2213f5545cccfa1066a727c908e7003e76968140cf77077273ac6dd0a7d8cbb5

Analysis

user interaction
yes
max time kernel
598s
max time network
558s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 23:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
downloading.html
Size 64KB
Sample260809-31t2lada48
SHA256 2213f5545cccfa1066a727c908e7003e76968140cf77077273ac6dd0a7d8cbb5
MD5 59a4fc7ca8851c25d74c4f77136a0d9e
SHA1 acd27e7d6c22eca151e4dfdcaf4d405f999e4a00
SHA512 7be5772729a75f88585bb4813c86d25827deac792decf75b7ad5124371f6f035cef214eb13b58b745d4702bbb90dbe67650c1f2abfd13e8d94054095f3a7237a
SSDEEP 1536:ldhdHMRLypN70BDc7KGAr9gLCE/dkDrxi6cycS:ldhdHMYv70Bw7KGAJgLC+qrxi6cycS
TLSH
T1B953B773909840AA7F4FC7E8C160732CE155F646CA0AA7A5B2FD719CC7D8AF6147A20D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1168	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307935669589389"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{355CBC1D-035B-45FC-B0D7-5FA78777C70A}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2728	msedge.exe
2728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 408 wrote to memory of 4936	408	msedge.exe	87
PID 408 wrote to memory of 1168	408	msedge.exe	89
PID 408 wrote to memory of 4340	408	msedge.exe	90
PID 408 wrote to memory of 4340	408	msedge.exe	90
PID 408 wrote to memory of 4340	408	msedge.exe	90
PID 408 wrote to memory of 2328	408	msedge.exe	91
PID 408 wrote to memory of 2328	408	msedge.exe	91
PID 408 wrote to memory of 8	408	msedge.exe	92
PID 408 wrote to memory of 8	408	msedge.exe	92
PID 408 wrote to memory of 8	408	msedge.exe	92
PID 408 wrote to memory of 1120	408	msedge.exe	93
PID 408 wrote to memory of 1120	408	msedge.exe	93
PID 408 wrote to memory of 1120	408	msedge.exe	93
PID 408 wrote to memory of 4156	408	msedge.exe	94
PID 408 wrote to memory of 4156	408	msedge.exe	94
PID 408 wrote to memory of 4156	408	msedge.exe	94
PID 408 wrote to memory of 1900	408	msedge.exe	95
PID 408 wrote to memory of 1900	408	msedge.exe	95
PID 408 wrote to memory of 1900	408	msedge.exe	95
PID 408 wrote to memory of 2548	408	msedge.exe	99
PID 408 wrote to memory of 2548	408	msedge.exe	99
PID 408 wrote to memory of 1828	408	msedge.exe	100
PID 408 wrote to memory of 1828	408	msedge.exe	100
PID 408 wrote to memory of 4688	408	msedge.exe	102
PID 408 wrote to memory of 3764	408	msedge.exe	114
PID 408 wrote to memory of 2612	408	msedge.exe	115
PID 408 wrote to memory of 1672	408	msedge.exe	116
PID 408 wrote to memory of 3720	408	msedge.exe	119
PID 408 wrote to memory of 3720	408	msedge.exe	119
PID 408 wrote to memory of 2264	408	msedge.exe	120
PID 408 wrote to memory of 2264	408	msedge.exe	120
PID 408 wrote to memory of 2264	408	msedge.exe	120
PID 408 wrote to memory of 3636	408	msedge.exe	121
PID 408 wrote to memory of 3636	408	msedge.exe	121
PID 408 wrote to memory of 5088	408	msedge.exe	123
PID 408 wrote to memory of 5088	408	msedge.exe	123
PID 408 wrote to memory of 5088	408	msedge.exe	123
PID 408 wrote to memory of 4268	408	msedge.exe	124
PID 408 wrote to memory of 4268	408	msedge.exe	124
