hxxp://Ro[.]blox[.]pk

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 01:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Ro.blox.pk
Sample260808-be85vazvb1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1136	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306246904875117"	msedge.exe

Modifies registry class 59 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{57E9181E-C3B1-4160-8AD9-0FB681D2397B}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\NodeSlot = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000c4c770c51ae3dc01304c4cc822e3dc015be2abf9d126dd0114000000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5876	msedge.exe
5876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1752	msedge.exe
3456	msedge.exe
3304	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2068	2236	msedge.exe	84
PID 2236 wrote to memory of 1136	2236	msedge.exe	85
PID 2236 wrote to memory of 3544	2236	msedge.exe	86
PID 2236 wrote to memory of 3544	2236	msedge.exe	86
PID 2236 wrote to memory of 3544	2236	msedge.exe	86
PID 2236 wrote to memory of 4160	2236	msedge.exe	87
PID 2236 wrote to memory of 4160	2236	msedge.exe	87
PID 2236 wrote to memory of 2072	2236	msedge.exe	89
PID 2236 wrote to memory of 2796	2236	msedge.exe	90
PID 2236 wrote to memory of 2072	2236	msedge.exe	89
PID 2236 wrote to memory of 2072	2236	msedge.exe	89
PID 2236 wrote to memory of 2796	2236	msedge.exe	90
PID 2236 wrote to memory of 2796	2236	msedge.exe	90
PID 2236 wrote to memory of 4332	2236	msedge.exe	91
PID 2236 wrote to memory of 2944	2236	msedge.exe	92
PID 2236 wrote to memory of 4332	2236	msedge.exe	91
PID 2236 wrote to memory of 4332	2236	msedge.exe	91
PID 2236 wrote to memory of 2944	2236	msedge.exe	92
PID 2236 wrote to memory of 2944	2236	msedge.exe	92
PID 2236 wrote to memory of 4468	2236	msedge.exe	97
PID 2236 wrote to memory of 4468	2236	msedge.exe	97
PID 2236 wrote to memory of 4468	2236	msedge.exe	97
PID 2236 wrote to memory of 1808	2236	msedge.exe	102
PID 2236 wrote to memory of 1808	2236	msedge.exe	102
PID 2236 wrote to memory of 4528	2236	msedge.exe	103
PID 2236 wrote to memory of 4528	2236	msedge.exe	103
PID 2236 wrote to memory of 116	2236	msedge.exe	105
PID 2236 wrote to memory of 2224	2236	msedge.exe	109
PID 2236 wrote to memory of 3968	2236	msedge.exe	110
PID 2236 wrote to memory of 4756	2236	msedge.exe	111
PID 2236 wrote to memory of 1752	2236	msedge.exe	115
PID 2236 wrote to memory of 3456	2236	msedge.exe	122
PID 2236 wrote to memory of 1164	2236	msedge.exe	124
PID 2236 wrote to memory of 1164	2236	msedge.exe	124
PID 2236 wrote to memory of 1164	2236	msedge.exe	124
PID 2236 wrote to memory of 3304	2236	msedge.exe	125
PID 2236 wrote to memory of 5588	2236	msedge.exe	128
PID 2236 wrote to memory of 5588	2236	msedge.exe	128
PID 2236 wrote to memory of 5876	2236	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Ro.blox.pk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffdf3d5c188,0x7ffdf3d5c194,0x7ffdf3d5c1a0
