c28750d667e6f08896e4d81619dcac81852e23c3ac04b82f2779ab1aded48b25

Analysis

user interaction
yes
max time kernel
600s
max time network
593s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 165KB
Sample260809-gr2t7avyhz
SHA256 c28750d667e6f08896e4d81619dcac81852e23c3ac04b82f2779ab1aded48b25
MD5 77968354bf2c82dad114195a06c9b6ec
SHA1 8df20523e881cb235a92fcea9bca69e14a3b379d
SHA512 cb903e5029dccda23b21b5bee9f4675eaff10c8def099ea5deada5658b06441ede32a10e6a1c01bbcb522c0dae11c1e631e4e812ddd164fa53b917f236828995
SSDEEP 1536:MgvgZ4KbwiVAUE7eIpRfsKquPKquPKquPKquLJ4OC3lNzsP3/Hl8EC3saS7gzlpN:Y4KbhZE7eIffs4OYT3mIzI6M0
TLSH
T1E8F3C77FE5C44007153309F0F6B4770C6EDB918BE9CB4D87ABBC4A0A6BC6DA7A814958
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 17 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
22	discord.com
23	discord.com
39	discord.com
124	discord.com
288	discord.com
15	discord.com
67	discord.com
125	discord.com
128	discord.com
126	discord.com
127	discord.com
132	discord.com
73	discord.com
109	discord.com
129	discord.com
324	discord.com
325	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2836	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307289963857043"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{6190E103-21CA-4834-8C75-2B866DA16C33}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{B4B77CA8-135B-4AD4-A4E4-DD0496B34FB0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 57 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 3704	4952	msedge.exe	86
PID 4952 wrote to memory of 2836	4952	msedge.exe	87
PID 4952 wrote to memory of 3824	4952	msedge.exe	88
PID 4952 wrote to memory of 2232	4952	msedge.exe	89
PID 4952 wrote to memory of 3824	4952	msedge.exe	88
PID 4952 wrote to memory of 3824	4952	msedge.exe	88
PID 4952 wrote to memory of 2232	4952	msedge.exe	89
PID 4952 wrote to memory of 680	4952	msedge.exe	90
PID 4952 wrote to memory of 680	4952	msedge.exe	90
PID 4952 wrote to memory of 3808	4952	msedge.exe	91
PID 4952 wrote to memory of 680	4952	msedge.exe	90
PID 4952 wrote to memory of 3808	4952	msedge.exe	91
PID 4952 wrote to memory of 3808	4952	msedge.exe	91
PID 4952 wrote to memory of 3968	4952	msedge.exe	93
PID 4952 wrote to memory of 2644	4952	msedge.exe	94
PID 4952 wrote to memory of 3968	4952	msedge.exe	93
PID 4952 wrote to memory of 3968	4952	msedge.exe	93
PID 4952 wrote to memory of 2644	4952	msedge.exe	94
PID 4952 wrote to memory of 2644	4952	msedge.exe	94
PID 4952 wrote to memory of 2004	4952	msedge.exe	100
PID 4952 wrote to memory of 2004	4952	msedge.exe	100
PID 4952 wrote to memory of 2120	4952	msedge.exe	101
PID 4952 wrote to memory of 2120	4952	msedge.exe	101
PID 4952 wrote to memory of 4620	4952	msedge.exe	103
PID 4952 wrote to memory of 4896	4952	msedge.exe	104
PID 4952 wrote to memory of 4896	4952	msedge.exe	104
PID 4952 wrote to memory of 4192	4952	msedge.exe	114
PID 4952 wrote to memory of 4192	4952	msedge.exe	114
PID 4952 wrote to memory of 4192	4952	msedge.exe	114
PID 4952 wrote to memory of 3636	4952	msedge.exe	115
PID 4952 wrote to memory of 3636	4952	msedge.exe	115
PID 4952 wrote to memory of 3636	4952	msedge.exe	115
PID 4952 wrote to memory of 224	4952	msedge.exe	116
PID 4952 wrote to memory of 224	4952	msedge.exe	116
PID 4952 wrote to memory of 224	4952	msedge.exe	116
PID 4952 wrote to memory of 2084	4952	msedge.exe	117
PID 4952 wrote to memory of 2084	4952	msedge.exe	117