PID 408 wrote to memory of 4268	408	msedge.exe	124
PID 408 wrote to memory of 4172	408	msedge.exe	125
PID 408 wrote to memory of 4172	408	msedge.exe	125
PID 408 wrote to memory of 4172	408	msedge.exe	125
PID 408 wrote to memory of 1864	408	msedge.exe	126
PID 408 wrote to memory of 1864	408	msedge.exe	126
PID 408 wrote to memory of 1864	408	msedge.exe	126
PID 408 wrote to memory of 2236	408	msedge.exe	127
PID 408 wrote to memory of 2236	408	msedge.exe	127
PID 408 wrote to memory of 2236	408	msedge.exe	127
PID 408 wrote to memory of 728	408	msedge.exe	128
PID 408 wrote to memory of 728	408	msedge.exe	128
PID 408 wrote to memory of 728	408	msedge.exe	128
PID 408 wrote to memory of 3048	408	msedge.exe	129
PID 408 wrote to memory of 3048	408	msedge.exe	129
PID 408 wrote to memory of 3048	408	msedge.exe	129
PID 408 wrote to memory of 5080	408	msedge.exe	130
PID 408 wrote to memory of 5080	408	msedge.exe	130
PID 408 wrote to memory of 5080	408	msedge.exe	130
PID 408 wrote to memory of 4976	408	msedge.exe	131
PID 408 wrote to memory of 4976	408	msedge.exe	131
PID 408 wrote to memory of 4976	408	msedge.exe	131
PID 408 wrote to memory of 2560	408	msedge.exe	132
PID 408 wrote to memory of 2560	408	msedge.exe	132
PID 408 wrote to memory of 2560	408	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\downloading.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffe06f0c188,0x7ffe06f0c194,0x7ffe06f0c1a0
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,11468191007289224317,9843662226132152989,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,2233283442398299316,8255485928568852212,262144 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,9965721526082672967,241084088638981927,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3200 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,13304946144704699213,6996501728670148123,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,5193258146634987378,7788138695824957821,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,9715857073487735333,10848306879419909687,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4144,i,3148766306123867066,16032254335024844643,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,15209806578837390315,1672889407317464024,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,11435420578554413794,5744065318617422307,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,16924374150216715132,7977388567263899475,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,16924374150216715132,7977388567263899475,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4972,i,8295526126851628234,10415222583114196933,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,12197170564718207388,6874053644529391733,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,16872621239275351124,17608563821683436311,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,7558238029792718388,34226036590611090,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5872,i,658328293116302357,10147545479078603308,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,12215537703693147133,13893