9278184980620563396,17836189744428372342,2097152 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4112,i,12675137278161656468,16548278224083970974,2097152 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4124,i,3777798512044757052,15578630221768864944,2097152 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:2
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,10829378714153167482,2108861996107589788,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,2949174856069040568,17620479124657639067,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,6158646108098677353,7145484363910611434,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,6158646108098677353,7145484363910611434,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6060,i,11927687577021697878,14958128066992938889,2097152 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,16919805596515493988,17963815808887625590,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6604,i,16692164075158432849,18290422455708096368,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,10967938618091793341,317911241610210701,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,13516214090819986511,14507259926782229964,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6612,i,12246298573466850099,14799729893631309060,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,14653220678767783234,1113015509658870637,524288 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,3874241325387833785,15976170265857252619,262144 --field-trial-handle=2256,i,606042767227348865,12098120674364826470,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1556

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e895c713b499f7261f324b5fdd87824521729acef59d0f511383df5da893930e
MD5 855cd69f46ca80eb69346c8a580ca6b8
SHA1 edabd216a3773be95b50c047ece50793ca1b0403
SHA512 3eba5699e57eb3f6a05ab94cd60ae66b60f73621303363a5393ea34f2b8a556e243a128d41829e64f21b76f4c24cd5978cf832f4255309101adc2b7bbcb1babd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T18AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 72fd2144b4562d2ce4ee750728a7ff038442f836049b105975df4c4ec8ac40f6
MD5 a13c79d32106c21fe60322648df1f1ab
SHA1 2fbd019c7e7fe806d13f1ae39e4da9cad37d6c0c
SHA512 b8f3f0bda2a7501792c7211c2f326232a287b21f6e3332e2a92d0a4a749bccbf8c71b819aa73d24812e244f0254aea8341413465114fd09ed4478f4cf796e6d3
SSDEEP 96:n+gvM24gS/Obd3zxHM5LT5eOV2yRJlyXNBXm6lo0:n+gvM24gqObx5MVVxHRn+p00
TLSH
T1F3C1E718458D60B4FBA59B30E48A0D08FA7246B98D731ED329F4EB3EF52FF924021486
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 bcb21fa6fbfe10d4327da7b92e408e3a6043fa8759c74c7d76f837f90738dbce
MD5 3f6b5db76d1f3d5618e7d99b83385d7f
SHA1 8d4b70158417f7aba46dbf290d3bcbc8b90ce0e6
SHA512 f300dd164c6f43bdcd2b523ff77f417b885fe1d0634d117d80c309f92380952e67905528747ffc0b93cef26cf98129edc74e1cee0e5c6d7c8d516a9d3318d33c
