hxxps://4download[.]net/3283-fl-studio-digital-audio-workstation[.]html

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
898s
max time network
730s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 07:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://4download.net/3283-fl-studio-digital-audio-workstation.html
Sample260808-h7wtjssepc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4768	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306474148367996"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{39E17159-F0FC-4793-B790-ABAA6564FE37}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2144	msedge.exe
2144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3224 wrote to memory of 2028	3224	msedge.exe	85
PID 3224 wrote to memory of 4592	3224	msedge.exe	86
PID 3224 wrote to memory of 4768	3224	msedge.exe	87
PID 3224 wrote to memory of 4592	3224	msedge.exe	86
PID 3224 wrote to memory of 4592	3224	msedge.exe	86
PID 3224 wrote to memory of 2600	3224	msedge.exe	88
PID 3224 wrote to memory of 2600	3224	msedge.exe	88
PID 3224 wrote to memory of 4228	3224	msedge.exe	90
PID 3224 wrote to memory of 4228	3224	msedge.exe	90
PID 3224 wrote to memory of 4228	3224	msedge.exe	90
PID 3224 wrote to memory of 5052	3224	msedge.exe	91
PID 3224 wrote to memory of 5052	3224	msedge.exe	91
PID 3224 wrote to memory of 5052	3224	msedge.exe	91
PID 3224 wrote to memory of 4688	3224	msedge.exe	92
PID 3224 wrote to memory of 4688	3224	msedge.exe	92
PID 3224 wrote to memory of 4688	3224	msedge.exe	92
PID 3224 wrote to memory of 1976	3224	msedge.exe	93
PID 3224 wrote to memory of 1976	3224	msedge.exe	93
PID 3224 wrote to memory of 1976	3224	msedge.exe	93
PID 3224 wrote to memory of 988	3224	msedge.exe	100
PID 3224 wrote to memory of 3572	3224	msedge.exe	101
PID 3224 wrote to memory of 988	3224	msedge.exe	100
PID 3224 wrote to memory of 3572	3224	msedge.exe	101
PID 3224 wrote to memory of 4300	3224	msedge.exe	102
PID 3224 wrote to memory of 4300	3224	msedge.exe	102
PID 3224 wrote to memory of 4300	3224	msedge.exe	102
PID 3224 wrote to memory of 4240	3224	msedge.exe	104
PID 3224 wrote to memory of 6112	3224	msedge.exe	117
PID 3224 wrote to memory of 6120	3224	msedge.exe	118
PID 3224 wrote to memory of 6128	3224	msedge.exe	119
PID 3224 wrote to memory of 2276	3224	msedge.exe	120
PID 3224 wrote to memory of 2276	3224	msedge.exe	120
PID 3224 wrote to memory of 2276	3224	msedge.exe	120
PID 3224 wrote to memory of 1560	3224	msedge.exe	122
PID 3224 wrote to memory of 1560	3224	msedge.exe	122
PID 3224 wrote to memory of 1560	3224	msedge.exe	122
PID 3224 wrote to memory of 1044	3224	msedge.exe	123
PID 3224 wrote to memory of 1044	3224	msedge.exe	123
PID 3224 wrote to memory of 1044	3224	msedge.exe	123
PID 3224 wrote to memory of 4440	3224	msedge.exe	124
PID 3224 wrote to memory of 4440	3224	msedge.exe	124
PID 3224 wrote to memory of 4440	3224	msedge.exe	124
PID 3224 wrote to memory of 5628	3224	msedge.exe	125
PID 3224 wrote to memory of 5628	3224	msedge.exe	125
PID 3224 wrote to memory of 5628	3224	msedge.exe	125
PID 3224 wrote to memory of 4132	3224	msedge.exe	126
PID 3224 wrote to memory of 4132	3224	msedge.exe	126
PID 3224 wrote to memory of 4132	3224	msedge.exe	126
PID 3224 wrote to memory of 2280	3224	msedge.exe	127
PID 3224 wrote to memory of 2280	3224	msedge.exe	127
PID 3224 wrote to memory of 2280	3224	msedge.exe	127
PID 3224 wrote to memory of 5748	3224	msedge.exe	128
PID 3224 wrote to memory of 5748	3224	msedge.exe	128