775756522514189,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6800,i,10177315035331138081,7239061887772362320,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6588,i,12176318432330599714,9013893061516463951,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7000,i,13391647783055940335,13689565044367913144,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7108,i,8782603528364389667,2171780648933798371,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7236,i,12824744851659012920,4939097224468037393,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6720,i,10535700222336651855,9927887799664674446,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7480,i,16598274645216199531,7631446734331738448,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7508,i,12901684038011288699,5749118393219014139,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7476,i,15273408545779714321,5608952422274860912,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7468,i,15843666721561461713,12009955315478646084,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7280,i,9479979689073531402,18223252288656983448,262144 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3988,i,5662652420902073502,10099164614088310274,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,17189195162318851046,3148901802091377827,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,12298899420536648343,8578304140609887906,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7548,i,16422801633798319700,3053924156381601128,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7296,i,10030571503940810313,13044906651926290657,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2244,i,13140357300907642556,4763821132289954388,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3992 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7552,i,11089858462461835757,13438331124012304344,524288 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7204,i,8269725470720999135,13892861149110694209,2097152 --field-trial-handle=2352,i,11482266108132246243,9429908016177868888,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:8

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 172a2e6270fcfe7698d293a138d2b771337d3aa092540bd158427b940d8f9c1c
MD5 8dad37f25b05e1cb3702d8dc44edab1c
SHA1 9016064b6a18545f0656005d1255059a88193cc4
SHA512 c3b70a556b368ef865236e1b2d4193dd96c6f306cc2371764186142cf576549c146870e25e32df94af0bd07c7a942b05a4afcd33b8a2890fd3eac4c380d0f639
TLSH
T120E0C0D045CDC62EDB0BA843826C730C8184324B86E4FC4927C4848C3101690FAC7B65
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3f98ad7cf3a69a9bc645b4f16f799414bdbea94d0a997c5195ff7e7ceacf36b2
MD5 e28b19f23644b8842d66e86aa8c9f252
SHA1 71b287e8a3837b304634aff42c83fa01b3ae63fa
SHA512 86865b8f69f377d7e4af0ae9a67272dd464341b9e7e291cb79c05068051e1feac206663de10c08a67901e6b471bd9e3b789e3323f8dbeedc0014f1594560d10f
TLSH
T15AE026A644EDC2AFFE407687E279434C9280365A97C8F90A374088C87443460EA83BA0
MD5 SHA1 SHA512 TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 406KB