SSDEEP 96:CgvM24gS/O53zxHM5LT5eOV2yRJlyXNBXm6loG:CgvM24gqOV5MVVxHRn+p0G
TLSH
T1A0C1D818458D60B4FBA59B34E48A0D08FA7246B58D731ED329F4EB3EF51FF92402148A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe590d35.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590d35.TMP
Size 3KB
SHA256 74813381c98b87d61663eb03bb02ed14065bfa554c403f82f73e6121234c6b0f
MD5 60271298eb6b41e966bd41fdb208583c
SHA1 f4d5d2058d88f911603674d39f4a25b6f860978a
SHA512 f36905aa3a813015977733ec4a8a832cfa4f87cc1ed0f6de4bf12f522d219f1c19064447e0b64eccb4abb23aecf972c22b21b5828705f0bd831c1aca7ba7223b
TLSH
T1316181091A4E14B5F7651B31E8D10600F9B042B90EB72ED336F8D97EFA2EF23802555A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 cb541f03e1522d23565e702ca12aeb9e5db3585953fe3c38371049c6c4550505
MD5 118a69e760ffdf4d097faf09e109db77
SHA1 6356ff509e2488595173d7d8d09bde618eb0e768
SHA512 f1262f43ddffb26e987e1637fe34cd84423789f0f5ca04ae6480b6d46a384fdf9b19e46a8846c44494b41f3c92d9b6e446be06e6326ae3dea1ab6a1f6ef82d87
SSDEEP 192:DSRiWYfDdmtZ0YqwZDH1zZni5wH7TltYGtj75T:DSRiWYfDdmtZ0YqwZDVzZni5wH7TltYo
TLSH
T1F1D19DB6C7D5836EC81152F09A256E1BDE2E0556423C3C5A88E4AF4B63F25B1E24178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 50a62ab33d51450772b7d6ff3622508857d048a51c2608abdab200c2ecc138df
MD5 06808a60a4eb0eea481cf2ec7d10ec59
SHA1 186c3d3a59d2aa91a356dd1e36fb897ef342f156
SHA512 46b35322b4a3e60a1f85b5cf8d8b9c83527f3c0ded1abfd7498dea31419106e622df63ccf6fcda0bc6f35748c225a2e887215ee7a8279a458ed099dd458d6ec8
SSDEEP 192:sxZKRAyM/jK1Ml8Mka/fV4swuOJIdpdeHW6+WNGYLzXRQIgrJ:sxZKqMa/fV4swuOCIHbGl9
TLSH
T18E4218116B346977CCDBD209FA45BF53D6F80473A6900E48A9FCDA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 2d5fc30c12a0d1101f9ceae12491d05e3aa711705d1ba59a30a31723d513b1ee
MD5 388ac2121372193043686bed07362f35
SHA1 90d5ed9a5f843a1467724d93a781bbc2dd0eb722
SHA512 c7fc18b0ca1971544341d8383b1fd7d55cf1862342311027bceb5a50b2050a73e5f1cf47baa616636f2ec36e404f93e8208479bd6310f5a0dfc3ed49dcf3aa83
SSDEEP 192:sxZGDUn/RAyM/jK1Ml8UQJWPa/fV4sVuh6JVvbNGhdp4ZeHW6+WNBMCXYL427QIF:sxZbn/CqAPa/fV4sVuhSIVhHbzX9ru
TLSH
T1158219166A208977CCD7D118F9257F63E6F80463DE904E5CAAFCD91C04EA6FD221782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3ddc5772865716b8c1e3801d1b76a02c27e94591d225e57a3510717ae1bcbffb
MD5 69b03d8e9cd4c1c9332690b780f3848d
SHA1 06e2c599010d8963281c0e979217e7055331dbc4
SHA512 09f4b366eff9aae1648987204749ee9adaf55476b884dea27a561555e6c1b81d2f235991ac0a7f17662f0d0442a207dbeb66f72084a782802b4cd39f8dbb2575
SSDEEP 192:sxZGQUnnRAyM/jK1Ml8MWOa/fV4sVuODrbNGndpm8eHW6+WNBKg/YLIyXRQIg5zJ:sxZYnnCuOa/fV4sVuOITQHbH/bDL
TLSH
T16B6209156A345D77CCE7D219FA067B53D5FC0462AA944E48A5FC990C04E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 c5a77734ecd266f7b91066a5dbb5a2fae9bd60b592ba54d1e9b04d90555ba238
