18c23f342b13f1c9b6c1123185e903147d1d2e44594f9b99977bda0995da31b0

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 11:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 5KB
Sample260804-nzc95aae64
SHA256 18c23f342b13f1c9b6c1123185e903147d1d2e44594f9b99977bda0995da31b0
MD5 63a77b276808f1bfe37c675bf2161f45
SHA1 67246b6e9d33f41c4fd314ba487f43c2d276484d
SHA512 6f3da031e449b663a70f31304d724e6a33c57bbeeb8e12221596022a78f3e37db9d740da4ac2e63ef73e3f45ffd9dc38f962d74cf3e314b71eb8fe14edcd3629
SSDEEP 96:7EfRfyFtOMtLe2tZWpMpHZJcUCMGnJmdrg8u:7EfctrfcgGnJYu
TLSH
T168B1CC6258F56073119390D57AA2BB0BBF95EA0BC75B555072FC0BE50FCBD92CC5302A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
193	discord.com
210	discord.com
187	discord.com
188	discord.com
191	discord.com
192	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2764	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303178362251594"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{BDF4DA9E-A007-46A4-BB19-D60B74718304}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2176	msedge.exe
2176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe
3032	msedge.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 3032 wrote to memory of 4584	3032	msedge.exe	85
PID 3032 wrote to memory of 2764	3032	msedge.exe	86
PID 3032 wrote to memory of 508	3032	msedge.exe	87
PID 3032 wrote to memory of 508	3032	msedge.exe	87
PID 3032 wrote to memory of 508	3032	msedge.exe	87
PID 3032 wrote to memory of 1152	3032	msedge.exe	88
PID 3032 wrote to memory of 1152	3032	msedge.exe	88
PID 3032 wrote to memory of 2952	3032	msedge.exe	89
PID 3032 wrote to memory of 1644	3032	msedge.exe	90
PID 3032 wrote to memory of 2952	3032	msedge.exe	89
PID 3032 wrote to memory of 2952	3032	msedge.exe	89
PID 3032 wrote to memory of 1644	3032	msedge.exe	90
PID 3032 wrote to memory of 1644	3032	msedge.exe	90
PID 3032 wrote to memory of 1812	3032	msedge.exe	92
PID 3032 wrote to memory of 1812	3032	msedge.exe	92
PID 3032 wrote to memory of 1812	3032	msedge.exe	92
PID 3032 wrote to memory of 4524	3032	msedge.exe	93
PID 3032 wrote to memory of 4524	3032	msedge.exe	93
PID 3032 wrote to memory of 4524	3032	msedge.exe	93
PID 3032 wrote to memory of 1176	3032	msedge.exe	97
PID 3032 wrote to memory of 1176	3032	msedge.exe	97
PID 3032 wrote to memory of 4264	3032	msedge.exe	98
PID 3032 wrote to memory of 4264	3032	msedge.exe	98
PID 3032 wrote to memory of 2580	3032	msedge.exe	101
PID 3032 wrote to memory of 4436	3032	msedge.exe	110
PID 3032 wrote to memory of 4436	3032	msedge.exe	110
PID 3032 wrote to memory of 4436	3032	msedge.exe	110
PID 3032 wrote to memory of 1952	3032	msedge.exe	112
PID 3032 wrote to memory of 1952	3032	msedge.exe	112
PID 3032 wrote to memory of 3472	3032	msedge.exe	115
PID 3032 wrote to memory of 3748	3032	msedge.exe	116
PID 3032 wrote to memory of 4108	3032	msedge.exe	117
PID 3032 wrote to memory of 1752	3032	msedge.exe	119
PID 3032 wrote to memory of 1752	3032	msedge.exe	119
PID 3032 wrote to memory of 1752	3032	msedge.exe	119
PID 3032 wrote to memory of 4132	3032	msedge.exe	120
PID 3032 wrote to memory of 4132	3032	msedge.exe	120
PID 3032 wrote to memory of 4132	3032	msedge.exe	120
PID 3032 wrote to memory of 1604	3032	msedge.exe	121
PID 3032 wrote to memory of 1604	3032	msedge.exe	121
PID 3032 wrote to memory of 4420	3032	msedge.exe	123
PID 3032 wrote to memory of 4420	3032	msedge.exe	123
PID 3032 wrote to memory of 4420	3032	msedge.exe	123
PID 3032 wrote to memory of 4492	3032	msedge.exe	124
PID 3032 wrote to memory of 4492	3032	msedge.exe	124
PID 3032 wrote to memory of 1696	3032	msedge.exe	125
PID 3032 wrote to memory of 1696	3032	msedge.exe	125