PID 3224 wrote to memory of 5748	3224	msedge.exe	128
PID 3224 wrote to memory of 5840	3224	msedge.exe	129
PID 3224 wrote to memory of 5840	3224	msedge.exe	129
PID 3224 wrote to memory of 5840	3224	msedge.exe	129
PID 3224 wrote to memory of 3100	3224	msedge.exe	130
PID 3224 wrote to memory of 3100	3224	msedge.exe	130
PID 3224 wrote to memory of 3100	3224	msedge.exe	130
PID 3224 wrote to memory of 5992	3224	msedge.exe	131
PID 3224 wrote to memory of 5992	3224	msedge.exe	131
PID 3224 wrote to memory of 5992	3224	msedge.exe	131
PID 3224 wrote to memory of 5932	3224	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://4download.net/3283-fl-studio-digital-audio-workstation.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff8c83bc188,0x7ff8c83bc194,0x7ff8c83bc1a0
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,9664444043246537712,10554833417348016774,262144 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,16083130294248243086,14072749991870782182,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,4482672613387909367,8161568645838055432,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,785690611504924629,8528883626588376615,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,5435618177018983570,11942607710144422929,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12803058070425458050,12983824287706260276,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,1692232299594028156,17943927710006987257,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,4834172255926579405,11773157835761270119,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,7786408682092055419,13658901274088724603,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5772,i,15973916279648159800,9825158428518572829,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,11605298435890630267,13948733527867788691,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,11605298435890630267,13948733527867788691,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,13886507924164051342,11816816546550213925,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,2731192056081045594,15260680824253736366,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6080,i,16761711974554235614,2085974489280414807,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6392,i,677390201886158804,18092261284499724015,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4316,i,17995713575827139012,14938135748741241953,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6380,i,4237274316662342146,15616614054955456861,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6724,i,15203233228893283537,5501512473305004508,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6884,i,15461991808588581385,1746030615915129187,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6916,i,2758850187087930461,6546921881411434790,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7116,i,5619388206791854413,5010236461833954115,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7004,i,3670781655806997052,4361832206998624583,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7240,i,14994389416677040135,15066238613650873893,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7236,i,2850856297459421091,4085321697470227079,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7400,i,16072436503503923681,17023593246092075289,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7444,i,11945658453639780149,5429084180629381462,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4356,i,9800343398964616889,17423935932642229913,2097152 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=7760 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,3583891452817407702,10928592428005059447,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:8