PID 4952 wrote to memory of 2084	4952	msedge.exe	117
PID 4952 wrote to memory of 1536	4952	msedge.exe	118
PID 4952 wrote to memory of 1536	4952	msedge.exe	118
PID 4952 wrote to memory of 5636	4952	msedge.exe	121
PID 4952 wrote to memory of 5680	4952	msedge.exe	122
PID 4952 wrote to memory of 5688	4952	msedge.exe	123
PID 4952 wrote to memory of 5696	4952	msedge.exe	124
PID 4952 wrote to memory of 5812	4952	msedge.exe	126
PID 4952 wrote to memory of 5812	4952	msedge.exe	126
PID 4952 wrote to memory of 4324	4952	msedge.exe	128
PID 4952 wrote to memory of 3496	4952	msedge.exe	129
PID 4952 wrote to memory of 5124	4952	msedge.exe	130
PID 4952 wrote to memory of 3496	4952	msedge.exe	129
PID 4952 wrote to memory of 5124	4952	msedge.exe	130
PID 4952 wrote to memory of 5868	4952	msedge.exe	131
PID 4952 wrote to memory of 5868	4952	msedge.exe	131
PID 4952 wrote to memory of 1772	4952	msedge.exe	132
PID 4952 wrote to memory of 1772	4952	msedge.exe	132
PID 4952 wrote to memory of 5188	4952	msedge.exe	133
PID 4952 wrote to memory of 5188	4952	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffaa95ac188,0x7ffaa95ac194,0x7ffaa95ac1a0
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,4533271248645224423,11928266586876588153,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,9434456662296727463,239261294796138060,262144 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,14173060130913927784,937712275528002621,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11736116740335179179,7341167998305155252,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11044713758036503574,9219334076744167141,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,6319079795770101684,9177820361255589635,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,9773552726371619482,4148921740537449644,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,6418144769449713763,16188209707949923441,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,12456519919635535362,4684450362813368650,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,12255612534282281489,9755070903690383910,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,12255612534282281489,9755070903690383910,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,14453861601506537249,3351105799935158301,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6484,i,12385966315927512625,10780636467056169035,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4468,i,14795481721303544540,2580993614255398023,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5008,i,5422374615881791007,2006299707521524068,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4248,i,13883683660569182679,13591460540010769123,2097152 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,3425272630148392758,11319536821520267690,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6912,i,13504237794436193432,835010915403836464,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6944,i,1231036493597453763,8010329242020668750,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6920,i,14641454713691462576,10840082321899527075,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6924,i,7564949286268802718,6342981116648488804,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,2996930541152635892,10894256299625400340,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:8