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,6634411160171273822,2972171361220508403,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,12642920002790955966,9232904939105126797,262144 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,10618901029778458233,14820664622502091554,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,10001819554985707172,9271915059106665420,2097152 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,9013299677493351155,8392056633369073714,2097152 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:1
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,1426851125999240080,1638525372593884281,2097152 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,11432064846514891236,14822750907699871010,2097152 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:2
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5116,i,11768421955890599873,14537210613493392141,2097152 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,10620469137199471354,2419318103095995657,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,10791684113624715194,783956728111313454,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16238728625415136705,15974911433130612324,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,16238728625415136705,15974911433130612324,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,11172995818537862568,4548697999057822275,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,16706170159440963882,8514305242881841497,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,12752984221264689380,12582993103967302348,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,13440193662759155098,16309261999734719841,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,16018976431943232200,17574819084135405241,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5832,i,16655577657350355484,1830325775003068859,2097152 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,3828472738172650167,4703139452050865962,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,8612797439906994632,10439717176558519338,524288 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6060,i,12540021808127922029,6508258866961963985,262144 --field-trial-handle=2296,i,14684529826863973428,5045610634931082626,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5876

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8d8ecd351f359aa78da43f50092a55081b9cf052235a684da86e07f0a412fdab
MD5 747a27ce8c855325cd24f9df95e8018d
SHA1 94c9415f1560aa52af4b981b0f7feb8a356a0fa5
SHA512 57c76e074301a27787d28be711418654ff00a03b3106ac0c33a737601110713da1e1e56a898de3d283f1a309c328b51a37c5ad747a982eb6d77ffc52586cc2cb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7s:fwUQC5VwBIiElEd2K57P7s
TLSH
T1F7B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 406KB
SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
MD5 9216d5af8ede8d6bad7e05785c4f1536
SHA1 6196a652118779feec14a3c1d560d8a85fb296ac
SHA512 4707760777c417037805268bcd345cea67cdbf895ea01a002a157f9442c81520dbff93cee7047922e1513321e90db2bbc4d62365a5cbe51f308f484d7aedbec3
SSDEEP 12288:O+3o7mAmn/5Y8dgX4V+1iOF8MB/noCWnm3LMZT7LDkwFdqM:OrKAmxDgoV+YlMVn3kKLMZTbkwh
TLSH
T1879423FE7405ADD11AAB541F91A0DF9284D045E178637B997EBF4CE8A84CA27C4C8ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 28KB
SHA256 1aea524818615aae1471a6c1ed36ccb518eb02f28e2cfd0ebfec3d5737dd4388
MD5 057086218c08db2bca3873b36bc83866
SHA1 8c3029874c9932d477edfa76dc4da61e97cab20d