MD5 7b22c59e7cb6adf89f14174c71fc73a3
SHA1 12fdd83933ce0f71bb599a2267369a40ff5d6a8f
SHA512 8baa6105b3faac55df9d0d339407a3ed0963d1df079e155049c2af35b2e010e81b8f000994505ce072704fb3ee825b83483f3c669354ea5add546877035e4df0
SSDEEP 192:sxZGDUn/RAyM/jK1Ml8MWPa/fV4sVuh6JVvbNGhdp4ZeHW6+WNBKg/YLG27QIg58:sxZbn/CuPa/fV4sVuhSIVhHbH/bru
TLSH
T1528219166A208977CCD7D118FA257F63E6F80463DE504E5CAAFCD91C04EA6FD221782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ca3394f17bfa7a8772bc9f1e68096251e3f77347a2ecfed176f5d312494573a0
MD5 23cb7847fc7d221e02a287596e5db145
SHA1 4b9362a94c77b20cc9934ead1954410ce222dc64
SHA512 ebfb969531b314625021cd1d4658cadbb35bfc9901f0892889145ac32b8e0a410964b60ad175a31a5282b12ae8d7b638c2c349f4906672295c57f1b92dd2ecc6
SSDEEP 768:nHs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNoroRY:nHs6pD1WvxzWju1jahILIsNTRY
TLSH
T1B6D2FA3B680CCB7E4F844E5CEC2AAF966DD801CBAB98895447FA444C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\13435470-1a12-49ac-957a-728112153840\index-dir\the-real-index
Size 72B
SHA256 b81589213e78b24eb3c7a619f3404c2476a6e83500804fbf5752e509f3f29390
MD5 7fdf7b37c98fc065734f1c5d4098b1e8
SHA1 d9997197d4ef236c8cdd1ec12ad6ed26ec8c9a25
SHA512 84701e6de2733ba5c8f850d179d6e73d6ef32f333ac7653d37b2aa4fe679a292e182b69b66d98eeae66f59562ee1751c030db16d4ea6334357805fec19577cc5
TLSH
T166A002216BEA90C9E04027B52057024D22129A508731121756D3B8AD8C7C1424601000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59017d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\13435470-1a12-49ac-957a-728112153840\index-dir\the-real-index~RFe59017d.TMP
Size 48B
SHA256 59ad720b347151e05d59d23e3968f0555b7719e5d0d3e11224044754345f5df1
MD5 2c5ab7a0daee2367a44a7b8cfc940e75
SHA1 c3e64db77bc50863ccb56e3d63ddff031539ab27
SHA512 53f25ef3f1d9f0c31f4ce8256aa5edb046b6e87151e31ad7b87f7b8fbb572766c7b32b9a9ecd880ac586c10bd53b3f937e474ad877cfad7b12d37e5be2836a20
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\70599668-79a8-4baa-bc5b-42404e70b9c9\index-dir\the-real-index
Size 72B
SHA256 bfcfdafb383d7c5c6530c90c236321aec4fdfd7c32e74420dd267c89123986c0
MD5 bcfc7c9e8ee5faacc85e2dbe24916ae2
SHA1 e75a7d2c57a281809a752817fb4c8666f38866f1
SHA512 cbf7e1d60ca993244fae771777805fac278fc4fa89f1b95fff1fd56312398826a68cf2718317a874a5dce9bed1b940cdd017b85213fd6659d6c4cf52767f743b
TLSH
T108A0023521E88165C0114AB8554209B12355DC16511A470698E00C96CC5D65A465206D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 3KB
SHA256 730bc7060094240f1642cb2b305e8bd51e14a7b3174cb1b277878a2fa747fb7e
MD5 7adc2be5ce782e2e682958dbd5d0d0b4
SHA1 983e98315f4639057d6fa4933ae06276ceaf5e26
SHA512 3cd8dc8c7dcc76442746f90401586dc43509623fca04ac0c7bfe42a3302882d7ff05e537666dd08b766519834abebda3c7adcd37db160f96b896bb6f39119e5d
TLSH