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5012,i,907280004621335445,12567080550329009726,262144 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,17893241094645092693,16791303709678916322,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,13745518953274632880,14678838842788412279,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:8
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,12854212377817371027,9542726410323761308,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,11086573351065697588,9271166751211138191,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:8
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3256,i,2864469066774999915,4529985194624548698,524288 --field-trial-handle=2336,i,6025288497746268163,14870260336715286484,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:5188

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1c3f9d50eda74b70d32e45935579b8d27b2ff9ce67338826b3aad46543e9bf8b
MD5 8769aaf7e555b5168401dc71db77c26b
SHA1 afb580308fe55cda59e3e1d6e4b22b228cc61977
SHA512 3fd31356b78c206b09196ea7bb91cf5fc6c49683cfed013ba9a814844a3591bfbe4877ffa21f7bc239e60e2cda1992456bbc3d48327578c0af7a830ff94dbb30
TLSH
T131E07DC845C9C22EA6087487D1FC674ED2C03B1EDBC8F91A574087C87243850B6D2BF0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 17KB
SHA256 5daeba65328589408b98456b3764a0d2246ed977eede54cae49d24756ea358ad
MD5 b1db156f619ca2d1de3deeb9687bb0cf
SHA1 e666767c3c201500cb27f6b8a7a4d195c4a122ed
SHA512 556400b49c51b0bfc18801cd57cf241fb97c16f3c9a50b6cb2c69bdd1e0596b7c9fe5cbaa4a7c818fc508b1ce683957156a5c71d77ec79ed7e2594c5f7b40c70
SSDEEP 192:ikwV2pIEeBmYLizIEXtCPSi4bUVnjvayiVuRpiXjPsOXsJaKYiRhYNiuK5/:iKtYeLtwt1vHHR4Xjd0DhXu4/
TLSH
T14182DBF8BEA66402EB753535A5E73E34347D118BF4635E128FA60CB095063AE89DECC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0ce94fc18275d314ae142d171a7560f2adcd5e0e75c4196b307db22e242e98cb
MD5 600dd1cca9d08fd9ba35320dd40600d8
SHA1 bb19c3dd162bbd968e1644cf527d37b12206a9f5
SHA512 c771eb810a97e1b36950ad17fab03c896a973002fbed7aa840bb375dadfa9862a9efcd07f9f6c11b2906225562747b9cb817d94d5fcb6d10cc41db875e168b90
TLSH
T190618238C78309A5D7A174B290FD0F24797587D8FAF32D85D86829346F1B751C3682D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 20a709b730730ba16eefefcdcd1bf919bff14d12876af17d3aca4b92f758b775
MD5 cf12f127773ae413cb4822ee543ac1f3
SHA1 81e479059757042af756f598f24409b5bfab70fa
SHA512 d12d409e23fe0b2a69b553225929438fd9b572235c6cbb892b1b8da81dc5938d26fcb898c7e7a73af8a317726b53b680d01e61bc70497b6a9c03b55a5783d067
SSDEEP 192:u3F6jpWrmtMI5+WnWrl8up6iYMbRzVFQaiCacNs:uAKlIsjlRp3YAdw56s
TLSH
T1EB3283F99E925542FB75357925EA7F6434BD62C3F4739F028FA81C309A073A28AD60C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe591330.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591330.TMP
Size 3KB
SHA256 b27a7b3c9c4853aa429ff48deeb9699b686ffc27e483a43dec0140d2e237d8bd
MD5 af7f760a5acd7cfef488c49ed110e040
SHA1 9662bbede286bb7cbcabe450f7d380fb9c9e3d69
SHA512 15930805988fee91826ad9ba6265240c9067f47b6df71efe24e77f5c3c686817b2e32a78afe65caff22469dad36f2653b1357dcd822851ca498d96ce4565a780
TLSH
T16B617038C78309A5D7A174B294FD0F24797687E8FAF32D85D8A829346F1B751C3682D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 d84f0b45e342d1a9722d85a7c795ebf15c2c0b61fdd9b472258260573b19e71f
MD5 59f9c9b685c6c1a3d4aea02a2e975fba
SHA1 ea82ade87aa853ca74be49eb41912386d638fa45
