hxxp://disface[.]vercel[.]app

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 14:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://disface.vercel.app
Sample260808-rt744aswhx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1520	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306730228618943"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{F7E1BB67-EDD4-4928-8F28-831DB435246C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
920	msedge.exe
920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1824 wrote to memory of 4588	1824	msedge.exe	84
PID 1824 wrote to memory of 1520	1824	msedge.exe	86
PID 1824 wrote to memory of 2168	1824	msedge.exe	87
PID 1824 wrote to memory of 2076	1824	msedge.exe	88
PID 1824 wrote to memory of 2168	1824	msedge.exe	87
PID 1824 wrote to memory of 2168	1824	msedge.exe	87
PID 1824 wrote to memory of 2076	1824	msedge.exe	88
PID 1824 wrote to memory of 4400	1824	msedge.exe	89
PID 1824 wrote to memory of 4400	1824	msedge.exe	89
PID 1824 wrote to memory of 4400	1824	msedge.exe	89
PID 1824 wrote to memory of 4628	1824	msedge.exe	90
PID 1824 wrote to memory of 4628	1824	msedge.exe	90
PID 1824 wrote to memory of 4628	1824	msedge.exe	90
PID 1824 wrote to memory of 3912	1824	msedge.exe	92
PID 1824 wrote to memory of 2020	1824	msedge.exe	93
PID 1824 wrote to memory of 3912	1824	msedge.exe	92
PID 1824 wrote to memory of 3912	1824	msedge.exe	92
PID 1824 wrote to memory of 2020	1824	msedge.exe	93
PID 1824 wrote to memory of 2020	1824	msedge.exe	93
PID 1824 wrote to memory of 1152	1824	msedge.exe	96
PID 1824 wrote to memory of 1152	1824	msedge.exe	96
PID 1824 wrote to memory of 1152	1824	msedge.exe	96
PID 1824 wrote to memory of 2996	1824	msedge.exe	98
PID 1824 wrote to memory of 4620	1824	msedge.exe	99
PID 1824 wrote to memory of 2996	1824	msedge.exe	98
PID 1824 wrote to memory of 4620	1824	msedge.exe	99
PID 1824 wrote to memory of 780	1824	msedge.exe	101
PID 1824 wrote to memory of 2208	1824	msedge.exe	102
PID 1824 wrote to memory of 2208	1824	msedge.exe	102
PID 1824 wrote to memory of 5032	1824	msedge.exe	103
PID 1824 wrote to memory of 5032	1824	msedge.exe	103
PID 1824 wrote to memory of 5032	1824	msedge.exe	103
PID 1824 wrote to memory of 1584	1824	msedge.exe	104
PID 1824 wrote to memory of 1584	1824	msedge.exe	104
PID 1824 wrote to memory of 1584	1824	msedge.exe	104
PID 1824 wrote to memory of 2936	1824	msedge.exe	107
PID 1824 wrote to memory of 4336	1824	msedge.exe	108
PID 1824 wrote to memory of 4340	1824	msedge.exe	109
PID 1824 wrote to memory of 2856	1824	msedge.exe	110
PID 1824 wrote to memory of 2856	1824	msedge.exe	110
PID 1824 wrote to memory of 2856	1824	msedge.exe	110
PID 1824 wrote to memory of 820	1824	msedge.exe	114
PID 1824 wrote to memory of 820	1824	msedge.exe	114
PID 1824 wrote to memory of 820	1824	msedge.exe	114
PID 1824 wrote to memory of 1612	1824	msedge.exe	118
PID 1824 wrote to memory of 1612	1824	msedge.exe	118
PID 1824 wrote to memory of 1720	1824	msedge.exe	120
PID 1824 wrote to memory of 1720	1824	msedge.exe	120
PID 1824 wrote to memory of 2512	1824	msedge.exe	121
PID 1824 wrote to memory of 2512	1824	msedge.exe	121
PID 1824 wrote to memory of 2512	1824	msedge.exe	121
PID 1824 wrote to memory of 920	1824	msedge.exe	122
PID 1824 wrote to memory of 3880	1824	msedge.exe	123
PID 1824 wrote to memory of 3880	1824	msedge.exe	123
PID 1824 wrote to memory of 3880	1824	msedge.exe	123
PID 1824 wrote to memory of 4536	1824	msedge.exe	124
PID 1824 wrote to memory of 4536	1824	msedge.exe	124
PID 1824 wrote to memory of 4536	1824	msedge.exe	124
PID 1824 wrote to memory of 2392	1824	msedge.exe	125
PID 1824 wrote to memory of 2392	1824	msedge.exe	125
PID 1824 wrote to memory of 2392	1824	msedge.exe	125
PID 1824 wrote to memory of 3924	1824	msedge.exe	126
PID 1824 wrote to memory of 3924	1824	msedge.exe	126
PID 1824 wrote to memory of 3924	1824	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://disface.vercel.app
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffe8ea5c188,0x7ffe8ea5c194,0x7ffe8ea5c1a0
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,8700245370894815682,12707752942131322478,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,15821275152442336719,1068352330702062096,262144 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:2