SHA512 68b61846ba84d39f0a581c138976cb69647b865867ef39bf433492269f4d1d43c40db34f65fcc3503da54413d43845b28137a7e10631cba86f374754b18ce408
SSDEEP 384:eLRAnfDgk/8uUdEut+/0tsSiFnt35F12dD/6PKYNS8A+yLqAJdHUQkc8Dv0/uu5v:O+fD/edEOsfnt35IJAnypHUD0umv
TLSH
T111D2D0127BCE70E4FB71436D09C1DF729AEF974B47225C4BAAC9021718B0EB6E610D56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 fb3eca9fbcd334ac8ceee9377958185ceb39b36d4c0bc08e119a49460ad06d76
MD5 e71a6066fac9e3e1fde726567a8e2218
SHA1 1b3c80da2c3c1fee22560174d55eebf7a2253726
SHA512 c5857e18740a3ea0c7434ac1bf1892ff6760319072a05b383924af919ee092371299192d05e0058c0ea656f9e803b5b5f81be094fa7af3588067a2830b8be37d
SSDEEP 96:2Fjffywhg1FsGoWqmrfq4R8tfdbOflY6Bgxah+7ld:2xfZg1y8bTWdRYmld
TLSH
T176D1C87705B283A2DFB74DB962D10F84763649FAF38B3EBE881CBCB26542392411011B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 162bd7a931c24500f3a3ef33ab6648f2c2d0ab08aa0c5ec23bb6b64e4acaf1b4
MD5 1c5e4cc04f3ad5af79ed82c49e9fd0b1
SHA1 69f92a199aab1d469a1d1b468583b6b3042c4a26
SHA512 7aff1a4d6cd4257576a866445f130d6ead3790c9adcb6c9ed04ce67874b8eeba69668f4a945ab668c572e429026aabb0d036e9894c35487b1f1201e0667131d3
TLSH
T12371967701724066EFF38EB267D14B89B03686E4F59B3E7E506C78B656143A3811505F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594c70.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594c70.TMP
Size 3KB
SHA256 d231e30aa7fca72e8c1650bfe562ec811d14eab45d2ff5d1e344277e3b1480c3
MD5 1328c9ecab4005f43ce22cb996c158aa
SHA1 5fe5a2209bad4dc574861235f4cf63503253c599
SHA512 41e1deacae8d6859157ca2eabb121a0fb1199aedc3e8a6638c1cbcb8c9567f2586751970a24afa2daa18ab5e22c840bedbea44fffb2a16027c3561d4928bcc3d
TLSH
T1E171B5770172406AEFF38DB267D10B89B0368AE4F59F3E7E506C74B25A183A3811905F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 d356aab1a6c8f824ce43e3ca4d5c02bdb1d0ee6bfa7729d963afcd6bda9fa682
MD5 e4ead058933fd24c3fbafd2b231e32dc
SHA1 86673f81a3efdaa912d4aa0e6bfae645edaebef4
SHA512 b6ce0292b135c9bbf11f0bcf6d5a1c957c21ff3d1e278b7ed5ff77c1d50997cf3065504df6f80460299c5c600bfcf772ca2b45eb2c58d063cbb3b32b1ae5284e
SSDEEP 96:DpOu/u5ubtIfoZzuuqXuXu7u2wP1uqIuqAfjie/RzGk:Ds4WOtQoZa7XeAfy17I7Afjie/1Gk
TLSH
T182A1AAF2C3E5866DD91151F49E196F1FCE2D081A43683D2A89E5AF5BD3F24B0E20168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 34cb68938c8803bf66c8f95b6133f80597c0963bf89275cfc443c6f5fde1602c
MD5 1430301a47122b1be1419f869be71311
SHA1 1a0321ecf61c9c4555ea2ac9f4915bdf8e0bd0e0
SHA512 1a60d28a81d0ac16bc219db1323ba09ca3778d4fcab0b8d6267644c4bad4d3744aa2c67ce1d991b4e2d9f458047c7af030a98f162dec7b6125a093360de1de65
SSDEEP 192:sxZHRPyM/jK1Ml8Mkg/f+sl11HVaIdpNSHW6+WNiLn/Yv+WJdnIgrJ:sxZHhMg/f+slrtgHbY/Il9
TLSH
T13B52D7126A34A977CCCBD209BA55BB53D6F9047292900E44A9FCDA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 96b7d9943e2d2f78962c97a53330719721551c0fc6efe1127bb33a32caedf8a8
MD5 9b667a35e170872e2b32125c68c4a731
SHA1 02e6c39dc819a10c3f33058925163b1a15873a07
SHA512 be83d7551c75c3352c7140fa3f5b4ec72e93cf9ecc3a20f4858407ff83499ed65fcf5ab2c5333adb8c551d643d603d3c3cdabd7c9094f3392b5f2eeb83c977fd
SSDEEP 192:sxZMQUn3RPyM/jK1Ml8UQRWOg/f+sSJ1lVa3VbIoYJFjp4pxHW6+WNizoAHS+/YK:sxZyn3hqIOg/f+sSfcSvt2HbdAX/plr
TLSH
T1B872D712AA34593BDDD7D219F906BB53E6F8007796900E489AFC9D0C08E7BED2217C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6119adb686c62b288e833aebe62cf415de18a634a911931a26862ac43041433e