SHA512 5102a32201151f9df36b52fc4bf5bdf84d29df4ddc5e367354219944c8e240af96045dd8a16e23ef1e7b29a4268d6947bdae87fe4e28260e3b68ebf90154731e
TLSH
T1ECB002109212145BD54507715D95498576B0DC356247479167D45868C81535059D5554
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 9ad43c8aff1c029ecee00cefaf474a9d2ef65d1d0345dc6c1a08ed299010fef3
MD5 4fbe215fddb0ac5a8c7d89426bb81cd0
SHA1 d906653d417ee82a7937496a613ff8a95d9fca7b
SHA512 64b376cb0246d2a509afd98796118369defd7ee24ac5e3dd61bbbadb6b1ce10abbdc12b60833ab3dd2d81e0520b15f1c33ddf66d7b7b461aa646aa04be7a4d98
SSDEEP 192:DoQvq1Zb4/h3Bh5O5cZPBkryU+fprNraGr41GkYf9z/k:DoQvq1Zb4/h3Bh5ycZPBkryffprNraGS
TLSH
T16CE1B0F3C3E9872DC91152F49B143E1ACE2D086943683C2AC9E4AF5BA7E2571E14164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 776da5d0da25f6752d8c9c4bbb53c7c2a8acbf52a9eb2dfe599f5377458e8f2a
MD5 d8fffb09c2b5786f8011127ddb959318
SHA1 55d865813a1e58fdc82e9c9a088fbe3b6a47f925
SHA512 a14bae766ae4fd7d35268f290b099c04bdf735f146014edf62d9847fffc257127eb6ad845c02c24670a7cda1dd68ddcddea1195b29f39586848d0626fd33cce0
SSDEEP 192:DoQvq1Zb4/h38oIh5O5cZPBkryU+fpr3qYf9z/tFrmK/rVi4:DoQvq1Zb4/h38oIh5ycZPBkryffpr3qy
TLSH
T172F1A0F3C3D9872DC91552F49B143E1ACE2D085943283C2AC9E5AF5FA7E25B1F18164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 34b9f96d16d23854868bed0b141eb810c690a9cb822a16e76776bf3d4532890d
MD5 b452f47efa1d775067f11f15c2361041
SHA1 981e63ab7eb6c4a8dc30213fe4c29457dfeb99b7
SHA512 4bb85bdae785d65c0f77a49553a03588591fac40032794d7c9a73b0eb3f25f0e24ad81538056ee8997cafa627718d45b01f29ff7009a8048430a382e5998ca38
SSDEEP 96:DppD8+u6uvuhi6uuAupuCO5O5YZ3XRuLueyudSHuuuDue3quz1ctG/twBu+mu6Be:DppD8+vuui6uzyXO5O5YZ3BUryU+fOrm
TLSH
T172C19FB783A5832DDA1192F09E146E1FCE6C1465476C3C79C9E0AE5BA3E21B1F18178F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 a4f6918180713839a5bd421d752ad3881b80ef15562647b3664fd083383666c4
MD5 41673ae17d1371ba5bcfd39d584100dc
SHA1 9e3331b0f14bc3142a891e7c18bf3316040900f9
SHA512 2ce20cf5794743df05db66d44787ac9fedbb8f9987f5fde29801383bcbccb0549c8fe24d21c78f8dbe1fc56bbda1c49fec2833550a3616fb8d02baee23031c66
TLSH
T163D02223228970BAE5FE3E8AA06EBDCFCB2610601842DDDE21D09FAD193146D468B141
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe596306.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe596306.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e4f394e725725ce82193c6ee5ab8a0c34ba08e08b1b52b6d75f19a7be8d4f34b
MD5 af45bac9f0d22af535546f3afa36f1c0
SHA1 9820325cd027160987c5a9f43383ca8f0d48cd0a
SHA512 676e30e3b91679204b8a99b4dd0be7b2e16e6064e1a28733bfdc6b0245932b03e1631c4ccc06df24ec2d6476c875c2bebae0b369d363bea992137c1e0196747e
SSDEEP 192:sxZ6Blkew/fosqsOpVmIdpdRHW6+WNGYzQLBPIgrJ:sxZ2ux/fosRObTHbGR9
TLSH
T1BD22C8526E38A87B8CC7D219BB157F43D6F95032A0941E58F6FC961C05E7ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d9dfe98a1801c3dfa649d68d2b6d33808d2fc054383e33f7149505d6d89dd026
MD5 fdd99f06eb77ffdab7ebd0fec9c1c2a3
SHA1 e947e2ad51773692837ce8317a77abe45605a5fe
SHA512 fec702fe12d9a622dd6660fb1ca780ad54c4543349c313bb4762a2739af5cb52bc77a96e05cc19d98d485250d39a179421b531ae40f54ed8230d3761aa3dce12
SSDEEP 192:sxZUBlkew/fosusRZVmobEdp4mWulHW6+WNi2uFUPM/YTyQa1PIg5gJ:sxZ0ux/foslRfwLHbg3/nDm
TLSH
T1DA4208526A38697B8CD7D21DBA05BB53E2F9503295905E58B6FC9A0C04E7BDE320780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2df15aabfef8e4f3c2095fee838f17c5d816837254962fcf8696d6e37af41e71