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,4159170901387028654,3006254412640399165,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6336,i,1129653224298556179,14052445796931786490,262144 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1336,i,4628185534359662389,7786906159837206308,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,18023800923518760707,17544389606580107542,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3092,i,12128339334430817360,10900790660283262048,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4008,i,17311713121629538211,16190465095979393672,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,15662695207478352090,13982166037878646770,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3076,i,17887785120317888542,2053019021692390239,524288 --field-trial-handle=2264,i,11445080535704985815,13566730583766509446,262144 --variations-seed-version --mojo-platform-channel-handle=8056 /prefetch:8
  2⤵
  PID:1856

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 196dba3045368a58ace1dfc5000d90068d43b37529a072781ad5e4cb7de63eac
MD5 9455d805e9575fccedec31d4846aa506
SHA1 de9a4627f3ab1b06ed12609768a3e30007fb64f9
SHA512 cb2d62fafb462fa2de3a66c55c85b1394d7d4ed2da5460cdf73bcd545d6dc6fecb54e8e5cdf5a58b4a0dfa8d9c111f79481089487f637b9d309c825eb0d60ffb
TLSH
T1CDE026C714C8C3AE9600E54B656C430CC2C03B1BDBCAA98BA70484C9B006444E2C3DA8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 cf8a6a6c680d2269120c5bf1b3c636ffb2a2bbd3acaf6a8e62f02ad3d1a756a5
MD5 e580a939819b697ff9196c38f842f28d
SHA1 2c37fd8e4e658b00d6406ce581b36593fce3141e
SHA512 31c256f41e0ea10c758cb9be0a8d8f27f25d9a625209f87f62fda185b5ad4c67ce75ad9eca243daebec1b58bcbeec1636f883ba20b1b8253622cb3312be34ad7
TLSH
T178E080E515D5C35DA504644FF664475CC6D0360A9AC5A98B270489497141545A2D3E64
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8ee15800f5fc9eeabaa58edca8d46cf1f41fd4a3d0b4b2d4470803975ffd7dbb
MD5 ded52759374fcae552ede00b40e7a677
SHA1 7e664de4fe60e890877759ebbde61eef1db6af19
SHA512 f647c600d5681fd1f619c59a908c3c3659ac5d6416631495a50f5ea6884cd12d69470c9e6870e3c72d3d46422a424a1418d4299c57c41d972ceb6fa2f5c3b8b2
TLSH
T13EE026D527C8C73FB604B48BA264930CC2C0364A9BCBB98B1704848F3485540E683DA0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 2a7aff1358b5fdd2efaf72a6cdbe42057ae738fe46bb1c37d333a6fe75a48f84
MD5 7a7156372662ee5c3048d32d3eea63fe
SHA1 62c4ac059c9a81e3682551bb969452c2b906b99f
SHA512 201d401bfc1c6b7c3c307afc60a7cf72f3c1d5c3faa083bc1b8a4aaaf93a002f5e855195868642d7fa794609a723bb42fe043100a37a6cf5d6f76b18e25ad6c5
SSDEEP 96:A8D5oqCVlm9EzVoOEzBqr0BIJchH+aOxDjUsd/:7D5o13WOikr0BychHr48sJ
TLSH
T1B9A13F3AFD9A1842DBF1B0B2E1F60C51357A482E2A276E3623141E7D760FBC4BC5006A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7ba81967d96c8d26ec5bf85b50fbfe80e560743fdbf2e32f992b67ba42a615bb
MD5 3f9a37fa3e369e139960a4e64858c009
SHA1 ac5e237c714a5240aeb0fa34b1c195295737717b
SHA512 898d5b3c372ebe1c0e54de203061ee3d8002b31bfd17353ae43c9ba90a840df4eb7bd17b2f09fd52b68b90c6b0ae87f1c14e0e08ac38213222d9fb343887ff13
TLSH
T1FC710B0BED6E0856D7B1B0B2F2F50D4135BB092D3A530E36261059BD7A0FBD1BD6009A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 28KB
SHA256 6c28aa85002c851a1effc9ab55290a57690ccee2b91fcec03a17b42f99d9bba7