MD5 5fac488c89b582f6b334ace6f1f39ffa
SHA1 3427f3d5c544272737a760e3adf4a88296a015b0
SHA512 2bad05f22f52cb9b7f410a410cc9663ec2a81bd42905ffad0a3a16f9e5105be853bcb9764b63cf63f89b046324ccda7d484e9440dbadaeac3b53904c879f02f5
SSDEEP 192:sxZfRPyM/jK1Ml8Mkg/f+sS11HVaIYJFjpNSHW6+WNiLn/Yv+WJdnIg5VJ:sxZfhMg/f+sSritgHbY/IlF
TLSH
T11C52E8126A346977CCCBD209FA45BB53D6F50472D2900E54A9FC9A1C04E7BED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 eea14c1cdd281a204d25e0d71afd6ec14f72f37ab5cd410ab5bf3448dd2f51e2
MD5 d7161420b51d83f7a6d19c0e084a8cc6
SHA1 17ad289433ed81706d0a1c11af39ffd6779edfdd
SHA512 ed29cdc3fd55f83674c589b1a5200fff944f80cd14e842ebf24c42cbe493bfa26956bdcbb6f5d3d4587cecf8fc2c7dd2bf5143fb3b0dc385fa48fee0af768bbb
SSDEEP 192:sxZfRPyM/jK1Ml8MWOg/f+sSJ1lVadsbIoYJFjpmKxHW6+WNizoAHS+/YvsrJdnr:sxZfhuOg/f+sSfQvtRHbdAX/blr
TLSH
T17462D712AA3459778CDBD21DB945BB53E6F9007396900E58AAFCD90C08E7BDD2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 742393ff71e9e0f7f0a826b3097b3340d020d8187c204b768a03ca6c9dd20c07
MD5 07f996c5b3ab99baea18af307ea07703
SHA1 2f0a61120b83125f1ca02162b96df340b8a1f50c
SHA512 0314f964530ba05e9599a3fc68f7204ef40c33b9aca3e46543a787b13a09c8f6e226faaadf901752a0b94bf1adfb158f07a2e9ed841dbfacf9e1d66f6a397161
SSDEEP 192:sxZMQUn3RPyM/jK1Ml8MWOg/f+sSJ1lVa3VbIoYJFjp4pxHW6+WNizoAHS+/Yv0h:sxZyn3huOg/f+sSfcSvt2HbdAX/1lr
TLSH
T14872E812AA24597BDDDBD219F906BB53E6F8007396900E489AFC990C08E7BDD2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 0380cb2e673a5df029c603d20fe8fadf8c7ae5d6abd25d80580997328911082b
MD5 9e9dec98cc513f5867beac0a0e856f6f
SHA1 22f398d724d35b1d2dec744a932b3fab0340d845
SHA512 00a0cb4dc0290f22d08ad4d833bc111363194474137c92833911a6835a57b085479eadccb5e682c47780c08be5fa3c34d16b7afa18b410d587b76b1767a2e50f
SSDEEP 768:20seJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppBropCy:20seJ3xWvhfynu1jaVcL88p6t
TLSH
T125D20C2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA880C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 6ce0a4277d8cb330c99e79fb992db5c3cc6cbe33dd43714d5eced6bd95287503
MD5 75fa7683450c62982ce9597203f40e40
SHA1 68d29fde664b7f5b4a7e8eb49043cebcce5f80c6
SHA512 bd853465eb2b4f87e8897ae1a2b2f683e7925e0f3729f0e7c8de0ab1d8c14a3f76ae7fb83ded4ff7d996c1a060fbd10cbaa52c51c26bb8dda64b4a499ce244c1
TLSH
T1CCA0026A1695405EC42792B43A9605512312CA6817115305C1D08158D9505554D6206C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f766.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index~RFe59f766.TMP
Size 72B
SHA256 ac16bd60c5cdcc2831ddbed075e95aec00f0b20963e96178078e03b908285e0a
MD5 8bbcc2ddd259365f12c344b714698449
SHA1 e8610636e041fad7cec0186e9aa6fe6e3b31f4fc
SHA512 09ea662440f5ec60c3bb1e13d84d8cc3f70c389b47b82165a0eb803ee97d40d964300ac0be8bcdcc56a2f10522f9be6d5932bc2f6eed98b1759f8dbef71010d8
TLSH
T13FA002118B941006C01311B9359303811781C8D0A100135740A54048DC534908E4200C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 3KB
SHA256 125510ca6f41d18ec213b387a3952b124960476269d8387c673ace054c04d61e
MD5 0fcf536894489908434233d27a81fb1f
SHA1 9164a6ab6becfcdd3dc1fd805901613bdff81f16
SHA512 2265c14bdc6ee32ac9e208fd8f2bc3eeb0ac13f4e5c1402da067233f2a3d224a9bd8f31c82bb1236ad7d83b7e66b92c5ae2612a5b05d4a39a238d1d880a86ffd
TLSH