MD5 6f398e3f7804a0a2439eafa8b0e49a64
SHA1 c0aa6abc36453764dca3a255c8a44f64d57a8eba
SHA512 eb3d1e5d070bfcea6ee147cdde88def50b9ff280f6b9378a4daff436c00eeba191038f281be050c9b05e7ddb586e3caaee0cda29a4fee7a98172fffa13a918ae
SSDEEP 192:sxZ6BlWOew/fosusOpVmZ2dpdRHW6+WNGYT/LBPIg5KJ:sxZ20Ox/foslOeWTHbGQs
TLSH
T1F422C7526E38A97B8CC7D219BB157F43D2F9503290941E58F6FC961C05E7ADE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 166b787daf34a9d2f09dcd02aad857055334ec758c0a0ab4eeda4c69d3e27453
MD5 233c915831a1271171fc95fdf87f230e
SHA1 2957670740e02b2292a205673db091666ea9d43d
SHA512 19b0cc8a59e0fe0584a5e2832a5069cbb092cf17b5a65480560b1e34ecf501c527f9b5e21acc57955b3c0e7e05f8c2569b0760001752b2d4dc70a5320319d578
SSDEEP 192:sxZ6Blkew/fosusRZVmobEdpmmWulHW6+WNi2KxAHPM/YTwJBPIg5gJ:sxZ2ux/foslRfwVHb4AU/tm
TLSH
T1E04207126A38697B8CC7D219FA05BB53E2F9503294905E58B6FCDA0C04E7BCE330780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 26KB
SHA256 04a74b7a411982685f683f48f0e7aba9e90010800bb3fe680659630a1305b273
MD5 9a71cf3d0a474092397e3bb6164ca4ff
SHA1 7dd89a9e16e740906d821378d06cb627bb31150a
SHA512 7aeb7ab1490721da2ed07340cfc9a03ac621cc653397cf8348151a25e2e9d920328d0e5f31eae212ce3952cdf1ec833ae96ad4e644b35d093b1c039a234c3e8a
SSDEEP 384:sxZ0ux/foslr66s8qMpRiYnazAW8pZS15posJWeT+YfwLHbYb/g6m:ssux/fhr4Mnc7WeT+YaHbsgp
TLSH
T1AAC2F7059924C83B9BC39D1C693C7E33DAEC50625285DEEE66ECCA1C019E1FDAB07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ad1ea4d721f29de20e50ab0b60deb0352b0a904acc1c1b0a2527638f6aa585da
MD5 5808d16181a290d417e696422080e456
SHA1 e77634a7359674be1beb0d7bdfbf2df8068f5051
SHA512 a65b2843c786e3fd34f4c63fa7e0aa8836863a1886e9e281ec91c8a4bd13c529f92ade4155239f0cff4a043ccddc2fbc813ba6e7048da43df77a538923a60865
SSDEEP 192:sxZ6Blkew/fosusRZVmZFdpmmWulHW6+WNi2yhqPM/YT4JBPIg5gJ:sxZ2ux/foslRupVHbAl/lm
TLSH
T1AE32E8526E38697B8CC7D209BB15BB53E2F9503290C15E58B6FC9A1C04E7BDE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 765334fa3c541f927cb171247759ae73d0a78879c2de9aa5978973ade6cfa884
MD5 ee07c110bc31f794d2e33e05154fddce
SHA1 84f62cfcbfe4f804e3845638940d0025f120c35f
SHA512 9026131e7f497eec2b09717160a8e98c9fbd083524c630b202861cf6f4608d241f9010ebf4c1d924496606278c4ce636dc897d338f10dd16a1d6d0fe42cdc74b
SSDEEP 768:vnk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSB4royyYu:vnk7u70WvqiEau1jai5LA3BDwu
TLSH
T1C3C2EA3B744CCB7E4F801E9DAC566F973E9802C7A6988D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 4a3492db10c98e7053ae41ae67007fc56d9011ba65882745da0fc3c260ce6016
MD5 f32d85531fc1a131448a668e55a1c3b0
SHA1 16dfe7355f0f3717d6b10a596f43e4b6b9200707
SHA512 a470cecd97ae8c873adaddbaae270eb8836cf2756e47278e5a430711e8c823e929a591a5a84e3e8763695b1fc717f0904d1cc569dd4e3fc53f386574cc471c90
TLSH
T17451C78E4C476F65CD9D24F318F61852733634FE96894B07959CEC347CC32292C6A655
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 e1b763b5abd637f9df6b1debb572db6764353a1c3d4e2a4e3d5656d14385e7e5
MD5 0145febffbb92856e73d8cc5292bc25a
SHA1 4dadafccf14bb945cdd9a5a8ce2513e9c01e838c
SHA512 2e52b8a4ee6fde6f4f0351a965e5f00efa63eceac07f6325c904f96edf8423cd1d2c727a83601b74a762dbde3bb6fea119b33354c82767b2359675bcd9e20f75
TLSH
T111E068BB2EFB1C20AC7F97C138B054A081853C28C900EC0E3027A28770F23512406C31
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b9f669ff-eadc-427d-b2a5-dc4b93909ed8\index-dir\the-real-index
Size 72B