T1C151E90E4C874F6AD9AD10726CFB1454377A68CD4699DA5F715DE0347CC333A2A65214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 ba317a8e9b58a26347ce07874687b3429e8d81e6d4f653be81bcfbece9770739
MD5 5c1c33dc4fe88c4f0719b85e6b1979ee
SHA1 3fb32008d40c71f7c966414a1c698113e2f1e751
SHA512 88a299257f855d5c48ff0a0d4005ccb6db18ae404efb006cbc32122e42ab9b3642eb4d0d2b6fd4f19e489c1dd8c0d641d5c6fc44958b91f1d362609e558cb7c1
TLSH
T10641C88C0D528B5FD8A841B31872A49437B0BCCD4A555653AC7C2136BD0776D265B7EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588122.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe588122.TMP
Size 2KB
SHA256 34cad5450d202367b5c733240b29cd34d753263a016c0746b82164aa8d54ef21
MD5 481955b597593dd2f36c7463f168cdaf
SHA1 aabc9da2894a4a415e628d193f9752f2d6ba947f
SHA512 c24143f626e693411c52984f8426c479def50db3647cb72b11acfd97f16d3f7a02c967180464946082f7856600cc4eb3028776b62a77da59b6a89566a5328fe3
TLSH
T1CA41CC5A4E81862EE89440770DE264F47335580087157F4778FC9536A8927AD3E491D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 9e2d74b40fb2421d1e2ba4163a16df4fb4bdfd11fa1de9285f2bda826c67bb5d
MD5 6c4bd629a43f09ea90d94139afe2a919
SHA1 826a3e09f485bd1966b1223a5b036cf10f069af7
SHA512 86307ff48ebb05a4282a494735ff9f391ca65146cbdeebe0b8cf3f36d21e9f18bf4b1172aa4ee693281372be53c1143b7976883b3e801f2766e84fb06fd80933
TLSH
T178A002108BC00465C01362F2176303451340DCA55240234740A1404DEE509488D4505C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 c439d75053aa5be7d227df467309b7fd2379aa669bd66996b8ac536c0d134e41
MD5 2f58068c56fd685a70ea86fe5d192753
SHA1 e3e454aa4117366b950bdd9aec6b867bb3eaecd2
SHA512 ccb8e3f757f07259440fa8be3bfb3eb157530b6077ec2494cfe32e3dcfad1728b81c2ce1ad28e47387090b93dfed25e70b59d6f90238b05ae948ea0aa9d537d7
TLSH
T1BCA0021813943006C11657B626D7056576145A90061557274295105CCDD0B6A455140C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 5be8262f7bb31541f71af3f7095766c96d85cf90c80eb356309b93f0779b3b99
MD5 c2f06e230c78cd16883d035e10bcec1d
SHA1 dca3e8b81233ed7b75733f73729af36df205158a
SHA512 cdcfd0482f01460bc21b1b4bcdfdb1eed4cca2747ce81ac1b48654977e57e509b5309f95399d3d4a489dd397fe24fa08b8ba4f8537a139056ce814a52ae54b2c
TLSH
T1E4F027B73FF76824FC6FE3E72430647105413C188801FD1F985AB59390B031A384AC65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 6616a040cdb215974938acacbde705365fcdfe868ce77ed3c03bdd59bad53bfa
MD5 a1a08889cec1486abf8782c7fd837743
SHA1 fb193677bd1d4a8e128fa140ea2ca643d3c18ee9
SHA512 5b1f40383b46cd9ebf2048fbd84b35950d715c135aeb9eb18202e19d340a4fcb63f188b6a62f3679e6745f06cd90d9250b2348f4001e541291345aa877f2d6d5
TLSH
T128F027B72FF76824FC6FE3E724306471050138188810FD5F985AA59390B0319384AC65
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0ad8cc9f47f847d910bed8ec0e033a89c829eb5eb1230ac722af69ad60e483b8
MD5 264c46d9e56a0b1a0ed8275128192a6e
SHA1 7278b0e71775af4951f982b6e8d3a2dcd37d0d24