T11751F84E4C462A69CC9C14B308FA5891773D68FE96858B0795ECF834BCC32252C69676
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a10e9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe5a10e9.TMP
Size 2KB
SHA256 e5aaf2dc38fa26f0c2bddd9dc05238cc211ed749551eb1e67510810f50b405c9
MD5 32fe76e295228ed81ca5eb18ca1ad83f
SHA1 95dcc716fbb87aa5eedd5b47f877bba4ef325acc
SHA512 e9411c595e9895cf2073b9bef7d71526ee5e2d67e6a05577248e28f20b57feea22e143e96a64ea7f015f80706aa3300b3eb5453639e50cd7e7543192f2986076
TLSH
T17C41B68A4E42861FD8D044B30A93B4A83338D80097167B47B8FC573AB8A17BD2D9F1D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 780594905fcad5e7449047a8dcfa08c812f00033e066b8f8e836c0a5db8a9628
MD5 c622e651d237ff2fb5709e405ccb51fe
SHA1 6de039f3e32af485a112197482ebfc97ea8f912c
SHA512 0ea226dc511c5b1c66a7d4e424a3e3e3619c1d417bc32e5a1bb5bdf37948ed798ea4716c4cf4d569085de5735f7ff461be7c76fbfd42167031a2a18410b91c63
TLSH
T17FE068B62ED32814BEABC3D124308090064A78A8E902FC0E541AF6831072315309AC25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 94b411c1296eaaae738aacdbde80fa5e6d4b27334881aab3d30121ba9678c0b6
MD5 455275943f0ce65bd9403d12a1517c75
SHA1 e77b356f0d87c1593a34a30b0e3d1e92e47417bd
SHA512 45f8bbaa97ea46ed69c0545a3da0f3ffd68f66d2cc7d9c0834ff39883961da25b63152598bf2569b954603835789f09669f5bc0e2dad4abd3ab6c58c0f24b0ce
TLSH
T1ABA0022DDF5CD056C14003B490B1018D6A148DE847092319C8ED1154CCAB14199D2665
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f68b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59f68b.TMP
Size 48B
SHA256 6b51884acd6a53961ee5257e0ab425323c2cd20c73331b22704800ac2b27e45c
MD5 4cb11d3c9f5faac39ed91702259c2278
SHA1 de92d0e06738ec59c87428ec265046df77ae3abb
SHA512 8f99b84091cfc766a89c068df270c7104acde2ec1162bda34b7f31be563fe7efd1d81d48c4267efff6d71d0f0a25a6fce5611a32c6b40112a3780f6dd0f9e411
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 3a2e3b558cc7a99e526040ebf7c9c3a0117df5fd3867b09248ee42df6067cd5f
MD5 87027edc839036d4885b4dfb1e375b01
SHA1 7c20d767cfef62d4e12bc0ab940158be62cf3a0f
SHA512 594c1d381dbf73451d0111c84069f731be44e15d304b32beced7cb53c8c6c2dc8d5c0d17fb8cf28e6e8cd6e917cea6f08e22ada48f96e3ddfbf27ba77cc0319f
SSDEEP 96:KYH+Kggmq+YKXKAO72K4ET2sKvKC6IwKpy6:49Hx5P3PR
TLSH
T17AE13807313A0652387EAE88B3A296374F8135633018A4AF7FB855554D6AE114DFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f06e8f58-e82e-4579-8545-149bfdfd690f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f06e8f58-e82e-4579-8545-149bfdfd690f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 2d6ee4ab877d71988cd68b6ec343fa92a4baf1c8c13ba567c83806b42ce18276
MD5 a2fd06030be5862193d3f578a666b36f
SHA1 0811f499febd5018c550ace8cfffcde849ec9fd5
SHA512 2cf09c96f57ec14d1b5b3dfb4d0f3e789ed4890079e15fb9a919002e8c8b4696fa838f9ec10af84fe2eb5cf6443490fda326d62c58ca4e7e6564349e724f5fe2
SSDEEP 192:uSm+xasuheOwQxMGsN1dQZM7f2GQmiU1NACB4MTcB+FdLIxfUutl38z1nq/7ZYy:cZcIhsN1d37uisCu+dUxcuD8U7L
TLSH
T1BC626C315C746C7BA9A3B246F48A37075FF4812BE6C45F54F9ED6F1D04DA6A8030AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c9d086e3ee1d99e64a4e5ca7140920f720202395c92e17c9a112293e62ef0e80
MD5 8b197f2b93e7d2559749c4e47f2dbba5
SHA1 cd5f435f29052bcd547e03b3c76539dac9252207
SHA512 047ed5d02fd0f6892a5605b54c575a69b9c743818612f6307a05525866b87369e9bc2c97ddf9be5168f5218ff4624b17d0adb76ce2fc3018ab3145d9fdeec892