SHA256 4cb24bf2e661a7d0acc959f60433db65b7cb0b63f8d36c642c534d29d60c63ea
MD5 eb5f228df6fc1b710ee839a66575538a
SHA1 d32e96201503d670a5dfc9aa5fdae5ab4c24df32
SHA512 03b73f8fb1aa54a44b4dbcdb6d8af7119f68147c5110a261f09721e9959a331ff2df8e68b9aeeb2000949ef52414497018f92ddad26d8e6286f0a2cfe1899902
TLSH
T1F1A00275DE70A411D60107FB1C76454C73206DE909620202F199855DC97E2D549C9C40
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a5a56.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b9f669ff-eadc-427d-b2a5-dc4b93909ed8\index-dir\the-real-index~RFe5a5a56.TMP
Size 48B
SHA256 2b1f4a95fbfacd01fc928896b443a5d54464722744db3a8ac98391181fee1123
MD5 65d34a6f15f5ccbe26d4ae4ec77b123d
SHA1 f4f9f24d88025a2e36170af543ecd0fd8fde02ce
SHA512 bad0055169fd11a5711419e26fbcd240e63abee8f7d5ccebeec8b3d8d262dd4d5c7d268a7dc167172f4b4af95d8e7f42906f7c80c0ddd0933b1e627052524161
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\bf4ec80e-0bca-4bae-8af9-952f62acc358\index-dir\the-real-index
Size 72B
SHA256 fbf454700a14be415b0aefc90d588f83e1f9d0ca9e5ead1742523e98812cf1f0
MD5 34c867b31506cb566d33ce25e2f7f896
SHA1 c44e4ef3afe67fd89792314abca6a051ad059d2e
SHA512 371a90077422cc235d3314f8fc023e0c6482146d534595dada9dab5da0fe8b87c05dd172f354e57416cb34532d07cd7de30349ee87ab22402478073947221a42
TLSH
T169A0021497410247C1595A7114736AA076144A55628142D251A0804EFC503C8C586511
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a31ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\bf4ec80e-0bca-4bae-8af9-952f62acc358\index-dir\the-real-index~RFe5a31ee.TMP
Size 48B
SHA256 847184649659a3c101541eea18c0902dd0166afb2cca8266405f4a3b98e448b3
MD5 0b933fa1df9832a10913a2a0f0584aa0
SHA1 04ff1384000f0b81fcde48813be49655536a2f4a
SHA512 7e9cc33bcc9c8b46edcdbd472c72172c027678cc971939c698f13a8cb803638027b9c1959f4eb49018ef4ff376a40649fc4f0ceee79b3c8a21ebb0913df055f6
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 4e3f993d91feae2da1533e02ca1203893ca69fa2720ec23d5854dddd569dd93d
MD5 b1dc3becafa21efc7a0d9bf32ce5ac61
SHA1 c89e9db014c91f948f6afb33a230145ae8466ba5
SHA512 f8c9ccc538f919a47e4e155eb16d511cc552f8a1f57627d96ebc80e367f5e281f32cdc452c442c771fae34ed58621f0409b8e1e480b631a6bf91a44b01f12a13
TLSH
T16DD0A76BE5B44592DBBA0A921A3261AA87B12C8C14CA9549D842796D7870B43E321EA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 956393d95fe71aa3e8d56177cc484fea59f3e0d05e4d3e296f9cb5d0592df7f1
MD5 0cad1087a6212f18beba8667383f0d57
SHA1 dceda5c830057555ba3464ddc836fe8aacbe6c86
SHA512 7c66a4e4ca5d8d29293067917a4915aa47c14d33db100b7d696b508867d80e45e266bb04a2327a58e542300e53d82298a3dc5373e68353d26412900861da1fc0
TLSH
T10DD0A55BD1B44551D7FA4E511532616A8761288C14CE5445D44159596850743D211D53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 160469fbe8cb90220613798906e2795a361349517b1b87f0d09a842a653559c0
MD5 dc9539a09e17689687dd97c25f09eb5c
SHA1 fd595fbf44e87b92afbd5a7fa790b3c9b0eaeda0
SHA512 fcd09d547af38b464344c6f8dac5e5dc092c4bd8a1f0ada4411e3d0db5c896cbb90b7612fcd600182c751271c9bab78db0f42af60beff757115ad1dadb01bf9d
TLSH
T1B4D09727E5B48A82CFF60F910A3230AA4B71248C00CB910AD84298596840B03E221EF3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5935cc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5935cc.TMP
Size 138B
SHA256 1340d453ba93204578ddf098716490fc5682a6bf2f1fa8723c07f8b92936f32b
MD5 4724805faeff9d5ad01d0653775c6da0
SHA1 f5ec115bab790ef6f80ee52653b7a554cc63787b