MD5 7a0f8368f4ac94351e6a55ef8b1cab36
SHA1 617b28fe956098ce7e3b0194370e0a8a8b66cc2e
SHA512 95d45fb7888ae94e4c505cc8c91d5100a9a6dc49e0a7e851159a6571017cb05fcdae26f2a55f29b69061686a8ee546b714fb25026924a886c24bb62b86f6115e
SSDEEP 384:D2RKoOeQLFpAZUhgI6L5qjjOpeuePXdyxecmesVexsOdJwJ1reBHGT+omrQWT9ip:sOY03nZsbJdNL+FJT0iHiw
TLSH
T120D299F7C3E5D52E89115BF856146E1BCE1D0A2A43283C16CDD5EE8BE3E2032E16A54F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 23KB
SHA256 fa59fefa6e814e94133fd4b7728d92b1708f454dc456844d52797c96345ff7ec
MD5 4e9967d26a08b9b7dc79aa2212865d22
SHA1 cca8b103c76030f4e06ad18e43b6370be5809d01
SHA512 dd3e8c540f6f8464c870613f0dbe418768086fcfb8a8df4bdea4248f41474068cab403ce0a1f9e5e2a6004b7a06f871e59b7c53039cd3c3782c2fcfebcc628f0
SSDEEP 384:DWJijhesANudQlZeSkJ/WD7tRe+eJx+6se8de9WeKOKRJ6JZ+cAeBpq+omrRWR9E:cQD1PRsbAeNL+FaTWJOHAv
TLSH
T17BB2B9F793A1D56E89105BF85614AE1BCF1C162A432C3C258DD4EE87E3A2033E16E65F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 22136c9b11d10f43d7d5e52ce2515d3060e7cb5da135c1e0b189c2c62e27c74b
MD5 05c8e208ba03f22f5b023b11a8f8fa03
SHA1 524c42fc21bd4e059958737866a2b7be964ca161
SHA512 4424d33732383bb1ee5d87c24ad0bc1d2ba157797082da9fdaf662d6570d41feb6f5969046e5dafbe12179187ea80d558b9cc633050867faea5c88dedd5bc8c1
SSDEEP 192:sxZzR7yM/jK1Ml8Mkj/fKsH3NrHIdpWLHW6+WN1eF/Y4GjUJkIgrJ:sxZzJMj/fKsXZIsHbC/UX9
TLSH
T17A52F911AA34A977CCDBD20DFA55BF53D5F90572A2901D44AAFCDA1C04E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d28ba45f6b00399a01e59c9583780dd02ecb9678cadb945ce985725d28d80222
MD5 e13ba0b98fb7d94fd62c1fd86d25fe8f
SHA1 803f132dcb9eccbd8258b0a6c01b868912d7b6ac
SHA512 1e6659dd11d4d75d35e7f900bc4ea4abdf68ed534c200fabef6be2767bd73a66b5e8c4905008fd729d77f178d5603c3ec86cbd252967c3587ae4ca43ec7398aa
SSDEEP 192:sxZzR7yM/jK1Ml8UQZkj/fKsX3RrFVIdpbP8PHW6+WN1WNFaG/Y49jxTkIg57J:sxZzJqaj/fKsHVFmyHbWF/r+D
TLSH
T17B62D812AA349977CCDBD209F944BF63D6F50472A1914E54AAFCDE1C04E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 66be4a8ce2ae4dc77fa46d8366948cbd1aa2d2c99049fd090a282ed5824962ab
MD5 56db7230430f8d599e8d58cbbf493836
SHA1 f196ecad8faa3f08a72f1a06173987eb9937d137
SHA512 ac662aae920615b046bb9c81d862039b693bae5851cd9262316c90a252e893210f54f5d2c0af9143d6d013720082e6af9e17c4a72f58e1f9cf27dd472dc8bf8d
SSDEEP 768:TD8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdNroFk/UnS:TD8iJPNWvx76ru1jahALocdmKUS
TLSH
T174D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9623c34d79d63222913ddcafeef565a004766d1f37f719b5dbc031bc86adc97f
MD5 cf8b08ac52e0f366798ce69adf738a7e
SHA1 6e1b88a9721803748774de9d80838f7fa59f1f8d
SHA512 85d43d5872564e45087a9aadabaf3d1e12b023abd5407229c66f16a37e54ca15b6d30959daf973ceb0f20d5722c0bfaf389f59e02b1acfeac6fd89e4dd811130
TLSH
T1DAE068F62EE72880EEAF63E11471A8B00281B459D584AC8F241ABB8364613523406C22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 f0030de0ed9d3208560cd9a5ef22efe5755c78087a32fc425dfd2ef631871a7d
MD5 5d4bba8e63e21757916336bfc9bf88db
SHA1 93d36e14e9bb7424e47ecc99d6b4a4b71399729c
SHA512 364ed98327d72df6c7e9acbd61d3606c8438012509b5cb30df39120e0193542485b9e89d1f39390a7f6d19194b353c5d70dbf882796c56de84a732affa3fc8d3
TLSH
T1B6A0027563507487C54016709E91038163104995138DC652C5D010589D5C1C34249251
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 055a18f58cdbc614334ac4ea041193425f9c125530c5e1d197042f7ef9de3ae8
MD5 3e2c3d48f402f6b35263be7e7a4b6a20
SHA1 ecb05cea3fe205c1eeaf139a74679567ba222203
SHA512 8ca7aed2a682363532d549dfdfbac70bdb35346491d73c2e52830d0c6cc2d4f608038511fc0a1fe1058fa47331b79c4150865ab0c24ce0b06c647f8a9ea3ea47