SSDEEP 384:9eiFUZcI00sNP8TUNTUlIlXT77uvfCP2+dUxcuDQU7L:91FSf2wgVioLBU7L
TLSH
T179824B735CA4997BADA7AB45F58A33078FF4816BD5C4AA60F6DD6F0D00D7198030AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6510270af8cdb17406171e4f57c79b49a2671cd1c62206c61769ef8c2328bdbc
MD5 05ae92210847d57408a2a80a8cc1a007
SHA1 03de6bfea9b2b23b76c0bf2a970bf559deb85d96
SHA512 7cd6f8749312cfeb9f27444b41d4740905690ad9baae5898adbbabda7604345de0a115fe00692eddede0132921b92293c75b3342d20c05f190d6a1fcf987c0ca
SSDEEP 192:lOND6vMtPQmiUyIWThTcB+FdLIxP847QEPU/u:lOND6UtRaTldUxXRPU/u
TLSH
T1B1020935BC786C6BAAA3AE46F08A37171FE4617BA5D01B54EAE82F1C00D764C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 3addf9ebe8c2beed6c4a60595fb331072f04ae6b1cd3fabf1a77c86ebaf165b8
MD5 cabdc6466e54e4915d7e3c6b3175c2b7
SHA1 90bc8fdf6e39e36db7918de2902f8d5750681c7a
SHA512 0c6a8b75f5835d3a0760124ef9b03c78261b6b24bc421d6a73f4f5b5c86f6e640b3d81f3cb36e0b0b59961eadcbbc3151b8c35cee7fef654291f497d8fa906f1
SSDEEP 192:uOwf+xasuheOwQxM1zAsN1Y9TkZM7f2RQmiU1SACP8BMTcB+FdLIxfUutlB8z1nM:FKZcIuzAsN1MT77uv9CP2+dUxcuDmU7L
TLSH
T1E6726D715C74AC7BA9A3F146F48A37079FF4812BA6C45F50F5ECAF1D04DA6A8030AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 9906418ebcfd2a1144a00bb0631895fad84460a44766520391dcb580113f9369
MD5 2e5961a61b652af85690ccb855bf72eb
SHA1 312a1115732474d542d2efce4f4f1d38eaed6f17
SHA512 6b0c41c90a6b78ffe11da27af8858dbbe1ae449cce98dc924f97fcaeaf09eec67e2069effc4a0a93f67320f40f471efb8075d2f5067f201b6f4a10796fd6873c
SSDEEP 192:uOwf+xasuheOwQxMlsN1Y9QZM7f2XQmiU1mACB4MTcB+FdLIxfUutlD8z1nq/7ZN:FKZcICsN1M37u55Cu+dUxcuDAU7L
TLSH
T1EF726C715C74AC3B98A3F246F08A37079FF4812BA6C45F54F6EDAF1D04DA6A8030A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 b98ebdccf7c83030178e44618c0546b0e74a31f2be0bb8dbb1f6270e924f2191
MD5 3a9da41e35a21f50951ce20f5d5c635c
SHA1 b8090b59008b1290eca3b963b6f164a20970d60d
SHA512 e91efd240c0ce0b31fc11e5aad24b5c022d26950c3f934c0d71e98785fadc3d00aa4141153ec3ea5bbaa592eaaab82ac5bf5fbf26b73fd8a27373d85be4c3e81
SSDEEP 192:5ONw6vMIPQmiUyoWVhTcB+FdLIxfUutlK80Inq/U/u:5ONw6UIRUVldUxcuDTUU/u
TLSH
T14B120B35AC749C2BAD53A586F08A37175FE0926BEAC46F50FADD2F1C01DB65C130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1f9aff1b65240c849a86cd879fc1a930aff5153906e54bc6a9175efd6d39ea65
MD5 28109a42312640b02469899ada387c5a
SHA1 5a42c6564e51fa9f775f2afe754bf7f795c0f56f
SHA512 5ea13d7fe4239f54672213659f9bf26a8c09a20eff3a6036163c6c9e48d757ac8f002ce3c596f81bfa5413b693533b7c585c3ab95359362934f828a03523b8a2
TLSH
T10941275CB6FE1148B3776F5AABF6A46D487BB8733E06D55E10110D8F0A66B40C862B33
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_idx.db

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
Size 28KB
SHA256 06d382036f4293cf10ba79e2e246ee20b04bc8ed2bf0ca98858987cbd205a102
MD5 668a0153a08a5869ec326aee222f39a9
SHA1 190fcf79d9cd382e26916867b2af884069d6d076
SHA512 b9a54a1a164874a773c665b4b74b96d1fbbac8ea96ee58ab7a0e75763b0a54fff84144570dd51b61fdf619fb0ed8277d8526b3ca8f4bdc8ff27a62d71a48f9ec
SSDEEP 96:33KQeTCAY7aGJuu3g/eE+AiT/AIcdwN+0A81C6mp5:33KLOR7nuu3VzAiT/kwN/pC5
TLSH
T1A7D2B356BC35D245C809163C6DABDBDE6D2ABD84CD2901177BF2FBAF4AB580B8A05000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download