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,3026630612324042037,9603862014676059431,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,12430871063789008470,7987159559238978713,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,9460825085506057688,6122091527958943295,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,9209896548008381408,4152651539423157909,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,6407859988458296345,13336616907583948281,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3592,i,6786874691173537980,7364096488527476624,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,8762620402971431145,2372280569344299153,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,1880562215474348576,2315317819440716270,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7972021085591335213,18152819645406260068,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7972021085591335213,18152819645406260068,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,791496490122170743,8383843571259859696,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4516,i,17607261356439273450,9163804610756541230,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6580,i,13760316474219495401,10757631008744629829,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,16391733685310291491,7462785119690203643,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6692,i,8119295709981389965,2006926169723208903,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,12769218230095675236,10121749206094182239,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6740,i,2220101640607094296,17530646548491182396,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4468,i,6103718086848217573,3574548915353706420,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7060,i,7094647730397195136,16760366301717934441,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7184,i,11062589139276787383,16067670164783718694,524288 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7564,i,376655024997430565,6586375268339168719,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7308,i,8828351470167736027,11322049751688695181,262144 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5484,i,4697712238559266851,13888738405493706699,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4520,i,2095171307783912161,6839446371213009205,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7792,i,8152327312815497783,16763667789407708347,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5344,i,15965377835691114345,9319414447586311978,2097152 --field-trial-handle=2736,i,17637815217481020700,7054236479156504444,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:3924

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

c0a7ea52-b10d-43ea-8467-f18958693e2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\c0a7ea52-b10d-43ea-8467-f18958693e2c.tmp
Size 105KB
SHA256 fde5025ef66eed55fd88d8ade54159c6896f668960612cdc8ac646f38c6df2db
MD5 92fd10844698a944de0d2c25a0e93afa
SHA1 1449b369c4e6fcd8a01e721c49cb1ff8abbf0718
SHA512 6db7c50c102e0f642aa312115f988b94bf36359d77515a4972a61ddbac533d9fb04756ac734eb4054291d3cc6f89ad0157b4047c9a055152fdd82eff17da3b5d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7j:fwUQC5VwBIiElEd2K57P7j
TLSH
T136B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 406KB
SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
MD5 9216d5af8ede8d6bad7e05785c4f1536
SHA1 6196a652118779feec14a3c1d560d8a85fb296ac
SHA512 4707760777c417037805268bcd345cea67cdbf895ea01a002a157f9442c81520dbff93cee7047922e1513321e90db2bbc4d62365a5cbe51f308f484d7aedbec3
SSDEEP 12288:O+3o7mAmn/5Y8dgX4V+1iOF8MB/noCWnm3LMZT7LDkwFdqM:OrKAmxDgoV+YlMVn3kKLMZTbkwh
TLSH
T1879423FE7405ADD11AAB541F91A0DF9284D045E178637B997EBF4CE8A84CA27C4C8ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 68KB
SHA256 096265551a5ee356be7ccefaa40a7de3929105288e029cda15c965cb65b55eaa
MD5 f6709d44783ca7b4b921437ca7dd2727
SHA1 a0c6e731ea03274fd0420c360b5f8079ca719138
SHA512 34b45e20793f4de99caac1c28fca40953d4bc2902ddf4dac70c55bc28ae28cf01632095b20317c8c661832fc1b971fdc2eb05450ef8fcdafe74a5084589ad52a
SSDEEP 1536:GeXJHPV3M/Ib+Npon9pSlmtHf+SxQBEnhB35LsKMCoNx5p1WFK:GYV8xNan/rp+SxQSnhB3aKMCix5fWM
TLSH
T10C6302D8DB1C78A3B3A11891398B31876F920AD1DB0C79167D7F521E5B623EF4071B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 40KB
SHA256 32757dd7cdd69fc8b77e460fcf0b4354d7ba9b12b70b92175439c18f16ecc819
MD5 63f4bf4c9e4b2f5ac4b1c8a9f4a6d20a
SHA1 40d033d0f716458228ff5ae4c623b3eebd7e8f1f
SHA512 ca748a2e7f54c22bea5b6b586082ca9be3eaf1ee199fe56c7245229ee4f73d99778beb019d8eb33f2aff1800a3233a31d506274259cd791dcf82a994120143a2
SSDEEP 768:rQ0uU6UEmqopa8oTvB6vf26ER+musSjAPWL9f3+dvZDNiS+Hfkae76gpGnueZG:rQ0mUha8Hvf/mutjsU/Ux8S+/5e7FGI
TLSH
T18513F292D7F44C509F5DF2D163086CA1A77A2CF5A388529CB5E08F22A49457D018EFEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 204KB
SHA256 ad627f2f934ee4d7eb0c840a22b515cade0cd2bd560466fb3e619da9a1ff9a9d
MD5 fdabddcc6e173e2d64e25846742bee14
SHA1 ac9d10a9b348980a889d5972a11b928f5b3206d8
SHA512 e9c697bee68bd308f986dae6931a54249db70f7e0c71a556466907a9bd8f63d76b7e51ce7481351e0ebcb303d3de4fd98683f6361f4b36f5b449712bc48471b1
SSDEEP 6144:dGHaj0gS5QfvkzYVt0jNDCs78IgyIgacpsIIK1f:4HpQHG7b7PIUBIK1f
TLSH
T1AB242329226C0334F75F19753043FD24B968896F68A8A3982B46E9F4EAD7B40D8D543B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 83KB