PID 3032 wrote to memory of 1696	3032	msedge.exe	125
PID 3032 wrote to memory of 4748	3032	msedge.exe	126
PID 3032 wrote to memory of 4748	3032	msedge.exe	126
PID 3032 wrote to memory of 4748	3032	msedge.exe	126
PID 3032 wrote to memory of 2176	3032	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc32edc188,0x7ffc32edc194,0x7ffc32edc1a0
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,13981812445850238614,15832372373795786650,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,18339106814898520157,3071387311793578660,262144 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,8868347175630281964,17526298707259757798,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,14665579388102416835,4322424138025347796,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,1386932828965359748,14085039207604453625,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,16102701866599996028,5286016020341316273,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,9698330532679703410,11919260447453820426,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16217676366947713842,3673404165517484615,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,1729572341553230378,13391769310109552637,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,12152115151787430454,17533994609437040794,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,12152115151787430454,17533994609437040794,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6276,i,3538812519653729492,16344724467682215897,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,3269609111065109837,12775126587369232865,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,10739467229484713715,9139102883693025496,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,4439931828327371690,14923750639620087288,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,8801286167734072220,16547595727353869414,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=3684,i,11220553687044722428,14120305168657347530,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4692,i,2379607414498225575,4373183794229546668,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,3709438563610111780,10560746529172553488,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7136,i,4210501908981864603,7172653451430900116,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7208,i,752582342224824115,6408200542176064608,524288 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7536,i,10856777133034216976,10918575099595736290,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7440,i,16703665954503828469,2679034380675684046,2097152 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6800,i,10261603622310357625,17233819531107795504,262144 --field-trial-handle=2284,i,670976718972150095,3728469334433514284,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2176

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 98KB
SHA256 067b9e688482c67fe097ca8bb9c7d13b67df1adce4bfc6a4e57b023850507786
MD5 a557da5a10ac87a26369113c8a319b61
SHA1 8f4dfa29a52235108d1e5a334fd974c8c5822d39
SHA512 4fb49453cdff7c921c6e79dce45c9ac2e7aa375d1f23cf0bf13a76311be9cb26dc67265ad3da53bdc2b4064872a791fe14535f01f4f82b3c65e41d70c723733e
SSDEEP 3072:wJ3gHgTSKlhSBytGztPQsOblSlewzPptn:wBgHg2KJUtKbwlewzPpF
TLSH
T103A312D5E6A3F99622737511A8563C9B4BD1015BA080DDB6F88F89003B4727A6784C5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 112KB
SHA256 4b87cbc74f3ffaf08314a5d81b501be6fc36f553dbe446ef5a4b29f0138ba0b0
MD5 aab73283f839e775f9ac86d642983653
SHA1 758608b6e39cd423dd99eec3980f8e8aae0d96b0
SHA512 f4ff27e4834b385c3515dd1781489bdce67ed53017c110fba7008423c7827e25fc023f888fd2e9e5dac33c4a55feb349a2d2f1a76c852ba98e0e319cf1a4a989