SHA256 c9ec15f6b284850a9e9c19a7e64a22154929e0f9e15a44f9f7e394111739fb9d
MD5 9216d5af8ede8d6bad7e05785c4f1536
SHA1 6196a652118779feec14a3c1d560d8a85fb296ac
SHA512 4707760777c417037805268bcd345cea67cdbf895ea01a002a157f9442c81520dbff93cee7047922e1513321e90db2bbc4d62365a5cbe51f308f484d7aedbec3
SSDEEP 12288:O+3o7mAmn/5Y8dgX4V+1iOF8MB/noCWnm3LMZT7LDkwFdqM:OrKAmxDgoV+YlMVn3kKLMZTbkwh
TLSH
T1879423FE7405ADD11AAB541F91A0DF9284D045E178637B997EBF4CE8A84CA27C4C8ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 68KB
SHA256 096265551a5ee356be7ccefaa40a7de3929105288e029cda15c965cb65b55eaa
MD5 f6709d44783ca7b4b921437ca7dd2727
SHA1 a0c6e731ea03274fd0420c360b5f8079ca719138
SHA512 34b45e20793f4de99caac1c28fca40953d4bc2902ddf4dac70c55bc28ae28cf01632095b20317c8c661832fc1b971fdc2eb05450ef8fcdafe74a5084589ad52a
SSDEEP 1536:GeXJHPV3M/Ib+Npon9pSlmtHf+SxQBEnhB35LsKMCoNx5p1WFK:GYV8xNan/rp+SxQSnhB3aKMCix5fWM
TLSH
T10C6302D8DB1C78A3B3A11891398B31876F920AD1DB0C79167D7F521E5B623EF4071B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 1af94d2c7db8aa89ae6267bd05a6ac10579c01a8775a36d7bd1bc9dd2ec08389
MD5 80ab66888b7f5983164f01c48cf8f31b
SHA1 1847bde30c2fad9d1397a68d843f1a730b9d6e68
SHA512 f75cd0a3630e8ffad9030226105b2f31caf8aa2b1567abcda44257f48728f9b825cfb5fb12464b46b49189d25e4b880781cce79c5efcda6af8ef94ac5c8c5dfa
SSDEEP 192:3p8ICrks3PZqRkwvtBhGa4IWnFBypr1DEOVVPv1nNEawjOQSz54g3jO65GcI744U:GmjWKpP36q+eW+
TLSH
T1EDF196FD87E6C5A0CF9654F6B4910D84B53B68EEF86F2E0A83004CB52687BB08B9445C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bafcef7182661a2c6414ecff493bc44d6e0310bcfb48f73ed6caec8d3764f390
MD5 ebd11294939101e5408565c04a221038
SHA1 9c09e3471615c6b98824b358d8c7eba9f5c12ad6
SHA512 6d5f89a52c2e30306dcbe741229c784b774a47c1f39e4a26314dd9cc2ae4ccd1b0e755a13041a3aff3d156b130c95f0e16deb4a400a219004bd80b977e2aeb9f
TLSH
T1F861F8FD176208E1E7694071B0E2064074BC3EDAF53F7E8E935088FA6616F668F5929C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d9c1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d9c1.TMP
Size 3KB
SHA256 e081d8b9398b5522155df72de5790c166e8c4ed007aafdc9be75e3152816593a
MD5 516f23a525a28f9eaa2a1336cfc6cbc7
SHA1 e6458be9af62477d660127cc4e613942040c74a0
SHA512 a84fceeac78d3b7b29b143f362c825e19d8bd782777db91f079708a41ef54f70ed8d345e2afa58cee49019e227b5e60804d17b60021258329e9f8f11507f66b5
TLSH
T14361D6FD176208E1E7694071B0E20644747C3EEAF53F7E8E536048FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 7810e884dec45585cf02767fc3899064003982a7b494b2b2f956b2abe3cbde94
MD5 bb2d8d165f8d990fc1c84ae9eede5cf1
SHA1 fbdf3089b7980f7ec7ac161862b67cab7d199edd
SHA512 2c0f99d2607cf536b8d46e0e0788188e49b9021f94a2727c3ce82dfe436fe9bf720779e0a20ea694c1fb903727688f532b7166f41c80da836d8f261e11e7b07a
SSDEEP 96:D9OYJSsltU9LjLppzmrVbXhwBc5G3tHzRBa4yiEL/jvax:DQYJSsXU9LXppCrpXhkc5StTHa4yim/K
TLSH
T1CCC1BCF7C3E9822ED91152F09A147F1BCE2D0546436C3C5A89E4AF5BA3F2471E141B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 edd1cb3c815aba1bcc9c3b88bdd5829ce7de7f3f95fa257f961eb7a4b7d754ba
MD5 6b7e7da213480f01ad4b724db655e30e
SHA1 d063efabeb37e28382a43b9fe1877c24194bcca9