SHA256 b9cf829054644112cad26f89076f408cecf4260bc41ecf58632fd3b5d6fe9425
MD5 4f54fcea847826f6726a8a9f7c263fbe
SHA1 ffe769144e3f5a7aab2896c851d0ce1188d246fc
SHA512 997b7c85ad425a1206c08ce75e2634395ca28f18d0f93a8b31d55318c1d87f60b9d129dd6cf27901249ca47fa7a245d3d4fbd95b35d0010dce2480b49a755950
SSDEEP 1536:Nly7os2TXdq2GQFT99Qu+Kb5+z9xhWhJk4dMrXy4kR/HAvVlOINPDreRnL9ST7s:NSIMMRAo+z9xhMKrXyTolOINneNLkPs
TLSH
T14D830245A27FA80B18504EEDBFCD7ABA0F766B21D86580410D1B48D9E2A6D3D1633F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 77KB
SHA256 f6419bb8a7143a2d4aeadfacd1aa7346fad4248fea46f30307556e707e361c0e
MD5 5fee10d43a603d19328c4813ca52f826
SHA1 2da1f3fe5299a70f197637ab7a628d834547abbb
SHA512 543c4b9a60a04697b28ae92589f7da4d61f55d2a05448715d23579caa94e2bb81c43997547af470fd9e92d1108561fbae12523b2c98e3ef385d93030ce313d41
SSDEEP 768:Ih09NbhjvT7ZfAy3U3zCebUBetygauhyJwoDPlxmb4mJXn8nJOFiJ2gun82GC/6u:IaXHtAtHUJwYmB8kFbn+AWJ+zCe
TLSH
T149730273EC76A544A2A9E13484121AEFE279E3C7531C2F77195136AC2C2784EDC31A77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 27KB
SHA256 4055c08923c81d63735c1691baa778c332bf680b8c4eb057d7b87e2c00c5578d
MD5 aa6a30350189be311d6f87b7d145d85b
SHA1 79d0105a90db8fe73876d31dc4f54bb9a194002a
SHA512 3563cdd2399d4ffe7f76a2b252800e2b767f7fc776fe1faf1bd385cc41ff9305c7a5367a2d28d6bcb46b9202461c23b86ad6f1f3cec2cf51ffbd181000651037
SSDEEP 768:Y+8X/NT0ZezFy6uLGsyvi7ssXAS39YGiE1TJnhC:Y/ZexL0o5X2k1Tds
TLSH
T1ACD2F104AD3D7AA06468E3D332713166FDA696A10B7702D2C615E625B3983F42BCBCE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 16KB
SHA256 21e567d667f0debde217442964c11e53ec074908e61083aaa85c30e0991c4a6d
MD5 27868df963f84e26a3661e1aa6155378
SHA1 8c03f2ab06d038181b2752d844478359f63efcb0
SHA512 4fd7028792d5738dac9143d0bfe1c43104060b1911c6ffcfa157c50ecc9b3947d99fa600e06ef64fc0ce956da77d75dde57e94bdc82eac3d24fbcd64d7b57c70
SSDEEP 384:j+AQhCvTMgiBK2+y9NV7LBKKSzIq21Jp6I/FlRlrzLtFTiHX:C5bgOKjILHaEN3zLtFTiHX
TLSH
T1C972E113E1B1415FC87412B7A69C1F5E0B22649CD4D97CD39632AD3A0A5E864A71F389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 17KB
SHA256 7db8d29c8169f3611a9ee9f05f9d3fd5caedc7693af33feb65f436a80bd33240
MD5 24ab21da3b67f721475e95ac2770dc21
SHA1 b964c8bdbc4ff708b283d9e052c1bf4947b29e09
SHA512 45e939b7bbc3b7ae47ea3b778f4ddabc3bce06f0d3fad4d2f1851fb43597e4c2b7eabd0678110a20a0181709b7dd039191adbd40e7b6f1588f2a3d5024268a27
SSDEEP 384:8KinigLYvNlzoASrDAR/Vy0CbVJn2esg1OZh/3ie:8Fi6YVl+Da475sFf
TLSH
T12D82D0556096AA71023FFD477D0243ACC69D38A8B4D7EECA5930AFDC08296D1D64CEB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 56KB
SHA256 631ac6b47af403356db81376220724c58604074ae4e6312f775dc5783ab6ce61
MD5 95219edc7f5339209a4b0e69d3a3b5ae
SHA1 e95736dcec5ff384bf23573cc0e6e72e2f518da8
SHA512 b989653d617e404b92dcabafd7489a596e3fc026b675b0abef3bd9d8fb338c1bc8c629deaa1a46a30b0975fcd712c8a18533dad983ce8aec14b4f4db078d6d8a
SSDEEP 1536:xNA8L9B6UDoJEHt7fJb+/wN65MFsNaxWUmR0WNmCo:nHpNb+/p5vaxWt0Ezo
TLSH
T10B4301E313A523334A9B6D7C101E5B175A973B2A3F2C84EE57A4426D7804EF89D20CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 60KB
SHA256 973d7c4cd91c428490204d4647f283b60daacc9ff0e8c83bf8c1bf994528602d
MD5 b96f8d90119f9f8307274adc5695da21
SHA1 57e36157b36dbc401c5701d0e27ec2885193a4ae
SHA512 e267cd9d04f6ced28190e549640aa7e08060673a0f616b7ade1ef3aba4f7c8ef52a082266ec362f42ad2bf3982141bb8476e4be4c97ef8c40248a1d9e25efea1
SSDEEP 1536:G3gKQfQWtQJzaGw3WZiWX0K1pFlvnC2c+6LABHgO:G3g94oSZFkulqJ+6LAZ
TLSH
T1895302A1F19608BE6EBA88B35DEC427A99F9F4E653D66D32D54F124021B8821D937C04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 512KB
SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
MD5 063ce058cf92f6249d441c03c9dcddf1
SHA1 6237aa7a601d9500ac6bf6fb7ff57c64a936f9b0
SHA512 cd8f11170f42188e4a5334ae234c046ae722c3c2f7e3c5c428a04b3cc382fa0cdb160ec992db5a3af7dd968e428fa99475bd7375724bc501e4a86bebbbfa2df0
SSDEEP 12288:JqPcXea7AxraLRORPUdUxYUtrM3GS1fhQBcLLY1bKd:Jq6VQRPMUxBTSACo1G
TLSH
T135B4237717071097D53AB37022CA8BCEB7AF77BA4B01EF7629239744E2C8445F4AA490
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 72KB
SHA256 e21ce53d43bd9e404759b9a267e44c63106a423e70263f87d9e13ccfad4f61f3
MD5 1d4e7b902aa7d072fff5861353725adf
SHA1 3ab24c6848aa072854995d7f477604f2474fd6a6
SHA512 4667de5c55d95d200c604614114228180b0bec7b1e2f4bc204de5e28048301dd956ac0105516cc734757da33643cbef9ef42a2a04ca7ec6810200fed1f842d05
SSDEEP 768:U8XRyk5xUzO+ZR6lrxcgNbZcHTnGWRVmcrODcgAhR0C35hYNeJET+KoASRBqFqTE:UKRfo0rxzbcbzfSDccNaAJ0W9nKr+wM
TLSH
T1DD73023BCC97140DC7999B27A829A32EC10892C6A01F7D3B46C4347975233C5B667DD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 46KB
SHA256 fb1f7da31b3e3a52619ef8586e9fbe2a2d08608fa4075a3b3e54006db1affa60
MD5 8a0603a7b217b3b806642b5fa5552951
SHA1 947a90c7869413b842b88011eaf81e4b76f10111
SHA512 45a97b0297ee39679887ea5b6aa432affa9fc97acbfd44556e5da3e8e24f0a7bf162ad7fb5bfe00118d0c73ec6ec1fad55071f81ce882148c6a814d3c9a6a731