SSDEEP 3072:aqdclTFC0PeMsyBt0f/OOpgsTtqNa9H0PxWSNXUOWIMBhDM:aScHC02MsQWAs9H0PcSnXMBG
TLSH
T110B312D369911B940EE52BA2376818DDD936539B390A4B3D55CD200DF48AAEB3E19CC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 67KB
SHA256 25b05fb02fedfc6cce6cbb542030d8ab4e66c10b4d7ed8f3f309e7fea4ac9963
MD5 c6d0f9252d7d9a57f18b99cbdf8083f6
SHA1 fd0c5ebfb986e45d9fbc2ee61a563803e6dd4066
SHA512 745f28a5222771f269e95f323e4161fe2b9cefa2eb31675dd2b23cd33508734cff9c4d4290f57f1221d9ff953d834e2a008abb31df662d3720e23f35f2872662
SSDEEP 1536:QH5HZyBokKeTWIgCgEP+MuMtoVJDuUEMNIbU6eVKwuWvz:Q9Z1eiIgCgEluLfIbU6qfuWvz
TLSH
T13A630218A5EBE63A4B1405E4476A804F37154FBC20AE2E6F88CD760D18F17F59EB8C5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 405KB
SHA256 bb90ac8097da7c793676be5885f5cf00b9e5a27e30a878296c59d1b4ba27bb62
MD5 0af3640643657932c2b1de637482ecba
SHA1 363c3fce3a60b5a7149203ef63197f6abfafa9cb
SHA512 cae198a924008b8171580f9753b9c89e629875359b354ce62707e97429dbbdc00121af35aa083c14944cf274b60c1d103a123df475b8c5914834e1067ab5273b
SSDEEP 12288:ube26/DCSTYo5pgiLGQ8ktPC5SRP8l3xri6gXc:uK26/eSVx31t65Sp8rVMc
TLSH
T1AA9423D595D7CAD1DD9B04E6CAFFCCC1983072360E0CA1EE1B12B9AD493F96469B2309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 40KB
SHA256 32757dd7cdd69fc8b77e460fcf0b4354d7ba9b12b70b92175439c18f16ecc819
MD5 63f4bf4c9e4b2f5ac4b1c8a9f4a6d20a
SHA1 40d033d0f716458228ff5ae4c623b3eebd7e8f1f
SHA512 ca748a2e7f54c22bea5b6b586082ca9be3eaf1ee199fe56c7245229ee4f73d99778beb019d8eb33f2aff1800a3233a31d506274259cd791dcf82a994120143a2
SSDEEP 768:rQ0uU6UEmqopa8oTvB6vf26ER+musSjAPWL9f3+dvZDNiS+Hfkae76gpGnueZG:rQ0mUha8Hvf/mutjsU/Ux8S+/5e7FGI
TLSH
T18513F292D7F44C509F5DF2D163086CA1A77A2CF5A388529CB5E08F22A49457D018EFEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 204KB
SHA256 6cecd9d23094a6d6fd058fa362e934e59ee88cf18b8d28d94463aac85d4c7870
MD5 d08fae9e07c0509300742c823c8e7f9f
SHA1 4a23a530fba984a427bc4a7ecd8d65ad9957a690
SHA512 bcf04dd2429004b934a6a1a2c0147b491067fcd1aefdb1ca4d6a82bd793e384d326eecfaaea22a55c1d909d88eb79bb2b5ba048b8712e4eefe024ddf663443fc
SSDEEP 3072:j9fIuxjgSWQqvGXj8Ui+WU1vx7FOnj+tu8VCJCI7im4h4LPnFLBpvl:j9fImWQRjGU1p7F8+tu8VK7i5hgnFt
TLSH
T1012412796797B03DD6BE0788B4ABB833106D1837CD00553474894BB73D1F2B84ABE569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 128KB
SHA256 0825f050d4365e786b136532ff665fdc5f7aea536174b37028c57f0ae48b269f
MD5 48ecc5d2315ff123241c0b4d0f34a91a
SHA1 6a12e180f691280512127d28abef74f9e2fc045d
SHA512 beb7516b76184ef936fdeb482bfcc2a2777c1e5460a78531847542b6ca077980a6297d4e26f7bf230c528cf8b6d44f8be1cbff47da093193b67a5e16efe34698
SSDEEP 3072:FEJlk41bN0vbRuAygSqCc8KpEsILReSHW2Hkv:FE+5yg5Cc1pEsIsgQ
TLSH
T1B2D31674FBC3D781CB072ABDA43C3E730B5511D221C90A1B4A636D52A544FBAE62763E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 256KB
SHA256 266387d6179d8cd4661ef22124dc479059fe8e40758feb4022b2cca865cb654a
MD5 fcd6fe1438e4149e6a7128144033a8d4
SHA1 360237dcd048317694abe16fa8d8e9d0445969a2
SHA512 24b22bb6a1388315f42f20495d5593da0ec537840f9ae46e4cb71cb090f1611d341492f7cf091dcacbb8d85478f4e4e51e45801b505708bab2e597717fe07fe1
SSDEEP 6144:fc89w5sS4So6X7GUfKyxW12Hngz1DwVETKG5:fHQ48XViyxWjZ3F
TLSH
T1E6440250FB564388DB032A36E4583E671E626AD530D37A0906A4BC12F81699FF33FB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 256KB
SHA256 7cf6db9eed43b81665629edbed64b5a629e86cfaa0bb7bc644721687c5017311
MD5 f00ffa59a6f24a79d0a38984f1d1c667
SHA1 9c3ea96bb40c2ddce7d7033914eef469aa562c4e
SHA512 b00e01b45fdba4e8c350c7f27080f5f7bc3d66ca31b8acf702719afd529db4a153451dfe3957d1d72aafae48e4c0bcb16896abc66adc347414197c6386da17cf
SSDEEP 3072:RPm8oBF0z5yYNKxpATjY0DxYK3k+zkF2WNlkE:RPm8oBF0zMmTjY0tYMkWkFT/