SHA512 862b4e2ea1dcacdffb39bc52d07d113b53e2e5f2a33823dedd61e2de4c27fb843dd7c30b3f7d08e3a0c79d52eee3de820f8dc9aecefeaa3caa0a516d4737812e
TLSH
T1CC41B1F7C2D5867E881156F0AB246E2BCD2D064A422C3C16C9E4FF1F63E2475E24269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 915e98e3d277f3587977ee18680b454e5e6c66a947b57627bcd443d6b87b1dca
MD5 535f8d1b04e18d81e739d2d31e591ddc
SHA1 4c513b5263f41ae71d8e9d80fffdd134c4ccdd7a
SHA512 6847300deaaa27589c67a0ded192a4ef84de06d833e2f0463715efcf21fd9b5b626c59e4f1468aa43b23d41513df89bbcb846c6e6c9437a3163b536352a6bae9
SSDEEP 96:D/OzJlvNL0mjEpKzB8VbXhwBc5GOtHzRBjGyiEB/IvtGj4/3:DWzJlvNL0mIpK18pXhkc57tTHjGyig/A
TLSH
T135918BF783B5426EDA1191F0DA14AF1BCE5C0047436C7C5A89E4AE17A3F24B1E152B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 c3d67a9ef47f3cbd9936b27c2f33ce90e3c9f98adb20cb0000aaf0d78c142abe
MD5 3bfeb952e6dff5532b99a70c09adbd73
SHA1 de774431705958d26b51d7b6087859adaeedc138
SHA512 4d7787778c4cfcacc94e8d76acab4319dabb9ae1852458e9bc0e8d6853df81471872361c7a8809629d725165afc79b62417f314773f9e4b82cee2ac6ddf0cda1
TLSH
T16ED02263124030B5B9AD3FE140EAEC8FC377006009C2EED822D0989E16B34AC8657244
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59e5c2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59e5c2.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2dba61d1724da4a3a0872dcfec0c0496b46de580e80432b2fe9636f29f5e1421
MD5 cda7e1de7abccab78620c600b000f1a8
SHA1 a3609243f632f0e47122ad98e2ca305bdb9f294f
SHA512 68bb2b390848ab9f73a33fdf0a171707fea2417acc97de7e5882060d5a8419778a73d30d47911717a530bab51458b418b0ab2c2aab77f9108cefbd3d8c520d40
SSDEEP 192:sxZ0RgyM/jK1Ml8Mk9/fYssDdk7IdpdxHW6+WNGY9IKRl+cIgrJ:sxZ0WM9/fYsedhnHbGcN9
TLSH
T12A42F9126A386977CCCBD209FA45BF53D6F51472A2901E54A9FCDA1C00E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 74f5b71116dfe7ec36d90c4967af77a3d49573f1795ce2545c0dfbee1e498a02
MD5 caeaedd3db6ee0df929513d2edda1d29
SHA1 90f7a6541f92c6f4c172b4aa8cb23c87669f4181
SHA512 83cc70b63eb058711733ad78170270983722279779504a6408115ab2d9d4cbc6ed1732c7bf3dd63dd995bffcc83a0ffa8f6c2987746c39e5ceb4c0d1d34af55c
SSDEEP 384:sxZKn3Osm19/fYsu4eBtdHbKb/FNGmfQ3mfd:ss3Hm19/fi4edHbQFwmfQ3mfd
TLSH
T172A2D6525524C9B7CCCBC518FE35BF62D6E50462CD910E9CAAFCC91C04EB6FD2A1682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 7cf73275e52ef5b725ac2afb58af457793597811036a1908b2537f4b63967da6
MD5 e529fb13c5bbbddec507ac3655315889
SHA1 f6a16be9a8f41bbe880b619801352b9e439ffebc
SHA512 09d1455b2c565de9840a72b347cd6ca28843a211993d7bf016a2e260971c3e25dd8d55e9f412f23a7327004f7040e1b37a6e5145b53cab92dbe7429600176333
SSDEEP 384:sxZKn3OqEm19/fYsu4aBtbHbyOb/tNGmfQ3mfd:ss3xEm19/fi4abHbFtwmfQ3mfd
TLSH
T120A2E5525624C9B7CCCBC519FE31BF62D6E50462CD910E5CAAFCC91C00EB6FD2A1682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 f70ea4fd4c80aa942601d7050df61794c4bb20940b7d03295afb6f45fe8ae82b
MD5 df6b6a5b5d102f1536034b8d89dc421e
SHA1 7c8587cb57134ce5aa6d9638daa6101bd696d65d
SHA512 c58f0b91c118fc9261117e01ecf3093f3413adaf5ece01c737cc1432e331fd8d5f4bf1190fd73fca4bd0d5825cd3148c05456c8e25944ac36f4b406b1e4894f6