SSDEEP 768:kXpPULjakGUNTbU5DpU0fDYqF77iyq0NXtvLaTMvmUDcdgODKFkdNaR9mqh4iqev:OKG8NTbUHlfDoqXtOTM+9dghR9mvEl
TLSH
T16223F206E1213FA171E17F25C7DA0842BC6F4DB52C9503A8B8B9AB5A1F9453FE4906CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 256KB
SHA256 058eb9674b820893fff9e55cfe93bd695bd889d05f0f90334d3b989715777d83
MD5 9dfb182f3c052fce549551574c7b340a
SHA1 0c3678063cd5bb8bd5bcdeee48f0ef6e7e010dd4
SHA512 64212b0e9cc7518893beba3f2df2dd5a5b228c1f267f9765ef9c5ae328cb7b7abab8f3dcd574aebeecc543f2ede018b5e69412bf57cc840dfce9125b97e1f9c9
SSDEEP 3072:kgfDA0xxnEw3BLm2IZ/TD50hJlxfboz1c+mc/a9tKcJ7K:k70xxEwRMZ/ulxTslkJ
TLSH
T19C441674F7C3EB82DB4326BDA03C3D731B9401C5A1C5591B49A39D61A499B3AE30B93E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 71KB
SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
MD5 8f850aaafc8da0df7f8f0a0b682a934b
SHA1 ef55df2e866abed76fe19b05ceb51c1147a6961f
SHA512 15160500824282d1e829908670dc7405abeb4d571ffdcf94532f55294fce77552c832f27fc14b91141ffd2aa142c441fd8e48df8e43cdbfe9283a043da2460dd
SSDEEP 1536:m4kLBYkMICj9ZBz3ff3Vpsrc6gy86ywUOWo3xmWVNKz/8A7yWuBKZS4PHS:elsr9Lrf3VGQ88hLoxPq/N7y0ZS4Py
TLSH
T14573F15242B8D90C1F6550E30BAA1EF1CD6B18CB94D4A0CCE8C7EF9DD259EAB4D66880
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 512KB
SHA256 934e078410b9deddfb01919752c1d8a6003685dcf003aeb4187c6e2fb3379fd2
MD5 7ef8e2e9401ae3ba1a00f26b7b19d1f9
SHA1 904ae0dce55744e25ca1def0ae2e3af09e279046
SHA512 f17d198257c70d58b9bf79d7af305b237f75c53913f95ffb35d979d5d352e3bd37331611b742335be87a92aa4c3273fa60e829dc8153ad07790ae78a124a9618
SSDEEP 6144:zF3137QZZKdXlFvPoQrq5RP6zYOuV1fY3k:Bl37QZZKNvLrq5RyEOuvf
TLSH
T108B412B2FB31C397CFD7C7B460792C7F1A68199135CC842E5ED74C48A084A66E70B6A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 256KB
SHA256 69c3df0acfa9b94fad710cd600e6d092b54a3848415a3c7b9d178cf9600c58bf
MD5 8ad90e1f14080c8c1e1bae7f97f962ac
SHA1 9f352466e3ae876156d238386ba7d07b1574e30f
SHA512 f60678296fd28e3aa7e77177867a3171df47f454a569a0a0b3d8ca5fc2ea6312a6ae8ab4f18d887bb5e693aa27532a94f42d6912aafea324ebac35895a68b529
SSDEEP 3072:hMScNKwqXDcqK9GvsoglJxldQ4e/4rbJcfJz6nLxHUuOsGXpNBK1xLdmYLP:hybqYqKgvObx3Ug3xGVXpbfQ
TLSH
T185448A70FBC3EB82CB432ABDA07C3D770B9901C165D95E434A93AD216095B35D21BA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 17KB
SHA256 47849169f7bbd67b9ec089dbf0d3c48905899ea2dd797701da9d7e0ab8828bd3
MD5 7d2885375e234250fd5402c5807fb2c4
SHA1 c7dae83944e86749f221cf0ec8498f8a8ad500b6
SHA512 fc9fa236ba5528ff37da711ee76f426411c0e02ab15941b76389ff3cb5d2c4848f92feb10d420953aba81a2e404557b7fcc5bea2b976fab48ca366ca48f4961d
SSDEEP 384:I6bIOtpB8E58XxbwPTG9xWUf6ULe//OiofThj7CS4CnzdWqKD+lVzUl:IQI6wEuXJUTOhSUsWiyThnRfzcqKai
TLSH
T1E082C0FD0B5EEE07691A3988C6619B63084875D7A28D251877C4E4ADCEF7B32DC031D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 17KB
SHA256 17bd64c4f43d604309e87d916f9233115180c0dc0cb5a94cdda36a2add279da6
MD5 64c1bca1e5194269bb0d451eab354a00
SHA1 42a610220f8d89348e0b21e928521bdb681e7431
SHA512 fe3615a09e7e83f01412f62e2b9d6c446d238efe59cc48edde5d50729f1ff700d9772fdaf0e64ef180c068dace00abcd2e284a2effd14db90b44a18fda9a870d
SSDEEP 384:T7ua+M7O7xk0Ib68GKHk6hZ/IwuXClM3lz0EXw8OHI2D7PwwjmTT:T7uxkZb3k3elM3p0Er2PIwmTT
TLSH
T16582C0C04F7AA46E28DB99B9C436CAFC716B8553721E19A1C07B0EDCCB050B29F975C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 17KB
SHA256 45f853bfde5497fee0ec39e378b8940d9bedee1c9ec26cd0609d31786f00cc33
MD5 fb22a9c1cb9acb212cd5879b029d1006
SHA1 a7fd325e50874c33ae4992100d1e54c71d3111f7
SHA512 02fe622a593b7bb3f7c2c8dbbf7fb6262a70c9761b74b759c5f37bca13239d7d6aaae5877c1b25c52914dff3fdd33377d2c44866100db28e992545f3aaa21eaa
SSDEEP 384:h1v82unP6XE7WxwJ3ejNo+EsRAvzG2+LUosD1O5G7:hCxnPHJ3yoB2AiRUo1G7
TLSH
T1AA82D11D17E188E06E3CF8016CA5A8246CD17BBB7FD2167D1A09796D2CF98B01AF9714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 19KB
SHA256 e638f299997ee5dae3c3ebe6f2b9d2ea4707281e5c5a03062ab680d012ee86a5
MD5 f661de2fac30eb8b85bf199124d973af
SHA1 f2831b1c44b0ac8ac97f126bbfc1a2b7bdc55229
SHA512 4d1733ef3ae093f68ead0c40c32178c07575e320cdc704bb64576fb8d65540afb5e942155ab44b842224f33eb94f1f7552da7a2612fcb8a3b5ae319f88fb7362
SSDEEP 384:Y27r6oMJ9jurWur+zo4XBzRuiOD8VSJwE2GZLLkkwqAeR4OQ0GnX:V7r/UAJ+04DbOePE1ZL7KePQ5X
TLSH
T13B92D0AC3E10AA05EFB1219E59B73A07DA07518F25387162A14C48FF1DEA95C50FB27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
Size 32KB
SHA256 baa1977b45467d93164a21ca8f1740256eb538cd925e3521b56cbeccd4fcd60d
MD5 d0a33e840b3127553011e92af4d28bbf
SHA1 c8192f72f6630548b1b5ebf085138f5e201b0d7b
SHA512 964e57c62050b41e31c37d487c3eabfbac6a9afa5d3325c8441c596cc2f9646ff02d8aa09f2ae1a103e94e45144df9186f98a8e341496e39aca613ecc0ee4528
SSDEEP 768:htjSLYGAChaQ/C0Vazvcg4NWjCw4ujfvdyxeS930rwVaMrKN:hsLYGeUVaIgP9ndU9EkVaMrKN
TLSH
T110E2E1413F9F2A79599C9C2A92EF81F23CB2839967BDF1096C8B6178C35834244735BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
Size 18KB