TLSH
T19044D0B4F682D782CF432EB8A06C1D335B6614C432C99E0F47B29D21A5486AAD71F75F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 28081e28aa87ad570bdf98b07f25102592dc065395d10abb7b3ecdeb9f4b6c81
MD5 5bddcc41b36c8b09b1401d188d2b80ca
SHA1 6cdf29e1f2d437c59266a1380bb0ad2daede8abd
SHA512 7f4c6fe65dd920c9b6beaa1d5c8f6fe26aa1518611b2ff97f012a24b8cb7d1a2221b51df00ddc1ca159ff4998535078095fb66c2cb8e45d9800f03f2de627a45
SSDEEP 96:KH7m/INeZwj2vpF/uMEZhpB5w7pax1Aki8A2SgPGWB9bfwcwJ:KiwoZwiF/iZLBi1axri8A2SgeWLfwcwJ
TLSH
T1C9F10EB0674090B8FF1386729EC946C63E3148F6FE777FC510996A7098B6F710A1E64A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59ea08.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ea08.TMP
Size 3KB
SHA256 43d46a5e61df65743980fa1742e5b8661096e72513b3abc8ee8f081099945aa0
MD5 68319011c005f83b7e1fcf24f10ad01d
SHA1 f4e16438d3e1ec211e8afef2c42be7a5ab370596
SHA512 86be021890971bf5381d317cd975bff606f2fd3f8a9fab5104f0a6ebbdbc1d424d7db110562ef8e7b00fdc1f1d36f9064588dcb48d94363a332ac7c1f7b747ea
TLSH
T15271527427018054D7670832CFC912EB76368AEAFCAB3E8511F2BD74A121F328667B1C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 efe86998a653237eb3984759120ee1b41cd8ad62c75422bdd789467f9630c357
MD5 6d58ffe9085acb56de6c1bd3330d101b
SHA1 737a673563b971208238bab099182b9baa235848
SHA512 eb71231a420c41ab269d7f9a2a7351d2719f3f786d24c7b9b468cf8d56e140382022f1e862791b7ccb543dfc1d7db4fa616468d0f90604a3643c490806fd729b
SSDEEP 192:DQxfTGnHzc1qc9Z6LNyt5YzpfGk4G3tZXXZu7Noo:DQxfTGnHzc1qc9Z6LNyt5YzpfGk4G3tS
TLSH
T148D1DCF7C3E5826ED91152F0AA247E1BCE1D0946436C3C1AC5E4AF1BA3F2871E151A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 da5d0a5ad8b1d03330141fbeae125dfccf7398f252f0da4cf486d4c302a70f80
MD5 5e5b48d5f875d3b2e754630665e35e46
SHA1 b09f09b140836549bfd3830382a05064005d1699
SHA512 bf44d686e85ad2effae915a26c8b8f4763f57ac87e824aeb83b31a79f05f2adeb039a3e0bd741be0d81b247e68c58c215642445b42a3096661add13a4a188e3b
SSDEEP 192:DQxfTGnHzE1DT5Z6LptZXXZ1Nopgkf75icNPztGtcgmi0v11x:DQxfTGnHzE1DT5Z6LptZXXZ1Nigkf75f
TLSH
T199F1DCF7C3E9826ED91152F0AA147E1BCE1D0946432C3C1AC5E4AF1BA3F24B1F151A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 8284c176557c525a83c8f8e03e5158842f6e2d5114d5620f72adbf53b9c5a009
MD5 a6ac8872f3cccce7a58b7b9359d186b2
SHA1 dd79f835464088691b68b5d3218411f6292a6c44
SHA512 c9caad42ee734704419b6490d9c2b7de3b7626eff3c0ad586b4b603a7b73d4cac3973636859c796f2b3a3c2164a187f92993c0a1020bc68426fb05ea0a6f7860
TLSH
T1F3D0223B270430B9A6AC7E8154AAEC8FC72B00280842DDD620E0A898293966C05CB280
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59c9fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59c9fd.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 322e095d26303d0f829e2d9cfd8e6cd7eaef17da84cfdb09de6402a0db77c90b
MD5 ca0453afc51d5bdf9d6656ecc1951b50
SHA1 6a3a3ae113ec44e1ba9544ccb67141fc92a9fd13
SHA512 2b9d47b9854d4656d9dd08eba9659bfe6d17d361d75bdee0f369b9a1b4d40a8dd687efad837bb2f66bb8c49cd588a008524018953fc43617cd7fdeba7effb5f3
SSDEEP 192:sxZFR9yM/jK1Ml8Mkn/fVslimhVhIdpd5HW6+WNGYvrrjY9IgrJ:sxZFHMn/fVslimWbHbGAe9
TLSH
T18A42E911AA34A977CCCBD20DF955BF53D6F91472A2900E44AAFCDA1C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 ac45a73269b7ae2181d136ebef748ad0a61443f2e6ee8d084009979cff001565
MD5 66c4a752ae14663e207fea02ad2801fc
SHA1 a5d1125866e34c8111e7f2f7c53bf96e06b15b2c
SHA512 b7ebfe554fb3addae5329a46a046e4ea74a2d996dc07f5725b0b69295c4d8a73dc9e6a4eb151f1b9bf16180f8fd86d282dab84b80873397366edad15fd0ba55f
SSDEEP 384:sxZhnUHqim1n/fVsTiyRcF2nHbzeI/FeS2vHv:sJUKim1n/fe32wHbDFP2/v
TLSH
T137A2E652662088B7CCCBD518BD327F62D7F514A3CE514E5CAAFCC91C04AA6FD261682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 d95b1bc56c2750d0e3b33c5515c90fecc3b14550e0f697e24f995b7e6ace6d6b