SSDEEP 192:sxZUQUngRgyM/jK1Ml8MWO9/fYs8D4khsb85dp4GxHW6+WNBN1/Y9I8sl+cIg5Qz:sxZKngOuO9/fYsu4OB9THbl/JNGmfg
TLSH
T17382D51266248977CCDBD518FE35BF53D6F414629E900E5CAAFCD91C04EB6FD221282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ce0a4db4cf5a04bbfd4a3125ec41e72ce8e5a90f310ad08f24d8b629b49f75a2
MD5 b37a648bf9d5c521724b06e2370752b4
SHA1 9bac834879ce019f9dece7af04cf24046013ca57
SHA512 2937d3f747c9922ac895d627cc02c8031317b1512bd01026d15426321c8e730807d4e55c2e6de4703e510b0ac510e63dad4e6276e12a5c329d9486599c33f523
SSDEEP 768:Jecv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNSroBg6q:Jecv21wWvu+Z+u1jaeFLeRNJB6
TLSH
T158D2FA2B280CCB7E4F841E9CED2AAF866ED801CB56988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bb62e796-f9e3-491f-a26b-e3633b7c0a08\index-dir\the-real-index
Size 912B
SHA256 9a0a4de3a1e427a0de7119b1d28dfa7cf4be14bbb5e9a43d5ab8316643018ccb
MD5 84bf324895edf24395a810fe874254de
SHA1 b6fc99b7352a248837e5a2decc7191273f26e926
SHA512 de692cc2bccd5973f140242ce61287f3c4848d6a21baf551d6e95a0647951fabcd58b4bdc3beb11a5b5860854ff45749dbd8fcb43fa092e959314821c1784125
TLSH
T11111238A4ED95D2FFD654AB7107A30F87370C9DC6711D723503D22372C6634928170C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bb62e796-f9e3-491f-a26b-e3633b7c0a08\index-dir\the-real-index
Size 3KB
SHA256 3736c0398222391d1ea4cb050f152b477928d2db299ea70ffe262c67669552e7
MD5 54f3362a059e4e862202aae7ede50d1c
SHA1 19079e94abcd574cd9f8e1a04776b58630d72c73
SHA512 ef2d3a15ce11939e15bf8cca0e4ae066a346e574eb2ee33c15c767d078288ec2cdb6c90c7c6df6ccc389a40492943d4bb8e647cbc2534d78e39e4e554bf5677f
TLSH
T1BC51F88E8C476F65CD9C24F318F71842733524FE96894B07959CEC347CC33292C6A615
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598795.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bb62e796-f9e3-491f-a26b-e3633b7c0a08\index-dir\the-real-index~RFe598795.TMP
Size 912B
SHA256 27da1cef8992684250f1c277248b72a5a97edcac2277ca9be8cfd29ce3d41093
MD5 048e79715e9520c03df22bab7d5a23e0
SHA1 5129f712248c04505425703843e102fa58d871bc
SHA512 3ed99fb8debf141e395d8ad7d03ee10aa42d855812632e75dbd773d4134f6ae672ad6be43a775ef13b16f2e6213e74023c581919b108ac3556d885fc8c7c1839
TLSH
T1F411628B87A24D6FE85441BB014AA0F87330CD003362FBA3903E253E1C3638D99470C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8a819ae-5856-4a4e-9282-3560d19f3457\index-dir\the-real-index
Size 72B
SHA256 0bff144ecb92071c58d6ae05d731df1043ea1027669a1d2b4f3abfbe7ee4bcca
MD5 bfb9eee44f40cced5922b4d4e0efb07a
SHA1 293ea1447e0983163ec4b0d426dc56955a875a51
SHA512 1370fc16d6efb2f9dc98c2ad21723e1797059879e61c0e0c3c71e1a05b5b9a089f8c0748fe1cd9070ee2ac49e35ba4f857d2e2b427f4d15c9805ec07904f1ae9
TLSH
T19FA0025423800505C11311B1156287411204BC206104165FE1D10986CD504514A8520D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8a819ae-5856-4a4e-9282-3560d19f3457\index-dir\the-real-index
Size 72B
SHA256 0a55cd2e5a9553fc0a9d753ecf92edf6bf4713807204bbb84755f7114ec9dcbc
MD5 bde4bf35695d5f2e3d4239d9bd314d45
SHA1 f80e210fe795f09749496291368d6c151de29b8a
SHA512 9c13f1e55977c77b752dff94452d7813a02e607803e0d72bb7bc8f44c13bed06661d0ec436f81a8a9746988334229f9515b8d0de43fa814a95e9de80be9c3930