SHA256 ad2483a56557a1ca259dccec7279591abc39b9565f3513c676384dfe060fde4b
MD5 15fac14dedb96ecf1077775671d31141
SHA1 58e8b251869ab8d9c32ea3c297d6f438eed16dcd
SHA512 8eb98407a0afba6b2aec5188883bd129d00e3559a6705e1b1843bd4cae9081a4faed6af5984a29f38f9c4a0cfd548ebe5f29f3aab6942c34e21dcf1e33c065aa
SSDEEP 384:1p/7GUPciEEd227+e8A/cMYIxK82an8b1LUFQVUGLbT46tBKdG8rD:37GUPDEEdlKe8AEs7zfQT3EqBK0Y
TLSH
T1F882D0B84EBC3B5673618B7E42C4B251A87668C30AE4AE38EB35DC337C125469D25353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1e680683a351a2d16c6a2af5e96beb91582e3de1e38bd157d4f17a76157b6b9c
MD5 649e3e5d9e747dd81c81cbf6c9a65426
SHA1 a1e3b12ce9071c6cce9dd4b51297e7b72b527bbb
SHA512 fb571bbf089c38d23009ff3b1cd9e49311c03ea986d2406696c8cbe32a14724ec05180e5363dec686165547adf8a6c19fbb40f8992a15a668e2df2c2f42836b6
TLSH
T180612D3A028FC160F3A0C672A5D11D0E3A7F40974B4F9EA5D3B379FC9519BA595A3848
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 81c69998766494609677613cc0de749c3e5034b1c3765418010d2eae7ea801fb
MD5 bdcf47ada095c36af1710a6c56b1f76d
SHA1 3defc520e50d3da19c9cfdad7f7cb716dd2e6af4
SHA512 1e68b89a57682c3f17a5a3599d12a63b7d0194ee1814f143ee15c570b13c116fca828c5e31030472178275f2d73ea6cda83e369eac3aa53a1b7aacbb59019fee
SSDEEP 96:HQ9EMF9oYJKKSflC5AA+TFrisNRv3Mi+SYvEZYMsBDf84VvSrvmD3aq:HQ9EVtc5A1JR13QvlMADf8SarS3j
TLSH
T119F1B535898BE155FF90E2F194D90DE8B97DB0838A0F3F16A7A33DF8541E7852593824
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 b2eb45663b1ce3417cbab9d6499b537a77fa11da202d3117dd6b6ab03dac2ee2
MD5 1fe065bc1ed0e5f9c086c0c4156ad56b
SHA1 26a84efd11b4f0ea0d253a73ac903b96c3167bc7
SHA512 1429e33aa15f9fe4ac36b14401b640ce5d0f31d810ebf8fbd290ef95aca5659d32ce3707a6a288cc57d3b57dec6044686bc3e79567bf8ff19f06af22d059478b
SSDEEP 96:zqbeDFe4TOVVWsYz0OWflC4et4+rDxRg562MlSYEUuZksDRc8AvGQmD3m2:zqbe+MYOIc4et4yl1HFrvsDRc8Ae737
TLSH
T181F1C83589CAD162FF50E1B294DA0CEC7A7DB087860F3B47A3A33DF9941B6D56193818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe584f34.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584f34.TMP
Size 3KB
SHA256 b19ed221f201755be3ae7ce2e358e3685191de1ab215ebfeaf890a22612278b3
MD5 7d5dee680b943e40643c9ad70c15edf5
SHA1 e84c784bf83e4d9cc4112f2c6b103dc1cb5c5785
SHA512 c4e55bc93c5ebfda38068722aa2d5560a3012d98dac853beda72616246d7cc4fe3863fca6646c3646d5755aac6358ce151b2db42655f36e9214e7ade4e1f4930
TLSH
T1AF612D3A028FC160F3A0C572E5D11D0E3A7F40970B4F9EA5D3B339FC951A7A595A3448
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 25KB
SHA256 2b5a029d587935082c794bee2f9060acba701d11aaa8abd5188dbd3552ec9f47
MD5 1a3c62254cc74794161ee9d2756ffe1e
SHA1 11a0b82d13d76ed70e8bc0a2c041d42b32d5b302
SHA512 f0769bb78750b48c0a192995db446d0d8ad67a7b043d631a675d5378564c357f801af9ae63f48de75976700945d8b8e5217f0e8f1a542a3022fe0b70fcb57529
SSDEEP 768:JuCLrFoD+ybyyJv+pUkVpPvDFD+54MIMwcBjkMzMAMHcSHeITYKlMGjGkd0rf:3F4Hkni+c9S+IUl
TLSH
T11DC26562B5F9560DF27B5FBAA9B21BA1487ABD942D00EC1D5460724E4C71F408A33F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 343B
SHA256 4e2fe884e881124f5dc126aaeea75b7e4607e51f7727223b86090c48ac2f9fb7
MD5 3caeb78fd171d254c57ee26f5a973bb9
SHA1 124080c698785a3d5f2e47bbdfb96906f5f80998
SHA512 7b10d20c60fd026fd403ce91fc3d7372e93a34876e4a38af8ab008fb39545693c023a7e9a60c5d1f3cde9ff313b8376b3b9ccf04ccd5261afd825c1e57b53d0c
TLSH
T158E0D87884C9C61B956550E61526FF09D6B7260FDBC9FD464F0EC840B146048B5BF291
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 ca779c273a8fc0db8ebca97a1e67c458350996075e6b92d56fa62ccee401cb2f
MD5 a72c683ce85b5626b7838a5ed440fca3
SHA1 cb370b1070df3c58c38e562965957eda7cdfb45d
SHA512 fceb70fb0c6aff53f2637a5846a0dd32226251077b1417d488eab234a0171179ab91886b71f1098a97e41580a58f2b87705d7a284abfcb4526a922925178c04d
TLSH
T19771BBF383A6852DDE1156F09E14AF1BCF280516436C3D6985E47F4BA3B28B1E112B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f187e87fd20e9bb907fc2ddec52a892620ffcd82df755e8f91c016aaed33fe72
MD5 90a75cfc688b80b2bf89329f39052d2e
SHA1 41cd0ad4e9063ea74a8b68d9eab07629787bb251
SHA512 97e64c16b92e289085fc1fae887c382f3ba35f7f1f988683bbc97669375b9d313834b6b872448d17519ec388dcad5ca8c840ddc4ddb39024505ee8c43b146429
SSDEEP 192:sxZrRzyM/jK1Ml8Mkg/f9sCKX0rMIdp0YHW6+WNjDY/YHmJoOIgrJ:sxZrtMg/f9sCKkrVhHbQ/r9
TLSH
T14652E8126A34A977CCCBD20DFA55BF53D6F50472A2900E54A9FCDA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 2573c2486991d24f262502678ac86b1eea22391397c3e648b2123de979943cd9
MD5 a68c3b5ce6731f338eaeab4a7c946538
SHA1 a8bb39662a85bbf8442448cc2e3ab6fd4dd86529
SHA512 a5c606a4cfb60c7b8f5cf90cae7cf8a0c38ad4f78581fba68376b9d32ca1ea0829c7c9c2bc694dc3ad824ff4099f639aca3a961bd1856b1c416543dfdacd9bf7
SSDEEP 192:sxZ9QUn5RzyM/jK1Ml8UQn9g/f9sbKX3r9kMbLT8ddp4JNHW6+WNxohn48gZ/YHx:sxZVn5tq9g/f9sbKnrG+iwHbswZ/S7
TLSH
T167721912AA34297BCCDBC21DF902BB63E5F4442796944E48A9FC9A1C04F6BDD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c29e98315e8491266f083f9fa796849c2b8aa5b08d684106ad1045c08b3f0db3