MD5 b602987a8fc125f33ca2335a3b770ee9
SHA1 435193bf0c6e7cc3731ab621a24115ca12e10e8b
SHA512 5bb6b16b3e145847394e518d7f8178e3a00888b8a32c0006974f1a291134991ff7bd86c14d077443195744137ad089e5663b7e4f69d1f5a1e4aac907a46719f1
SSDEEP 192:sxZpQUnDWR9yM/jK1Ml8Mkn/fVsTiy+V05lbCBkddpmUHcHW6+WNgCgd7q1b/Yvq:sxZhnaHMn/fVsTiyb54B++HbgI/EeSm
TLSH
T15182F91266209877CCDBD618F9227F63D7F91463DA514E4CAAFCD91C04EA6ED2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 67bf3eb6767dbc765be421b2922295f102369392cb4b0da0cb2d569f2eb37b84
MD5 ce77d8e08fac401ec730df862e80e09d
SHA1 147c9d59f9fa3e9faab448e688d20bbc8b9afea8
SHA512 460bda3d03edb5d986dc91710787ea4aa70085fc30d4a27f6ad457ed45172d2e3faa47f47614bfed820e4dd05eb7e4df502d15be93351361247a2d16740169b2
SSDEEP 192:sxZpQUnJR9yM/jK1Ml8MWOn/fVsTiy6V04lbHBkddp4UHRHW6+WNIAL3OCgVi41S:sxZhnJHuOn/fVsTiyP4lB+pHbze/HeSm
TLSH
T1FB82F81265209877CCDBD618FD227F63D7F91463DA514E48AAFCD91C04EAAFD221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 e714f575e97c9ae2686aef0a94d4b6478a4e3f79d1b19448673a9c22584d63ec
MD5 fc579a9ad7410bbe25af79e2a90167ee
SHA1 334b2ae41559b791c928e4d3cb0f0d7cba97d6f1
SHA512 92a36a67528abcd7d9e6a6080d712decf9680975ff467c6d4a9c5f493cc55909e4bddf0ace64ec3bc10306ebe93557cef5199da88d376dc95133e5b94bfd5a7d
SSDEEP 192:sxZpQUnDpR9yM/jK1Ml8MWOn/fVsTiy+V05lbCBAdpmUwHW6+WNB1b/Yv1hjY9Ik:sxZhnNHuOn/fVsTiyb54BQmHbD/keSm
TLSH
T17582E81266209877CCCBD518F9227F63D7F91463DA514E4CAAFCD91C04EAAED221782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 00e88f77235427aca7040e75f8e417b484e9bd8dc507038910683a035588559d
MD5 51b4c9979403fbb8a62b8fec0a969090
SHA1 36f90687f7f3923fa393c4a942df57dcf9653417
SHA512 aece28171962c0766ae3b517350428c127ed5a6c6ea509dd84c562232a40e4897a75082922a0165a5971e86f83854b2df9132b8292a62a7c28f938e65396d5f8
SSDEEP 192:sxZpQUnUR9yM/jK1Ml8MWOn/fVsTiy6V0cFbHMddp4DHRHW6+WNIAL3OCgVi41b2:sxZhnUHuOn/fVsTiyPcF28Hbze/HeSm
TLSH
T17D82E81266208877CCDBD618F9227F63D7F91463DE904E58AAFCD91C04EA6FD221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c8c040a786bf3008e1362797c83e7912b460647264f87d3b4dd832bff8de47eb
MD5 a193529384b7119fa3779e90815ffeb0
SHA1 c5110473f361fecf57bcac3d6c674a704c245893
SHA512 f65728150823617860ed2a30cc1a97dd0c2d81fa7a051c05b2605302c3bb7c272da6c5530511b701ad27c404be32637b137e3293e9f3f3d2dcf54223c10fa204
SSDEEP 768:0OseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppproLO:0OseJ3xWvhfynu1jaVcL88pCq
TLSH
T160D20B2B280CCB7E4F844E5DEC2A6F966EE801CB57984D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\623cd082b6202da0_0
Size 61KB
SHA256 d8cbf451843a5cd36a4e023212aa87869e766e8d006d70174efbcd07e8cd8806
MD5 0933a1e1cb5f5d8a5806b6b8f33c1fce
SHA1 aac92a1e3e0aaa485a93d334fbc56bd4a4c046dc
SHA512 5911bd73fae69502d5362b786a143fdec304b539939424c304ce76037d57e2ee5b9349a117c87ff92115591d2f5f730f9b5bfaa44b1f942740486613c4712ee8
SSDEEP 1536:PsmRP4JfCS+ksYyiApR+M0Dpbarcj4y0Q/SH5HPwqpzGw/2:U+48bC6Rx0DNDG9/2
TLSH
T1125329A3A162613687AD21D5A49A7F00F11B17561844C9ECF0BD66913F08ECB67B3BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 56acff88cc807c2e6c68cf706c99eb8cd2368dbb05d9b8abc49a208d86c4732a
MD5 51e1926ad94b17bb2f204e131c938aeb
SHA1 284f0d0f9c0411fc43f8c7aab578069c904748b2
SHA512 b57aadaa27cf129fe0f39959527be68395ddfb15bb158d6aa5b5feca6d237fefd81efb6a0caaf4b678c0f7c79a7a8facc24452dac0aa2e13d29866438c777e3d
TLSH
T1DFA0021612A93001D16B62F2A7E61369A2608EA44241D726D594025DC8E175A494200E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 f6b3efed605e6a007cc4cda96296d73a36d67b00a6ddc2a39b126f141f58b0f4
MD5 ff7c1b18fe58b9dbb6b51c22ccd0bd49
SHA1 01000598cd834aa9cc3f71021bf21cf227eebc53