TLSH
T1E9A0022502D5F241C44316F02DD6D68132928D100201531D62D24444CD515E9D64941C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 705454c7429660284c380321ff8d9c090a8209dac064b2b7bf430253f1fc55f5
MD5 6822e2b8a49cc087abacf5e8af14b8e1
SHA1 6dc3845dc2fd62b8c93100900bb4bd2805f21c5d
SHA512 07dac4ea9de3c57cd9a7d451ac25431bebf7592393d82c25bd038b2ccba818984412d8cff727cc735bd83cb7504139448aa76b5074d3b7ec535f267673546ab7
TLSH
T10CE0C0BB3EF71460E82F97D71D7294A40042B869CA00EC0F1816F3C340B53703409C26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 53bb95bdc907fbcd1a06acd6e22c38f63e207321d61f9fe5d18aed6dc32b9a0a
MD5 f7f3aa44b313ffb69dcdce577763b17e
SHA1 f873383b435e10fef85f8e7f5fac49f694e757b3
SHA512 dc41636701e5f22daf9196cd4b6d76181af1c2aa532ef8a8165ce3f8d17c9dc59282a220236d1c1a7fb1884ca6d4f71ddbf9590906fdeedeae53df21196d4d45
TLSH
T1BCA002588F4DD405D40846F450A6F5483B6488DA411556056C99E0DC9EA325061C1121
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59da78.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59da78.TMP
Size 48B
SHA256 044402c50165a36aa270f98bc5f5eda91774bfb139d2d53366d51086c218f0ee
MD5 549df8794604b7b6bda4e6c11ed9b65e
SHA1 3b098d8a9f9c22b7fd2d3d78e23d79da2bc4a601
SHA512 a6eca22f0ec8a2a97f1c99e6cb62997502be8639d07fd0add893ee73f9918501959f985d722f0740d080e0c3e2a0943b4c41a6613bb4cf5abce41df99055c6a7
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 793a480b7c6746e2ca97195e1945ff68b5e30f0c3d728a38f4797c29ca692e5e
MD5 9914e0a88b6f62b0af133674d77dbce2
SHA1 3e83cc06699fc06865dfa81968941ebe1422db70
SHA512 cbe919f35cfd42d9911bcde69f6b09c10ade3f580828f13e93193581346575ab40ed37d8387da4eb1bc1327693bdb0c5e50645943233c2cbb31c7c261b52b662
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+5wgKVCXO9OK3qy:mTVysV
TLSH
T1D191431270BA02863D3EA85C939A866ACB4130A77418F43FBFA800654F67E555DFCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5086b26d-01ac-415d-bbaa-c7a89c305f93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5086b26d-01ac-415d-bbaa-c7a89c305f93.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 73c732aa447573f4d4375c9a9c1c1f4cfc11aba2318936d45641ca2374655a1d
MD5 0014df090294f61ba913a96034862305
SHA1 99278044a03ef8b2914ba25e59adce15f0a45990
SHA512 eecf5e1ab17c976a564c8fb6d1fac897d2c11e57de8d987fe078665b94f4a09e872dbc0b436546342a2ba991a4555c59b7a3ed50f9fd1a7d8657a3f87954fb5b
SSDEEP 192:uaLsN/UIGQr2Qg+YLeHMQmiU116n4e+CGy+FdeL9oCd1FS+2ivJiUqOU8:fsN/UIGO2Qgzi8a4e+CMdceCBS+27cU8
TLSH
T1D4323B3668386C3B5EE3A555F4473A139FB45167EA893F90D6EC6F0C01DF6AC130A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3ed093a418e1ad5dc47a796eb78a64694cbbe0643392fd50a7ef9bff440de72a
MD5 99cd02aaf1489562131834e4c0575551
SHA1 8df8627e857e92d3d4e5ceeefecac23d69e3b99d
SHA512 7fba322dca70621a6a783b4168c5dd26313aeb9a04d6df2a8e882d64bd0e71e91463c65dd76f3503c3e7fc7b280354581f9d66ea9992e230bba78e5e618f1a02
SSDEEP 192:JONU6v+YLNQmiUyUZZh+CGy+FdeL9oCXusvfU6:JONU6vz/HZh+CMdceCD3U6
TLSH
T1D402D8356D382C6B9FF2AE45F5873A235FA82177E9952F84D9E81F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ece40cf0fc4df33426db4387c3056f0887bbff1a5d7e12683b0fe28cb9c7ca73