MD5 df7168af80f84bfec2c1e83bf2834a88
SHA1 5306fc15d93194cf62925bcc34067b652af66390
SHA512 ae24ab0305b3038fa9cbed716a4a96366b1c5afa8f08d91310306f1bccc35b2905fb8903adf32e36ec2ecaed87f0351a1fd9de31a8781aef3ef619b78d6509fe
SSDEEP 192:sxZrRzyM/jK1Ml8M9g/f9sbKX0rMIdp0YHW6+WNjX0XYHaJoOIg51J:sxZrt1g/f9sbKkrVhHb4X3V
TLSH
T17952D712AA346977CCDFD20DFA45BF53D6F50472A2900E54A9FC9A1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a85bb72b2421c7dde7aec0412b981917c32827a4bffa4eba89a9642474ca2b90
MD5 ebbeb5edbe91402f131038225e96bd64
SHA1 a3456db84c82d8eaa9d508242d817e53e75adbdf
SHA512 fb587fe23206c3bdae02ea8528965783200a0e2e113bbc130ab03756d9c0375501a3fd3d4c076e571afceac6584daad89e356ffdefe3bdef315a4d25ffd2fef3
SSDEEP 192:sxZ9QUn9RzyM/jK1Ml8MWPg/f9sbKX3r4sZbjT8ddp4JwHW6+WNxoCAi8gZ/YHHq:sxZVn9tuPg/f9sbKnrZpiFHbs6Z/X7
TLSH
T127720912AA24297BDCEBD21DF902BB63D5F4046396944E54A9FC9A1C04F6BDD2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3dd327dbcca5cf3725cf223227171ec2a4fa1403d1bfcce3ee1bfae86681b6cc
MD5 fdb8d09850ccee616af0e4f311e693ce
SHA1 2c1c06d0041a1d18bad767b2e3839c6f533eb6a4
SHA512 10e0f0b90b4df586206b16340950f909bcd6806265496d3856cafadd104ae1f6c95f4fd98356183dff00092f0ae526d81c94107dde1b53952091b734d4780536
SSDEEP 768:ZMUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RuroVN0k:ZMUZYTMWvg0Pou1ja7eLZmRlgk
TLSH
T12BD20A3B280CCB7E4F844E5DEC266F967ED801CB5A984D5447EA884C03CB2EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 870dd8ad9f9d9e210d60929d236a4c4dd7e8939f1dede116e4891e95da850dad
MD5 600cb428aff9572bc286f7c1636a051d
SHA1 c227f66c42414f58ed469a1b4752f6d62fbefde0
SHA512 1128b017287ae55c25a86c390c3d340de45a7974e17ed662968628b0517bdcb5e3df91dcbfeaa398e2419ec5b7a409b9d8c59f59f45569ffe2d82325e410bcf8
TLSH
T1A0A002308BC80415E01361B2556303821380D8A012001B0F44920944CD504804D4110D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 042dcbe17d85b15c5eed718198dfa6ae88a5650aa14e5a08116f189236f64131
MD5 8f801d8ba59c859aba7c20f4d2b8de1a
SHA1 10ca65d303c0df3a1b872ab51d1553ad799ff80d
SHA512 a9c5717b79611c90821b4fe912ed086e4879f25e3726f0f538fb1edffb5afb9a3c3e063a162ae1b42eee925e460b4cf63465b40f7b08f32ee219c3733451bf72
TLSH
T1B6A0025416D21143C1421AB82DD6016127225910AB05230952900644C9945B5564B01C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 50edc0feee045cd78178748e97a4913c2b33e2fa85e8c5d1107f88304051196b
MD5 68b00b39e015a3f427357083b8be9a28
SHA1 9a958b1d07e7a92367e05f2625252aa718bd18c0
SHA512 7a81b04921bc082e871908c6a94e05f212f1be3bf8ad115f50b39f11db4a33f07b05d2d9537754ff64bb3e1d15dd5e330153b187feef56d0b6729c3ce3742d04
TLSH
T1A2A0029543D03541D45712F266E60261A21558E51242233585D6144CC8E4759815100C
MD5 SHA1 SHA512 TLSH

Submit Download

todelete_623cd082b6202da0_0_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\todelete_623cd082b6202da0_0_2
Size 61KB
SHA256 a02bb96ab23b60fe9e2967889758fd173aeb047d7c9062c6d849aa2cbe85e95f
MD5 6e98d1dcf6255095725c8208c2a07899
SHA1 18e86108cd3b541b0110a5ee4236d4f5f831b2cc
SHA512 7063700ea7e76828ae2885b22764dc8b1c6db295536bdb0951f7a3764bb77db70541d73a449e5a5bb673be823ae2f0e4cb5af6298833a3a721fb6d449f7566bb
SSDEEP 1536:3deQu4JfCS+ksYyiApR+M0DpbarcjRPyXV2N5HPwqpzGH/0:tG48bC6Rx0DNDJO/0
TLSH
T1E65339A7B2626135C7AD21D1A49A7F00F11B17461544C9ECF0BC7A913B18ECB63B3BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\temp-index
Size 3KB
SHA256 6d348e54298107e2458b582e23d8a0feb431087508a9ed320c802c57d6bfdd71
MD5 bdf04ecc6d53f5353aba331f8fbc31cb
SHA1 b15229ed8be3d48ef5fdf9e2bdb2e62cc0b65381
SHA512 bfed519e233666c31c90fb4802ff044ebe0b3af50b192c9a9949e1c0c16258f8bb7d05678c97a0b3a34e92351521e965a2455b96ba700c517c9048dcb9203971
TLSH
T10851E90F4C421A69CDA805B218FB54507B3DF8DDA6899B0776EC7434BCC33292D96271
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 2KB
SHA256 2b82990001c771ab29d4355aa8b5f535a160ecb927065e4c49b48166d31ad97d
MD5 34dadf559a7c69b19774767c826fa52f
SHA1 fd2475e4acbab0059689aafe692ea1964653907c
SHA512 736e34b8601f14c614495357fc6e325f0ae7942dedf7a2f2b2be2ebb6d9538817a8fc5e1ee6756a1e3fb266b214252845176d8269d6c3c5ae95a75a64461551e
TLSH
T1E051B74E4D618A5ADCB845B304B2A4903B38ECCC4E519A1368FC2232BD4772D3D5F6ED
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58606b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe58606b.TMP
Size 2KB
SHA256 e262cd0c8931ba2d31be7d3015a92b912647be0e0116ea2f202590c6c54d4b63
MD5 fcbeff65696f6d071d39dee20587662b
SHA1 084bb3f21ba8bd5b25ae65bf1b761a85693dbe61
SHA512 d23144002664be08433519281a0f976b100d5f186edf70ae5f295bd4ead97be8da058d9ff8dfa2db52f2adb2c6291c1b3a396ba446a33d3f5c02ab4b9ddbab06
TLSH
T12151C68E8D428639ECC440730DE3A8A4373A680087157F0334FC5632AC927AE3E0E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c010d728-23bd-4b49-9a62-72ab5a2fd376\index-dir\the-real-index
Size 72B
SHA256 9a50a53c9d127290ec0d58575606ec3cc642ab8b7d30d240cd533f560134a7c3