SHA512 1ea4653c10a61e68240f4e0379b324a0d15b21e8685a8a3cc3bdca25cd5c0c5d79403ad77b7ec5e8f9c845eb6e493c0a5b226db29db7bad38237b1b80c89dd87
TLSH
T1F3A0025452803051D01313B366EA01A56A348EA50301633545D410ACC8D17668EC200C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 c32bc73703a651235544798b17149ff2d1cce1a9eebc373d9e34f986392608c5
MD5 7b5de90e344926082d00b40217287789
SHA1 ac5004b0d83d977c4f533a0fb911514e156f1171
SHA512 491254d03125565f1fa59177d746b0ddc115bf60a6e9f72dcdaebd3f5190c1f53983ef1cfb2d5a8741bfce357da4592b19059e5e88f67301b65b37dcb50c7413
TLSH
T133A002188B800105D01611F2255303511704D8B02110134B48D51544CCA18408E4120C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\45dcec6f-aa01-4d60-b08c-c87ce78d75a5\index-dir\the-real-index
Size 72B
SHA256 f22dd6825bff24a1349f49ea8fd679216b85cb1fc02232d04fa255216260c62d
MD5 2d1ad03cb7d54de3d212c9d744b19d86
SHA1 5a63c7da19f8d21cd96514cffef47948ebd68a4d
SHA512 0fddee6252fdafa9bd69f267da4bf94c4d7a374c72230353cb1bd29843accffb830a17a6d5d46e72a48744080b295ba550a5a3ecbe18dcfa93f72014c412c69d
TLSH
T11BA0023172E44062D0120BBCD54201502714DC39011D47474C950C69896D66C8D61164
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\576b51ea-4ee9-44a2-afd6-e08ac886188d\index-dir\the-real-index
Size 72B
SHA256 0763b8ee4252a6f40172ce467a1c6c565816781f6a570a988c1958e6b6c41ba3
MD5 784ffc7c2cb5d8c1a6cbbc14b6721ea9
SHA1 dbc772cb902050f9d0b8a5d6da1eb6d46c99ad2b
SHA512 f7bfdc07c4d0d7c0255823af780f5215f8597359bf2bcdffac7625d997600b99bd5a7ed1b1de213f45e93a0e3544912eccb6ce7cf9601e5ab1b0de9c5f715924
TLSH
T16DA002504570014DE5C303B4604B42DE2A5459A4368217215699B075D8905515D9D539
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59aea5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\576b51ea-4ee9-44a2-afd6-e08ac886188d\index-dir\the-real-index~RFe59aea5.TMP
Size 48B
SHA256 8560e3fd39c329a7ff0ccd53797162db76966dd980268149726663fbd5f0f4e6
MD5 f13af58c653dbb4995eb0c8a6755c1ec
SHA1 e8433b2ace9bb08ad3294d092378440fdac7f96c
SHA512 c127e132f7a83fb1971a836b600d7ca73fceb574d737d9daebf6715ae4b1879c8509bc22c83d1c6f098de1380d7c8aa969661c8a4e93d1a097645a03a4106969
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 3KB
SHA256 1c29bf1dfad813dd3ef960936aef55e8420baedb407f22556f6e6c2659980c95
MD5 86a0f2cdc179e4db93c9604f6cb5a841
SHA1 ecb1edcaa5c3c2cb47f210fcbe19b8ce4658be15
SHA512 404db3dea928ff482a712b3e37e713114dd390de29827b00deb6a1b1879b7b84ea2ad9efaddd6607a9fb82fac97b8ecbfe278ebe326a92f0844050c6a495aaa3
TLSH
T1D651F84E8C8A1DAAD9AD14B26DFB1045337A58EE4685DA0F669DA0303CC336A2E54115
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 d981d80f64d7618f11471e1b33d129d875a7248e34c4ae7101f00880ed9ba487
MD5 603997d41bdfdb660873e2a1dab3e61e
SHA1 84ad5d8e207b6a58579bab6ba02c994b7cd55b03
SHA512 e3ecea316e5429d9c87759e01ca8c741312c593b2952136f70b6d85b62216968fba8d0332afddd271f2b0396248f4f90cd930502266aea3a64f82f1a7f8911e0
TLSH
T1CEE0C0B62DD72414BDAFD3D22030C090064A749CE941FC4E941BF6C3107231530DBC35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 56cf019eb3a3ad7ecce799788c22cf0ae25522f90a5c7cef39a0f884fb91a59d
MD5 7403da3a9181a12da74ca45c2852b0c7
SHA1 7aeb79091e04c6cebe099ffe59c8e01117e5f20e
SHA512 b1a7631e0db84a20e4cbe1f6eb46fdfc9037459ebdd8ece01a97916c58a1afd8a0b9628daebd78c633662e9c277a34531e63bc99c9002c55174ac3da05e7c92a
TLSH
T10EF027772EE72814B9ABD3D6203080610A4A7858D551FC9F692AB6831172369309EC66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 91399f7ae0a6a8925837199835a7988132e1ad22b2adae4172dc139e81075e83
MD5 1c5446bdf945e84fdb605ff4cd236960
SHA1 266679719f886ae3fd9e07bb5bb05eb4f55d02eb
SHA512 bb0f683c37a033be2fb75414dde0430fd31e5357b7c7b02f8805c29e93ee4898250d0b6b9111ade5b33fdb788775f5f510de77cd964869140889fd9d637697e4