SHA512 39aabd6c9d6c579504fde76f2615af06eed66b02fc21e95f03cfa0c4eb73863b8c5f7c0d10c22e6ac93a411214c9562ac6367397ac30f92a566c6376cbf1aada
TLSH
T1BDC09B67F0B40557CB5906924733519E47152CCC5CC7D94E64533D947474F13B201EF1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 09b4cbed7782c4084930a677178b1417c4759767d7f74cb7553cb00a946dd1f4
MD5 0afd454d0de46e7101c35862dbb23c4c
SHA1 2b743195aceabd14b3835e888135ea4564d66b72
SHA512 365d4b5c13c7f45b3e3a12e076a6e2339813216f7789a3e6624518d71f070b85938c0415df79822ee9ddc9158302d7573f1ae08f8320ef068ec78c26b04a842c
TLSH
T1C3A0022D8F8DA521C555077210A555C97FB0AC99110523014DACE0A88CB758061D5122
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59cd87.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59cd87.TMP
Size 48B
SHA256 2f241c7d5ff84e9057fab1f6b35b4f9d1e1f613c152bd8dbf9e9eaa0c80a82a5
MD5 aba5b3b6fcb3caf8d0a51d695af4b17d
SHA1 6c778562ce19b48651386e81b16233cc2f343745
SHA512 93976585245b46fff725de8e89d15ca04e9771bcc294b060b9351c86ce7b4bc52086cd340df79fafab3f421eef01d8b11e8903c7d968efa0719a6dc80bed7c3e
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a0287308b34eeb8fb0255f24a0f83d75f40e74e76bbb1178904580d40f88b070
MD5 06c5bc05e7d39ead58123a4a0f9a66cd
SHA1 8be91936383cab3ae7e687636c01c184116be03f
SHA512 e2b7a48059cf40ace652be6fea69d5e94f1f0451107c6840d01fe20cbb328872e858fb893a6a0c39e36524a8b5f8f2cc44dab90c9934f11290feb2f04bb1cb80
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTTIIjK1Kc7y5CI/KT60TNI5KWU8LyD:KIbCKcTIwK1K6aCgKT6kNKKWUqg
TLSH
T1A6A15306313E0B5538BE294DB196A6268F4231633014B4AF7FB804A25E6BE514EFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59af03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59af03.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 112365c911d04d14eb59bdfd43e503101a3af62bf995cd1ec214b0b7baf12a4c
MD5 fca8ed4587d4bfc4bd379578d8ec8f2b
SHA1 690c397faa27d9aaca757f42b511be6b09ed45a1
SHA512 3f5981c8f2e4ada8364349c9d3a62ce8d7ff35e0038a3d884ad4de8e2ffa905fe7f6f578bce9ae105048a5ff7f5b641d50d694a0cb4379587049ee7daf200b82
SSDEEP 384:kiFiZcIxzsNY8TUNTUlIltTebvRWP2Mdtp5CEJrRjnTKwBODNZOC+WU:/FQB5wge1MzphRjnewBKZODWU
TLSH
T1BAD218F248EB9836D9AE5747E77D2E034EFCC063B5805A54B399AA1CCC961BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 cecc2bec9caac9212e5cffc142bd6f637d8f2c139780592b73e0622bfa7cc5a4
MD5 584e0014e2935c41220bf2302da9d50f
SHA1 6b2c8b18937f40ca43b830186d6b332b209a50e1
SHA512 3bb95acc3867b3b583666c415f643c6481256e1e85ef01da8cac6aa40f4a3707572894c53a2c699c0c0c7a78fee4b7a10bf317ffad1bcd99dac5e8c2f8527898
SSDEEP 192:u9LsNotfTf2sEbBbQmQmiU1ebWP8BaGBPKK7+FdG29p9hFC1SJrmdN1qWjqCmM:WsNo5TebveWP2Mdtp5CEJrkj3V
TLSH
T1A1522B75AC78AC375DE3A145F54A36039FF84067DAC81F54A7EDAB1C01DB3A82316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 57166a0dca1d0370f61b9ffbde048fe6655a587b2446fba879f4899558f37e16
MD5 204456936b87db03ffa7fb5b2225fcfc
SHA1 a23c8842780868cf1c0c349f35f8a0311ff3c2af
SHA512 f8c4bdf5251f921899d31c838a55f6ece3e6792acb4ca36c433190f20fa64c6d215498b12198c9f190d80b8e5f42bbe06fd41682d8fd72bc381d8525b597006c
SSDEEP 384:jZcIhsNotTebveWP2Mdtp5CEJrkjnTKwBODNZOC+WU:7hwSMzphkjnewBKZODWU
TLSH
T1B3927D71AC786C379DE2B585F94A26074EF88073F6C41A54A6EDFB1C01E66681307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 938e4791f2b5bea4267f302e8e3af21b78f7d6200ba6db7790abfaa706c9f07e
MD5 422e3e94eebfc10c01f2f6ba40d05a9b