MD5 018de673c8d6aaa5ce207c7f93c2a8b5
SHA1 50b62e5a5c633a1f59e58c510115b973e20f7982
SHA512 9e3303e58e1b0f6259facd6ddc94507f5a6e70bf0a9d8ba42e1b59f8dfe4c051d6513829b90012684ff67ee512bd7cf0d39c3d5e2439411dafec2d948b0bcb24
TLSH
T1FFA002321690A502C58143763053528827129C12414B660247A5B56A98783816111164
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59d7b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c010d728-23bd-4b49-9a62-72ab5a2fd376\index-dir\the-real-index~RFe59d7b9.TMP
Size 48B
SHA256 58feab135adf2e02a65ee08f252f4c2983e75a4b38d1a554a049477279ef5f04
MD5 3d75fcc6f24d73aeaf51552ff1d85ab1
SHA1 b72e7f7170edce08838b2990cb7a8ef8a06b09a8
SHA512 4afc9d3da32fa3cfd7ea5d6af58b1616be61ea5f10cfa22cc2e275957f8865e4f725355460a0be01258f18608d84afa2ba92b91bffbf52b2749532ae46b47c8a
MD5 SHA1 SHA512

Submit Download

4f2277ea2139c475_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8b22c76-83d5-4ba5-a263-0cc9da1f9e0e\4f2277ea2139c475_0
Size 61KB
SHA256 d48ab02b50fe4909c0592878016ef799fa7cb2c4a3ada4244183750fd10777b4
MD5 c4fdfeaec92abb5e4b7bdfb70268adf6
SHA1 7c3b96d8ec06532222dd38c29578d15449e9a1dc
SHA512 06688e39effd2400ea9ef17562a0f082d0bc6416096c47911df51de9c71afb94007a5f11a239c03a3b1e79390ba4923fc68ee3205ffab2702e92167b133c696a
SSDEEP 1536:cz0eUu4JfCS+ksYyiApR+M0DpbarcjRfoyXV285HPwqpzGZ/9:c4i48bC6Rx0DNDzQ/9
TLSH
T1C85329A7B1626035C7AC21D5A49A7F01F12B17561444C9ECF0AD76913B08ECBA7B3BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8b22c76-83d5-4ba5-a263-0cc9da1f9e0e\index-dir\the-real-index
Size 72B
SHA256 cd0421fb1eb6b62b5d5aba6ec8c7d5e30fcf31aec6fad96a0f70bdb104c5bd7f
MD5 d9e1aa1a37bb38f840862940ee2d80cf
SHA1 597c908a44c2432cb0597344f5b98eddbafe1da5
SHA512 14e13dd04a16b96136cb440e8b26e92217e998592c3a6812f97e7cbdf1865c14007622d0af16d42ea9ab146ef5283c3ba72675fd3ed77b7c2bfb4ec46facc2ef
TLSH
T121A0026412987081C4114EB692C6017033186EF60112533554D3145DC8FB759454505C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 8676e5d4a41377fee4eea705b2a24f3bf762af214dadc1e9e459bb3d5c0ea8c2
MD5 e445cf745ac87fc18d3abcbf338e765f
SHA1 91b3f34e58f13f7137652c05b391f2955862558f
SHA512 4bd0a4108c357e019b48c2f3fec1878f4089cc36df872617ee8560c464ee4bab1e02c5129ddb37cac05e5fd01bf9d370ac72e46d64262a5457e88b29d0ec6180
TLSH
T134F097A37FFB1815BDABC3D350B1A0A005053C64854AEC8E005BB2A3A0B2315251DC72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 c8f1a055dceded710378e10eae3528347be7194ab69b14496643e127633c0ecb
MD5 affb4db35b12ac717339d39b9f4d6710
SHA1 61fba3a35c13a47d44259f749855bf742791cff3
SHA512 4d9a28dec6777b107bc2a375186eaa07fae60ca467a1c8cac60c4073d000df9b59d8165b5890c6b1c63526ef260b92d22152a7a20b2a4663d420e90fca2e4eab
TLSH
T110F027A77FFB1815BDABD3D614B1A46415067C688549EC8F055AB26360B23152419C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 7741105df9d20739c178c9783255e76cb880e2aa1b7c1f575b8a9ff391be598b
MD5 1ea89f946e2e77b17feda094b0788c35
SHA1 44f1f34af13341cc22ab60e9cf308e8347663cec
SHA512 a541e98d22be812acc31d1ae1434e2e342b7a6346a4634eef85b488bfe4dd6d7309f5cdf7c2c9a019c846f832aa639dead0b244ddaf36f847d0ab6d09559997e
TLSH
T113E0C0F73EFB1810AD7FC3D74471A4A405113CB8C64CAD8E00AAB2A310B23002806C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 37c07e7aae9663d403d2948804315f7ae84402aaf77df2f8c52727c22fa7cdff
MD5 fce3e073f60683b8a15056b7d6f6799a
SHA1 ec088a91c47ecefac11ff0e5aea4f45c633b24ea
SHA512 59969c1ed585064b83cf3acacbb7fe446222a9cadc228a45e03b0ec8831581ebaeea928503c05fabfdf3101def52497131ca55ec8a7880e12079bd95ab9480ea
TLSH
T1A4E0C0F73EFB1810AD7FC3D74471A4A401013CB8C64CBD8E00EBA2A350B23002806C32
MD5 SHA1 SHA512 TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 127KB
SHA256 6673a0ef96e89d6b22b16f395c9cd5982d0f670a9ac2552b761e4bc091d4bb3c
MD5 ef960122a66682d508c85575d90879de
SHA1 b8ecb153bb07fa2bdf020c7327b20807d3244d13
SHA512 92d446a18d4ce35a86fd90234d617f7694ce325d3feb5e402ca07f820840b1fb9173d44547e1091a4e156f9442870bec784be90573479e545fe88e3fe1922173
SSDEEP 3072:89w59B4xPCx1C4Ke3ThL/A25/Ax0gL/tL/vL/dL/yL/df2Jtm:89wtzhL/jFAx0gL/tL/vL/dL/yL/dqo
TLSH
T106D3AA32769D509B0E8ABAB45056B50392BD7467B8449038F244A7FC25DBFB013FEEB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 8ce6c014ee0c489a9a7978500d32fc1e33e454f674a19ed1fa4a06570d44ccf8
MD5 83e5cc32af6b66ef287b18d7a9b921e3
SHA1 ed1b5003491a03a1af1a738e4c1a8a2074dfb49a
SHA512 5b79714a925b7541ce6160d9c0517043895f8fe78913fe272ec0209b79146ff92c97ec0afd4446f5f83f784bd2cf1a085c3b6d0b5c5882cdc7f8810dd8478c91
TLSH
T11DA002198F9D9495C40143B8A0F241CC7B2098DC0715379148AD01588C5A34041E2125
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5915a1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5915a1.TMP
Size 48B
SHA256 9bd6ee969cf7e5776f7c2d707cdb244a6824a92fcfa9b7a70bdc70d34e7bffc1
MD5 8caffa126fd55e2e1e1803946aa9a34a
SHA1 7a231e5d4ce6944c07765f61d248fd3ebb78823b
SHA512 1e6e281e43e149b687ddc3eb318ca9b1849d849f651cb67af8b99e7289cbca20d641eee077e530fb9e79b3d441599a517d792b8aa190f51453b3cc53cd1dbe35