TLSH
T111F027772EE72814BAAFD3D6603080510A497C58D941FD4E692BB6835172319209EC62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 0fe4e190ad901dab937cc8824233069dae0ad0dfb6144f406aec1f4c16063826
MD5 585183039b937209a4ad472b160885ce
SHA1 08375111dc6473d8ae356432a84547c9ed08af2f
SHA512 699f42b7d5652e33a9772bcfcceea62cda8655456bbd4facf34e29354e96bc29f3e8d1fddee7aff83ff712e53a8e5f9df33fb78c7946daf0be6a7ab339b7a7c2
TLSH
T13CA00231DA6C96CBD10352B19066128472548DA87605771150BF2354C86C14855DA109
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f47d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f47d.TMP
Size 48B
SHA256 419e9efe54c7977df0ecc97df5ac684b30491e5ffb87cf935b82bd48176272c5
MD5 b5df17a27a97a95e0699a66b75619a6e
SHA1 8d8e60ef10cb633dc49a9535d93099f38548d1fe
SHA512 e3ec36ee9a1389c474d3f742cf210457d0b5b4ef10f23def1ca4206d14875cc34d7cfa6c17f0887fe2c5cdc44d51df73050fa5826c765d15811f912369ac5b38
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 852e426d7304896ee6c1e77e61fb0926905b5214d957038ec29f414197a7562a
MD5 c7b2300970be660cafba6117b6b6d4bd
SHA1 a95e5c93e765f24069e920a93daf9eb0ccc361e2
SHA512 e1d92808233b91e51ca0cf6f4e1b8424e81f8b6cd5c9d11cb133029ecc60a4452834f6212b444dff6287ca3d963786f3381ef833e39d6aa82cd20e63c32e14f7
TLSH
T14E816013707F07412DFE244CA191AA360A4275A73514A97FBBBC90661EABE440EBCDDC
MD5 SHA1 SHA512 TLSH

Submit Download

dcc19ac5-8c3f-425a-b045-f9f4db089e5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\dcc19ac5-8c3f-425a-b045-f9f4db089e5d.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7ed5398158c71b30d596676d5587e0fe262b0ccdee7895535f3e0295fcc76e9d
MD5 3173e0bb9763834ce843a788a4c159ac
SHA1 67b9c25e6d5ef2c9f9424e9c4b2ede0b2e5c70a8
SHA512 f4a7034babe5cb3e241e9c069f77d6453d3ea39c3db45405da6e06c5ddef3b4671537d755c487a60612e100001f8ab30c690580bdf2891c5140a344702e83dc9
SSDEEP 192:upwrLsNAxQWgSMV5M7Ew5QmiU1OzW4MTQj+FdLKKSnGNli8z1/qQUMZ:qUsNAxbgC7RXS5kdeKS0lbzUMZ
TLSH
T1AA423B32ACB46C3B59A7B155F04B36136FF0516B9AC52F64E6DD6F0C00DA29C131B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cc754cbc734e154519788bd1dc3137b7da7ed0fc5552a17a487d4260349670ec
MD5 594c4cc257d77655c6648fa3fb74974f
SHA1 709f51841be9ec273a74df1d4cc2339d4c37333f
SHA512 87b1fc513b5f7c41c556fc99984645c199e905b5ceb9b5ba6a281113bc1acea526d6886eff8bc77ca2fc06f2886b3c513b2778d44ed78dbdfdecd6654e41fe18
SSDEEP 192:lONQ6vMtPQmiUykNThTQj+FdLKKSh847mWU/u:lONQ6UtRJTbdeKSJNU/u
TLSH
T114020835AC786C7BAAB3BD46F48A27171FE4216BE5D01B54EAE92F1C00D765C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 c60a309bb3a9e0f52ca6c8e845b212f5ee9a91e5ed8c5d2f1178932bdc245dc5
MD5 674a605d80e9648747d225bcc52310a3
SHA1 9138916c87cbfd7ad24fc4f22d47835ce1bfd742
SHA512 38aa9af85e96848aa15b54fd5fa0243c1c04f4d1128081fa67c0586a5842b5de88c29661a70902b20332844f04c2d8ce6294769af299e02de1169587b629c4b1
SSDEEP 192:upwrLsNALqTkWgSMV5M7Ew53XmiU1CzC8BMTQj+FdLKKSnGNli8z1/qQ6w:qUsNAGTPgC7RlWKC2kdeKS0lbz6w
TLSH
T15B424B36ACB46C3B59A7B246F04F36135FF451A79AC06F54E6DD6F0C00DA2AC130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 484d265f6b17e29742f5a3c936862ca827e8264e781a8ddfe5ae239ddb819524
MD5 5314d70c705af328d39267c5b29e9cd7
SHA1 cc1cacd900ef478d9e5ffe4609d06c52a403d513
SHA512 d34243e57fd179e28fd578c24347d3e752eb1ae6b8795c46ae0cb41c85682abf064f59061378ce9a97fee7886204667ea96e44ae2c514a32a07bcbb6e1ae90cc
SSDEEP 384:79ZcIhsNAdTPgC7RlWgC2kdeKS0lbz7gM:7lhBD/C5Vz7gM
TLSH
T1D9726C725CB46C3B69EBF246F48A36135FF4A0A7E6C45B50E6EDAF0D00D9668031B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 ea05eda615f15c90284ed10020ef40573343411c19937360e6d2cdcaceb56e5b