SSDEEP 96:KkOkKHK6TEPIkumW28mJ9Wk2K+TWi2yMERSZGMKnqyQ:S3TEPIkumWlmJkk0TWi5MERSu3Q
TLSH
T16891810231BF52053C3F681D96E1AA6747423563312DA87BBBA800B64E66E700EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\f7287c07-0bea-4c2c-a4c1-fa78dfd29f00\index-dir\the-real-index
Size 72B
SHA256 e73ff289459e55865220339dde409da35a01f66cebb41856e2b13ffdc7fa0fd2
MD5 489bc489fd95d67f1835de57d82dc213
SHA1 6a30e5907c71ac558a0935e93c737b05b9e374f0
SHA512 d5706ded226d4a524e186f375e7e2aa8d74d58639f2f15c34fd74c1b4009d7bce3b6ebe3055451d2de24a889936e86d5fe1372323da1933d3dcda1cd5170e3d1
TLSH
T1C1A0023851602204D48011B1245B056137394951E8040612A2D1B5A4D8D10E5950367C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cffd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\f7287c07-0bea-4c2c-a4c1-fa78dfd29f00\index-dir\the-real-index~RFe58cffd.TMP
Size 48B
SHA256 1edca0928d100ccdc91e9c1f412552c3cd6dad5f2b00e4e31eaf6388a2bab781
MD5 6e2acf268c5f0385c5abe8abf3ce5525
SHA1 ba5a6c0fff06290a283f37b791eb86551a60028e
SHA512 8f3afebd5c1323b1ad19d67db734e5611baf50681fd96efe2a48d9bb958d5c8495bfb512977a7a393e1120e502105df3c2d9bb0982f57fa1edd79db7e4f07e8c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 237B
SHA256 6f9e4bdbe224b2d5cd33b54c80c5c851b4e81d56f544d76402e1c95883b6bde7
MD5 e6b8e9c818e03b73402a52ee4990d8c3
SHA1 60aabd17475f360995220e4eab8f014ce94957dc
SHA512 2fe5d48d4fd2a0110d61147680f429ba23644b423ae2418c5e3c968c6dc165826c3e10529c31b31cd68c6ee6d739bb08fd4adb4413b120ecbcbff5782cb22362
TLSH
T1DFD0A7FB4331D88E7B70ADE45164245D81075D899D84CCF4981DB883B8F8A12EE21677
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 153B
SHA256 461f2e93d938377c90f0187320b7e6f6aac173ca0dde69f7ab62cc44621d08fe
MD5 51b070225768f6789c7a91e5f6eb3b06
SHA1 06a92abdfbd97d68019cb67f4c8ef22ef9b13580
SHA512 12099fe8dccf349b3c2429e1a7772a811c13509b4d677a970aea0a37394d5060edb8df52051bf07c00d5daaf704c1358756909e26de33173f868f29b9126cb0d
TLSH
T100C08CFB0610888A1F70AAE82154790CC20B468C4DD0CCF4980C084365B8A22A402633
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 154B
SHA256 d99b0fc3411a7bf2a5afc798156bbf7d7e1bee5f808f46644e0297420652d0e8
MD5 91ed459b549b71b729219d075c4db561
SHA1 966f7ebd1238f51862161b7ba1cbfc8a38bff869
SHA512 02cdde944fa1c6e2cdd08d86b2eadadea6890e575d119c9c7634c3533daf0c7972c418b82f550a13bd81525dbca96450f24abbd6e02b487aaa88bf9fd5223fe8
TLSH
T112C02BFB061088CE1F70AAE82158B50CC20F454C8DD0CCF4D80C184361F8F22BC02633
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58bfff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58bfff.TMP
Size 160B
SHA256 476cbfbea8f0a7094ba17ef5aab9bda246f947ecb748432a62a5b9f2958866dd
MD5 6ba6736d5836d88e8806a2e774b920bc
SHA1 b555e1a9e81ebd750e163c44eb64ee724c474ad2
SHA512 a9fcdb896e0f9770862ff102372b6bbb009fc837280d82b43796e9ac006de3fd88d9c536ab0efe47cd756839bd0ad24794f4e81bae86f574d68eb676ba2edb34
TLSH
T13EC08CFB0620488A1B7069E42164790CC20B4C4D4CC0CCF4980D394371B4A22A445633
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59939b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59939b.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 331df367921e00a0e9b7b9dd2857854a870cab5f508d8ccf906bff4c103ee476
MD5 6f1af79fb411aa17be756897e3326d55
SHA1 085a946e320b2a715c82d9d86c780308ce7bdbb8
SHA512 8b44415dbe156ee9ebf9463edd693334303f8e3bf16e7870a7f10199d2573adaf2894e8b896702ead1023a3815b6e777d8247d4e4f1115477c30aaa94691941d
SSDEEP 384:CZcIhsN5O26nyJhnkhOp3VeAo+9XK9Li6Uq58bhP+XOBKBuQ:wh70cOpto+9wLwYOEBuQ