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 edace931fe86a787e43a97753a93acedcdbebbfbaa37415bb6b381f8c6521c66
MD5 6bc577c24f751d867af98c25ed106732
SHA1 1a31fe00eef84667643711e590cc5785e5297f38
SHA512 42276b7c4c2f3bc0edbeb09ebc928341243b2083e631588459ddb86f00bf0c3c1fea7658ff5688d7e39493e9dca071b940eb3f30e670d22713a30defd1de440c
SSDEEP 96:KA1eK2AYPOKQo+G1CKG0vLsfrZhR2ThC9Rr2KpTRd2tjLaNLnWNqK+0O:Ect51j5P
TLSH
T165D1F75271FA22013D7E3B0982A497579E45F163311CA96B7BAC10B64D2AE21DCFF8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58ebd2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58ebd2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bc9277283249cdd20b27f2dd3c365168822d4546289d92b95d1c1ad2a5140c59
MD5 5023491b8dc4dfeefa39bbe501c84a83
SHA1 365acd32b2a2e07686caff6553ef1c4eb41f8ca2
SHA512 2c1a0f62b8d400743ef7abbd98046bfd8679067fef17d3cc99421e1ac7511b7dc5eead982a9a7727fbc596a209f30e3149bb088d8b944b0ce143647c83267b49
SSDEEP 384:tSZcIhsNHcvSnunPzX5od+W8yLXzBnTKwBODNZOCJKDM:tghuCDOtzBnewBKZOCf
TLSH
T171928D71AC386C775DE6B149F84B31034EF89467E6C82F9492ED6B2C00EA598130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f1bdc3cec107d4bd220fef1c85547d5e6969c41bda9adb1fd294a738fa7bc7fc
MD5 3ff62d61672502833c240508ed0a49a7
SHA1 8e43752d5a1415a0f8b1aba60fc43c8a4f254595
SHA512 9ce6bfd49eeeac6d056f58006880a6fc5f1073ef9fbdb4efcab55d3f8baa0aecd41541cdeb41d0f99893f70881fc52772c05a23dd9813084147f08d636263893
SSDEEP 384:xfiFiZcI/zsNZ8TUNTUlIl8TaSnWi7zX5od+W8yLXdBnTKwBODNZOCJKDM:xqFQ7AwgIXfOtdBnewBKZOCf
TLSH
T171D219F258DB9836D9AEA747A73E3D024EBCC063F5846A54B3985A1CCC961BFD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6355aaab0b86413b85d9457cc37c67302de5f35fd251f9b3edca470ad6ceb7af
MD5 3dbf81014b40e87c09332a5a85f0ce4b
SHA1 9709585024e1ef055e244f140b14600096e08d67
SHA512 0ce40565703c1e5b0b04d54eac37005644b0a0348b8fc8abc15ee50bd85c66849e3f53fec9c991edf302b7a6bf2062dd54e9d20b30853903bf68238c71e5e27e
SSDEEP 192:yON861VWQmiUy6rgGX5Obd+j2jzoryXm0/aX3mDU6:yON86W7gGX5od+W8yUGDU6
TLSH
T11D02D935A8687CAB8EF2BE49B48B37135F94206BEA552F84D6E81B1C00D765C2307C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 08d0169fadb9093cf1483ab9e34be6c5502e3aa381ebaf8d5a24b9a8eb31506b
MD5 a10a149ade5075260ed5e1d8fc587085
SHA1 f0e25c14250e33ab7304f98d7948435185a5cffb
SHA512 fc79dd9d2f5357610486073e46ccdb4d9e800240025d91052ddf144041591536851e701760600aabee715c1c911003a1a9c3343971fbf25c1c75cb7dc29723b5
SSDEEP 384:ZSZcIhsNH8TaSnWKQ2zX5od+W8yLXzBnTKwBODNZOCJKDM:ZghhnQqOtzBnewBKZOCf
TLSH
T14E927D71AC386C775DE6F149F54731078EF89467E7C82F9492ED6B2C00EA598130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b8331ac7a86737522d16f4ca61df1764d2b42feb2b4bbe363645ea5b74ad1868
MD5 1c36d4b97187c36490d8bd830ae9dbe5
SHA1 69627d11eeb7c85efc53c620aca193a903761d76
SHA512 8c8ffb2c5be6a360377595aedac0634f913a61f5baa8ea9296ba641ced202ebac0d2646504d21c14342f2d6e7ea70937da279f3a4986cb2e98cf89a2032084cb
SSDEEP 192:zzONq615rWQmiUyirNGX5Obd+j2jzoryXmOXY7djJZqUU6:zzONq67OVNGX5od+W8yLXyBU6
TLSH
T11312E836A468BC679DE2B585B44B32135FA5512BEB446FD0D2EC2B2C01DB59C131BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 804beb22778197b764d297305a05c5a5d738376490319d1a67aa94e8ba5f962b
MD5 cab013b7770ce6c09eef0ec515e42596
SHA1 c12099a551a70eec9f3469d6e8576f43666b0a7e
SHA512 885988fb768a7a17a8f0179b05bd17f53ae8620e279d5784077ed78e78c45b8c1d5d2c318d11ea292a50ed1ea0bbb223c91ba353aa654c4e11ffe4ad986b5cb1
TLSH
T148E00216631040BFD438173400831F312EE3827403B606459B70157C2C233007E30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8b7861f470da64c8f656cee8caa2090c2fbd7b14d553fda1f9a9d541a89349a7
MD5 d970715622fbaa6cd348157249dcb2fe
SHA1 45db4fe47c4707fde98aae742e9552fff0c62eac
SHA512 b96647716abc2b23c1a8cb6675938ccad0ac57378df39629be7949f8bae6d1068310e6ebf67a6e9c1239ee538d9e1cbd9f1b5a9353fa2eae75764041528cffbd
TLSH
T1F8E00216631040BED034073000431F311ED38274037506448B60157C2C133007A30FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59791e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59791e.TMP
Size 392B
SHA256 9587d987ce604e4304311c865233d5c45bd4ecd2b1e266b79550d77a32ad6c1a
MD5 bb9e2d9b86e0c583852d1650dae3f0fe
SHA1 818046ba0a44870c011e1ad643d7059c0c466ec4
SHA512 d6d6bfb704648364070b495c710cb8559a5283a76eaed7169c2eb6d6a01ee6db5df5734c5f68294a2861194a129cb152533ed67abd9f4c45d3a84c67c365b6ec
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7d41019dad8dca5a2a70a48e322812bb0760727f84cdb27c1ab8d88f54634b59
MD5 364fc83291b8b4adaea9a8206b556791
SHA1 aa2312030195fbdf9023669d98bfe91e38bbf532
SHA512 a736d7511bee986456e36f8dd3321caba84dcda39e27d555ec65ad8217c152244e73174f6a3974d59659b492df93800f187247fbad6251085fe7809ef3899c05
TLSH
T178412859A6F90048B3B66E1A5BFAA86D843E79772F0BD45E10010E4F0A66B04C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download