MD5 2c9afd43bb3d2734f0e5b71f13111693
SHA1 5dd3c3ea05d6ac3abfa9f3a059c1ba3bf943a50b
SHA512 250bdc23b5962c9197af22744b321717d1e1887884cc061dc05ce4332d9e69efa5ea3b3e2c69d510760cbe9d356d9f369ae7721b5718e8806f4260efc87034ec
SSDEEP 384:5iFiZcIXzsN08TUNTUlIlnfTZ2QgziO/J2e+CMdceCBS+28c6HlytEDq1NCUJ:QFQDJwg/6BJBklCcl8coy6DqvJ
TLSH
T14EB27C3248B4593BAAFBAA55F84A35138EF45073E9D47A90E6DC9F1C01DB1EC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c96a342cffdacbadb34aef8f371b2160f324cd9a029993bcc15feb9f277df1d9
MD5 58f7df69e53b86613ac16cee0be93f9a
SHA1 e052818bfa0f6c4193777e44aba2a231d74b2920
SHA512 432fb1f6d5990afa95bd1f13241b61c9a0c7225c69b0e9ff4b67a62f8554b43efba0e07984ac56308bf29032a6eeebe0087523e95d75d30285ba0c5bda778e05
SSDEEP 384:4ZcIhsN/UnDO2Qgzi8a4e+CMdceCBS+27c6HlytEDq1NCUJ:Ghi6gLklCcl7coy6DqvJ
TLSH
T189927C315874193B9AE7A155F88B39135EF89063EAC83F94A5ECAF1D01DF5A8130B819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3dcc57fc249b4231c670c960f19d0978707d3fb4fd71d63be03aabfcd0cab7e5
MD5 4e525e1bf0e54c4b615cd8041267f8bb
SHA1 fda22f2eb62ec8c017dcebc5ccaa1e5dbd8b45a2
SHA512 7477697991ad3837232e2153c4f16c813023d51eb08e7118d61d9b62b575248589f87c423a41af07cab7a3f2c2a35f3038edc700861a083ea901c57eeefc2f28
SSDEEP 192:/ONN6v+YLaQmiUy7ZIh+CGy+FdeL9oCd1FS+25CHUqOU6:/ONN6vzKWIh+CMdceCBS+2+cU6
TLSH
T188123C36A8385C3B5EE2A555F48735135FA45167EEC63F90D5EC6F0C02EF6AC130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b611d3992163f1b608e658d473635589f0b5f00aaaad709b518111cd5f4c140f
MD5 fa44ccbe0311155772bae6bd68b1d2f3
SHA1 9af1f01e839ae012b6f671f7c34859929b950763
SHA512 daaaad191cf42ecf1852bf9612d4a84bd778d5720d87f33f88ecdd0878265fb30a5cec3353934a7afbd6743315f34c7e17974ac2dde02a2fac59757377ffee57
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 854040e7a73233f3f0375052aaa3bcbcb3fe2b4d868b6b6075c26f4065427b47
MD5 5807ff873e1b0b12a8d83bb63fc9c796
SHA1 cf2d6a0eee8ab77db88250ddfd31bfb89902a5a7
SHA512 efa34159d3d66291a5b872ef4d40fa5b9ad9a177279257cf27048f89c50504ecd58784f8ea444e4f203c0f3bd1091d7cf28b0cb6719a247dae4f406b12ac64be
TLSH
T1A9E00213930014BDC03803304043153015D2407121B101085912156819273001B30FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59b200.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59b200.TMP
Size 392B
SHA256 48fb5144a5e2fe75618a64abb0f8d6316a5bd40e7659ade4444710590a86bddf
MD5 1f48b4faf29989636d9c7cce13a6eb6a
SHA1 2f5b53e40920c264e9b4f9d6428c8f1543e074cb
SHA512 67c444dca2ab60ecef28f6649679ada6db1d89ee096cdaeb69a4e63cbeefe821b8540fa8c7591b205966296b7f11c800abb7f3117e6c50385c1550d8d40d9a4e
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a1639760260c6fcb0af901f27169f603be40f62ad97517d4d502c95d91858dc0
MD5 a1a131596b058659c32b744dbb22bca8
SHA1 08b029cf9647ddb4819cf4eb380e860ef287c419
SHA512 07fef16f6402a0fd6903971c72a265566fa2bdc164fd557c435941e1672184e48bd5d52d25db41ec234a35f525b13c64aef973d0af793ca261cb50ca12c5c8b6
TLSH
T149411958BAE91149B3737F5AABF6696E487F79372E06C49D10110E4F0A62F00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download