MD5 001e0b7fc90f2c9f4ca8b7b3210f805f
SHA1 a827c75caf1950eff4042f30ab0677529218757e
SHA512 6598dc4a04c917ee697833d297e8245dd6032a8d31cfdee49ab60af8294a0090230d495acaa757274258e4795d0f7302fd777853d8c79cdbe2e52f2194885631
SSDEEP 384:zRiFiZcIWzsNA8TUNTUlIldTPgC7RlW3dkdeKS0l1z7gM:z4FQm9wgzDs6nz7gM
TLSH
T1D6B219F248D7883BD9AEA747A77D2E124EBCD067B5C09650B3D95A0CCC9617FC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 67feac37205ddd609765ddc3cde28739261eed083d727b4900c0959435e6ce23
MD5 87b35d2f939bb325ca1a099d59ead150
SHA1 dfcdb89b359f42ffce3fb1227e446791e483c763
SHA512 d157ac65bd940e11e82661327083788a97787944ecc40dab2a9481f84031fdc8e3a07d1948b4e3aa4d6c92c84bdbf1a93580bda371cf563c1297edbfbc5b1d91
SSDEEP 192:aRONp6vM2PQmiUyDN7hTQj+FdLKKSnGNlo80I/qQU/u:uONp6U2R87bdeKS0ltzU/u
TLSH
T148123C726CB4AC2B5D93B156F08B32135FF0916BEAC46B50FADD2F1C00DA65C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0f029218bb6e8a4c4557d74d88e038ab883edc148378866cc75f5018d9036ca4
MD5 5fc754215d11aa69bc6c4c728c9246b9
SHA1 5fb4de6b3b79151c40e7419157f9fb982ebfdc73
SHA512 d16a57356721e80e279011e3f502af963ed3cdc915fb5cf69f8668539b808d320a0ee2704f2d2b2dfed69d915a0d753540b9e32a3c456836c9abda9f0b0540a9
TLSH
T149E00922970010BAC429233540C71B202BE2C06102B2031B4E3011682D733493E30E94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c7c859f7baee9d469e17fb94a68fc99384ed3241b547ff8d01106caf9d2c5096
MD5 48992a9c4b2df916436e7cab1c38bf38
SHA1 8f62553e524f66771403eb15f83e876775703181
SHA512 9afb09ad878513fe86102b5b9f42ed3f70e378c4b638a86547b7a4e7c88ba6a2b255709a43c1ca56a6e8facb511a08b0cb4e5f7d2ed50d7633a9b450bc3fd78b
TLSH
T167E00112970010BAC02D233140C71B202FD2C06101F203174E3011682D733493E30E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5937fe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5937fe.TMP
Size 392B
SHA256 3a2558d3aa3a589e25dc9e4760b049e072d128b872c7e008b9bda3269ea442f1
MD5 057e3315276a0a3c175ce519854f0995
SHA1 8dec35eb81c1f883f7b33ad77c830b031ce48b52
SHA512 041bdcf15e53c0eb664ca29d4ccc78cc92ede9464bd699649c3f1092d72027aae989104cf0bfb8534b28d4ab173a564cf797b871d9ea0066beeeb943eb05f602
MD5 SHA1 SHA512

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 83fb7c1ab940c27562402cf52bbade1270c9ecb78bc9a722a013781234707e3f
MD5 d19d0061b212798ad17e1f6e801e0770
SHA1 3c7792486c769580e2f0fee70f677eb5292fb9f7
SHA512 0462c7d9d2fabd36d75cc7a21d49ab147e8f854b240a9e99d7a7e28505c5735671ee71ec659529c0d31ed971a9c5f3db6dd4f0a738ed2fab81871610706f7cf7
TLSH
T1DB513A450AD112BBABA7BBF00E4195CDA32B3B0FE2E994CF54D048B465738A355944E8
MD5 SHA1 SHA512 TLSH

Submit Download

b98453b4-0423-4554-ac89-b316325b48ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b98453b4-0423-4554-ac89-b316325b48ab.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d35447db7caa83ab30d5e6bc5d88d70218ee0001a5d5fd13563ec317098503df
MD5 b42902a3dd1d3925ca04d981c10df4d3
SHA1 dc1c087fb3b0d610745faba23c68d8fccf4665e7
SHA512 b7d69d3247ac360ac2ec7c9f17e3ac86c778895ede5d99aa9cca92569698e645eaaba231c2e77e2eee72c353af433163049848d88873d11f395bb190ca41a9bd
TLSH
T19841FA68A6F91148B3B77F59ABF6A86E487FB8773E06845E00110D4F0A62E41C861737
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 482adc322fc6fc4a6be0b0f611e5bd4b8a9676640ab2a58dc5300d898efd850b
MD5 fa090a5d0943da18dfbc293ea0310016
SHA1 7045b6b763efff96fd389f42cf97cb715c4d47bf
SHA512 778e077a49ec6c3ecaf54f75f5b55dbe8313e67ebbb987e996c654cc73b9f1181541b00b69876837582a0f681749b1d8e8aba14c75ad88c20268ea704fbcb2d3
SSDEEP 96:4+QccJJ+IyDwz4cR0NcQnJJMukR3iVQnJJrukRK9NqQnJJnIukROW:cPo28J6dJ5eJBID
TLSH
T14902EF046BEA4646F3F79D72A9737761EF36B90A5E145A0E5280810C1C23E44D97EBB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download