SHA1 61f4042a61ebb4c21d5953052df08cccee7f420a
SHA512 0a1b0dca94d8470e4f9e71722907a2c34a601333138c61d8e9db6de2807c33fa5e361028c989b4836871e2f696a5ff164b8045d802995ead32cf6fc8225d4bdd
SSDEEP 192:uULsNoCQ2sEbBbQmQmiU1ybWB4aGBPKK7+FdG29p9hFC1SJrmdN1qWU8:tsNoChbvGWuMdtp5CEJrkjU8
TLSH
T1EA320A316C78AC375DE3A195F44736039FE44067EAC42F54E6EDAA1C05EB3AC2316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 fe906466bbf95df798d2497e58c1b25441681a9d9c41fb5b0f039876938a5cf4
MD5 9b5c5a11b30f44854c9f84b6ccba83b0
SHA1 b769dc92d17cfbc7e34c0c41d5064304756ecf71
SHA512 78dbb7ab8bda7b596efa75fc1d3166e4207d5efb67fe4d27d1728a6a8cc31948fecd74220c60b43d90cd47d75394023b2ac654014bfaad3f6503150925f48ff9
SSDEEP 192:uULsNoufQ2sEbBbQmQmiU17bWP8BaGBPKK7+FdG29p9hFC1SJrmdN1qWjqCmJ:tsNo2hbvpWP2Mdtp5CEJrkj3o
TLSH
T121422A75AC78AC375EE3A145F54B36039FF84067DAC81F54E6EDAB1C01DB3A82316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c8fc271dc0b4f6f9caad9d442249876a0ada5c3957c2991738c1e965d56785f0
MD5 df197b9cba7b3019b80743c616e5aabb
SHA1 5e246f16dc595c28f8ce3824378bc1665f48aaf9
SHA512 d27b2f543addc5b24f6384215c71cce44e4fba75d033f29b4abe6a53cbd6ff467f005bc92b6a5d0c24f8dd225d71dff0ba96109a753b997443bcbdb8bb52429d
SSDEEP 192:fONB64B4QmiUyvdJ5GBPKK7+FdG29p9hFC1SJrEWw1qWU6:fONB6eYIJLdtp5CEJrajU6
TLSH
T1FB120935AC786C3B5EE2B585F48736035FE84127EAC56F50F2EC6B1C01EB66C2706816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 68fa8423cdd7c8404dcabf7a8b6a8430b9504528b8332ef2534d998fa7140ab9
MD5 2df626a97d729339fd30cd174a558e58
SHA1 5c1ca129d8fb937a5dbd3ccb60885540b1f7a06a
SHA512 b88a3a2fc2e8d323908e4c2c4c5d897080539bbdc8c65dbcf0f644093f338fa216204675014928b4940fd3f02de562b687814058e1c85c9273b03a9b53a89e54
SSDEEP 192:MONY64BAQmiUyi1dW5GBPKK7+FdG29poaDeUxU6:MONY6eABjWLdtpRhU6
TLSH
T148021934ACB86C7B9EB2AE45F58637175FE8103BE6801B44EAE85B1C01D775C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 eabb9f66d1b1456e63a56cfdc53532c7a793b8633ccc5536de85d23163ffe0d4
MD5 36541af73b56ebd358c9a4465f9d0a71
SHA1 ff932f07aa787c06f85d7d92509e050ad9a87398
SHA512 e9afe5eb131e3753e22bfcba119ab36749ff9ff4a4423172105946876662f4999883a894b4b6c11764fad12b1de651ce19f22de3178b0c7012afbbd580501ffc
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7c3825deeb5715dd47abcab33f2fc2336c4b18a4277df1da8c214a2c499383cf
MD5 2087f666335a56878c02e7b21a3d56fe
SHA1 26712b981d0c1995a5a0adebd95cfb93dd691c55
SHA512 cade78bf62c33337ef91097c749b443417b483dcf058ce9c97ad9a1540d321c2ada0bc89158c3670644bd5c31efa6230b4487dbf25129793b1452ef492c03797
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5935ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5935ac.TMP
Size 392B
SHA256 b538a3b45a9adeb9efe6b0f4a1ea948f021528785524a570525ea5eac5d53e62
MD5 138b29a55ddda73bc23a538903ea4ca4
SHA1 79463cf923e7a0e02c1ab4efd9e41bf04f0d7ea6
SHA512 f30b214e870ac31f0302f68ebebd652bdba17c07354fb8c47b5ef2712ffeac224f658546c5bcad600573bdd1fc380665a2ca47ba79e377bbc8d10e25295f7a63
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e408938790a041734c8a629d65ec3ee6efd1c9cbcbdfe67bd2cb1f33a7467cd7
MD5 2d0ef36d2b153c5db378dacdbf60c6c6
SHA1 c703b04d7b2a06a463f14b8d625882dc60a27611
SHA512 5a01344e1621339cb7d1a2a2b1d07f288b5effd527023a89e59f9640681de9d70b82228a0540c77012fa90dfb85a46e671b4e127747c252a5269e45fb8bafb75
TLSH
T1E541D658BAE91108B3B77F4AABF6A86D487ABD722E47D09D10110E4E0A63B41C971737
MD5 SHA1 SHA512 TLSH

Submit Download