TLSH
T166928D721C7868775EA7E149F84633278EB88137D3D86FE0D9ED671D05DA2AC131B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9560944fa9ac97f37e98d859208a28e6ac1f460291e97cbbeed95df4389ac48f
MD5 bdfc36d413fbf1d584ada262284d2279
SHA1 30c3d038093518d6e2d3ad8e26fe33e1e8f0b667
SHA512 33ae37887600fd5b3b902da4a2d281320a799f744d3b6ebf9f5845eca8914090601a543ef6f32badccc07066458aabc4537ffbaf25af1b0a568e6179873f7dfd
SSDEEP 96:ZqONkIQsjpfmUTmDK5ih/cIPURHl8h4otop5M5D+BhPwivh50xy0SFYKEAxnO0B7:gONY6kDfQmiUyO+Z903yO4+TQioMo1U6
TLSH
T13F02D7356C782CBB9EA3AE49F44737275FA5112FEAC52F94D9E82A1C00C734C2746826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 553d13168afe83ebd7c3768d777968718a74ce9e43a22738d5211eeb869f58d5
MD5 b162dec430afcd653278599b47fce36b
SHA1 89aa8d7fd40ef638316a26da9d6092b88dba18b0
SHA512 9bb1d95822fe3bf98fb4f7b1cc6154d4338966686f1019629764cc379235007f702304235d57e9def51e285f1354a0bfcac4b700b3b237d698b24e0bf4ddfead
SSDEEP 384:diFiZcI8zsNb8TUNTUlIlP26nyJHo2khOp3Veho+9XK9Li6Uq58bhP+XOBKBuQ:UFQACwg5QotOp2o+9wLwYOEBuQ
TLSH
T1D7D23AF208E75476D9AE9747BB3D2E138EBCC027B5949A90B7D8550CCD9A1BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a1dab0cb0f045d4715ec937a7ca4ac392329eaec899e7db02422841b3ebaa009
MD5 863c91752a46a33fdbf34bfa4311a51b
SHA1 fd447ff920945a2be203b66f4181d849ee3bc819
SHA512 9799babd7cb76222a42e2d9be539bd5c655345fa5108d1571fa4b9945096d9e65399a35a25d17913869ae226d5681e4cf74b66db8a018916dc8c55b0013c1d40
SSDEEP 384:0ZcIhsN5P26nyJuo2khOp3VeAo+9XK9Li6Uq58bhP+XOBKBuQ:yhY/otOpto+9wLwYOEBuQ
TLSH
T16E928D71187868775EA7E149F84633278EB88037D3D86FE0D9EC6B1D05DA2AC131B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 96b90c2822d9829f92d760076dae90ed9d5f41bc65194e72111bef9ff1553e86
MD5 e46027e33a7cec1fe4063c9b9c512449
SHA1 95aaf4f6c22b28ec29583f2520797e54085c37af
SHA512 1ddee2dbcb0c4b898c02301e1703ab94ce1aad1e06f86b46ed12a8583bcf1ebaf4cf74943ebfeb09294910bb6b7902cd09307ccaca8f2226cf771fad49fc8611
SSDEEP 192:5ONc6kZQmiUyI+V903yO4+R5pbr9ebcRoEqMLhU6:5ONc6KSV9hOp3Ve8o+9U6
TLSH
T17A122A3268786C7B5EE39948F48733279EA1412BEBC97FE5D5DC2A1C05DB35C130A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fa6d8f341a8b0d2dd17e621a869a50f4f21ea12b7089fdd32274ba1a22f1deef
MD5 31ddf5f6753c96300dca8df7d2adc13c
SHA1 2ebf0ce2b78228733d806958dbafe445c7c41bed
SHA512 04c8929d09a196216215a1fc7d426a620119ca87faee0a7199202e8ed696f3c7c0443a34e757870eeb0d01e1e1088477d901fd631cdb8f7662dca4be36f572d9
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe593d2e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe593d2e.TMP
Size 392B
SHA256 d7a899952c1757f85373140042c289c1c78952a4f4c3767e4da79d0962bc6261
MD5 435ea934e5af5f8cab661a37868e3ed8
SHA1 708edcd09e5516c712fcddae87b6ca52d6021e50
SHA512 2611ff5af4cb6975facbb738af792f46648bdb0f0c3343343d52a5a59450b08ba87c58e1efc3623c685d40be7ee35834c008f6305290567ed7b017120eb34f7a
MD5 SHA1 SHA512

Submit Download

08076299-1101-47ee-ad57-c797726834c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\08076299-1101-47ee-ad57-c797726834c5.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 374f5c63a59cd38b088a7adefa703269213a2bc2b951a26c27f345accf054ef0
MD5 0d44f03a83e93f576954afb83eb3a45a
SHA1 22605daf91ebc8296f2ac5e157461315633b917e
SHA512 1fab629b0d2270fcdcc45b6f6b54dfe85799047f37eacca3a6719474db54ee9c8a7f3d0a5a7ec02b988528e7520b257955d23aca3466ede6c61e922289f46038
TLSH
T1E941269CAAFD1158B3B76E5A9BFBA55E447BB9372A0AC45D10010E4E0A72B00D871B37
MD5 SHA1 SHA512 TLSH

Submit Download