SHA512 aaf21c2163ecb482df12f6a0f3bbdab301946930ea83e89f8f54036fc8ecd90ca69bbd9d1c74618504b56ff9b5c55df83d9721fdfa95f3ed0c1a35569700a7bc
TLSH
T1E3A00235D95CC0CDC1844271D06502D46610CC98A615372180EF46A59869580E5EF208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dcee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58dcee.TMP
Size 48B
SHA256 f0a899c48d23a87099cebd4c2b1d25def80b28861e912bd6814bce9c173566f8
MD5 533dcb627d56f1b982c52f90048a72f0
SHA1 25400b345df50163719da0906a51ba205440af45
SHA512 e6520e8b07bf27ddae97830428eb9f05c77d2e75d69519dc2618e7aa6b6bad950eb299644c50bfcd6cec81041306a5a8e996613d0ae5ed0c43548c1200d673d7
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 f5168ce39952121e54b5d49dba25704ae87b6ea5f720b96cdaae534dc09cd911
MD5 f431e983f964157ac9369b7b96fd47ac
SHA1 9326f6eb5961ada9238f3a4316b1b0860ea14a6d
SHA512 c00ef28a3ba600732d083e2df93a5c9d01dcdc81230fd35c3c97c8b1939208a04775f24f893d6f117afe9074341be84e8da3c84d4ae750531bbe24c39fc255de
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFzIVKwEfyI/Kva4bytLIxK8IMn:KUAAKteP+zWKwEfysKva+OLeK8Io
TLSH
T11FB1220271BB03123D7E290CA29997265B82B6633814F42B77AD00725EA7F340DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4dbf6b1-0afd-4df7-a3de-55bd0eec2492.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f4dbf6b1-0afd-4df7-a3de-55bd0eec2492.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f173454ecdedc4ccfb1d831ef579c699556299c8d8c14869b3255106ec6159dc
MD5 f2b3b63eee310f6c2f777eb547d86a69
SHA1 2f50acbfbfc7e48b7741d7c40fdcbf44b6e584c0
SHA512 837b3c0457c326deff37832fa44090a700fb18fa7ea756884adc211495017f9785da5d70b778bcada35af0ca18cbb5c6eff185d56b431ce86c886c4714482d54
SSDEEP 384:KZcIhsNu5p68AzRLs3Aa9sO7SB33BeRs9JKgqijUk9:oh9AwpiO253TjKgqmUk9
TLSH
T11E928E355838AD7399F6A585F587361B4FB88037E6D16F9090EDBF0D00DB9AC130BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 23e639cc52b9975128997ec33e0fda262c6b1520e8a7a2be54009815a444df3e
MD5 7d647f5aee8aca62365db83e505912d1
SHA1 65a1a55e6af4d4e06ef6a0ac4e20905ee6dfacfd
SHA512 8aef591e9c73b6fc547b359a3ed190aafa3d17cfecb7ad652f02fb27e7a3a2d76ea3766f5316b563426d263eed1c24706c0787c003ff83c14365e2928bbae1eb
SSDEEP 384:3ZcIIsNuYpHTkAzRLPdx2a9sO7SB33BeRs9JKgqijUk9:/IzADx3iO253TjKgqmUk9
TLSH
T11E928E355878AD7399F6E585F586260B4FB88037E6C16F9090EDBF0D00DB9AC230BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 73e274daa693f8ad7509f55437e486695e57e2cce558b4816546b269a9686a2c
MD5 452017e7d6c43c41468fb682b9d77906
SHA1 9c0a8dc7f33cf4e15d1705df6afa0a82803df47e
SHA512 8ea3c92328575d60acfd0a2bad5b54f9e9df5d0abc5b33ec1bc1db3f2731a656def72aa482a3c2c0be399e166d47fbb0f9a5704a036af4088ee0ddb92b1ee1b7
SSDEEP 384:viFPZcIjOsN+8TUNTUlIlEpHTkAzRLK7x2a9sO7SBX3BeRs9JKgqijUk9:6FH6rwg3Aix3iO2F3TjKgqmUk9
TLSH
T1B4B28E364868DD77ADF69A85F98A32078FB84073D9D1AF90E2DDAD0D009B49C130BE11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a96fdc1476a9573d7a546b40440ae94632617e289e211986898a4f1ad8a4669f
MD5 f73cae860698a6cbc10919e9ac9a2b73
SHA1 957bc8a087cc6ec19333768fcab7fc1a87dab804
SHA512 a59e491d07d5e513dea021bef4e2b3373016061d4b3b731ee335bb84b7028c5c1d7c98842b106da740443a284e8e6a899bbe2008f49026a0a9f9f578112073b5
SSDEEP 192:qONp6O7+3hQmiUyqWGttb0RO2osgGRfU6:qONp61EGt9sO7C5U6
TLSH
T19B020939786C6CB78EF2AE45F68727179FA5113BE9922F40D5E81F0C00DBA5C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9bcdb89739481ffe794c0a8135c652ccb67cc1a165343f54e3712df87a6c1ac4
MD5 653164394a95199e70662c7978c0ba4b
SHA1 f435cee6595bb378268c20a12ea54ef060c2e5a9
SHA512 b7dc5278da7f3c3211f772c23776f5745cf4f47800ec7011c7bf4061b51781ca25ca4790978844739a942bb4c20dddd526e1491680353a583e0fb5548104f926
SSDEEP 384:bZcIIsNuEpHTkAzRLPdx2a9sO7SB33BeRs9JKgqijUk9:DIjADx3iO253TjKgqmUk9
TLSH
T192928E355878AD7399F6E585F586360B8FB88037E6C16F9090EDBF0D00DB99C230BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1674329c116f627c3d799fe98d2ccb429ba02f341ff292fcc07c8c9dc5573224
MD5 0a05d74b6c161a05f3b637999baf7376
SHA1 fa48ee9637a4fe67ea20889a4cf8dec153536ba3
SHA512 c59b456c36c264a979ccc7d68434eb44f9af083cccc12bdac07ed4fd9249f4a3a606015f51e25f297e97194bd204ddfd5079f2efe824d2f004175ef8e2ba7186
SSDEEP 192:mONH6O7+3iQmiUybWgttb0RO2oSBOcNmq7fU6:mONH6g7gt9sO7SBf3U6
TLSH
T1D2122A3A786CAC774EF2A545F587321B8E694137EA466F80D5DD2E0C00EF9AC234AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bd8efd3d55113f4be33ba979abc1607c5f41abac12251f31d182dcec8366de14
MD5 c3f73e8694c0d94c8db3cdd1fb0f810d
SHA1 9e1971c88fcec067b646576d59e5705c73be7019
SHA512 6fe1a78f56ced3020e71cc75c57e652fa23135750d886606b5b08f61a73b354b33ae0be0539199afd0b6baa8e5ce581ecba212ebb2ef41e37ed41b5ce1547cfb
TLSH
T157E00242920401ABD02403B844C3792029E1C020827302094650017D1C133402A20B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58a5d0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58a5d0.TMP
Size 392B
SHA256 d27d62b9be91f6ced024367741e916c7818d73fd65325cc47c8d68b22970c67e
MD5 197d0cbc1cd7266000fa70ad56f30bcd
SHA1 504d2c45a449140e749f766b31c7c3f501314b24
SHA512 952514e1edc9ce41e4dfc07338ce6552439796c8a5599b27d65ef8fcaaec533173c1b786684c6d030fdfeb9c62caefde4fae74a3710c958e861eb1f95a46ce61
MD5 SHA1 SHA512

Submit Download

1f1ebe7f-8f39-4ba0-8519-02afd9f0cfd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1f1ebe7f-8f39-4ba0-8519-02afd9f0cfd2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b4ebb694d53ee6c6453e20ac1e213860428ac7655c89712aedc75e49611ffba2
MD5 e52554a38c05c41d55c0ddab17543ac5
SHA1 cb1cf9fd8d81b225b1d43399d5abc693bab345df
SHA512 418e4af66353696e33e6a6428add89fd4c52700c029b17b192599aaffb3ee7f4105979dc083d7fa47ef4fc9a043166d787fd68eafe224c0fb73cd7d74d6428d4
TLSH
T156412B98ABF91148B3B76E5B9BF6786D447BB9772E06D45D10110E4F0626B40C8B2B33
MD5 SHA1 SHA512 TLSH

Submit Download