hxxp://twitter[.]com

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
1049s
max time network
1050s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://twitter.com
Sample260809-xtzevaxtgx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3832	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307761792612504"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{8C16811D-6EBC-4C37-A9FC-25B36876BB42}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{8BC4A4C7-0546-4BF3-9297-B94B9D4E1B3A}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6076	msedge.exe
6076	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe
3380	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3380 wrote to memory of 4432	3380	msedge.exe	85
PID 3380 wrote to memory of 3832	3380	msedge.exe	86
PID 3380 wrote to memory of 5084	3380	msedge.exe	87
PID 3380 wrote to memory of 5084	3380	msedge.exe	87
PID 3380 wrote to memory of 5084	3380	msedge.exe	87
PID 3380 wrote to memory of 2004	3380	msedge.exe	88
PID 3380 wrote to memory of 2004	3380	msedge.exe	88
PID 3380 wrote to memory of 668	3380	msedge.exe	89
PID 3380 wrote to memory of 4492	3380	msedge.exe	90
PID 3380 wrote to memory of 668	3380	msedge.exe	89
PID 3380 wrote to memory of 668	3380	msedge.exe	89
PID 3380 wrote to memory of 4492	3380	msedge.exe	90
PID 3380 wrote to memory of 4492	3380	msedge.exe	90
PID 3380 wrote to memory of 5008	3380	msedge.exe	92
PID 3380 wrote to memory of 5008	3380	msedge.exe	92
PID 3380 wrote to memory of 5008	3380	msedge.exe	92
PID 3380 wrote to memory of 4960	3380	msedge.exe	93
PID 3380 wrote to memory of 4960	3380	msedge.exe	93
PID 3380 wrote to memory of 4960	3380	msedge.exe	93
PID 3380 wrote to memory of 4664	3380	msedge.exe	97
PID 3380 wrote to memory of 4664	3380	msedge.exe	97
PID 3380 wrote to memory of 4664	3380	msedge.exe	97
PID 3380 wrote to memory of 1792	3380	msedge.exe	99
PID 3380 wrote to memory of 3144	3380	msedge.exe	100
PID 3380 wrote to memory of 1792	3380	msedge.exe	99
PID 3380 wrote to memory of 3144	3380	msedge.exe	100
PID 3380 wrote to memory of 5664	3380	msedge.exe	101
PID 3380 wrote to memory of 5664	3380	msedge.exe	101
PID 3380 wrote to memory of 5820	3380	msedge.exe	103
PID 3380 wrote to memory of 5056	3380	msedge.exe	104
PID 3380 wrote to memory of 4292	3380	msedge.exe	105
PID 3380 wrote to memory of 5056	3380	msedge.exe	104
PID 3380 wrote to memory of 5140	3380	msedge.exe	108
PID 3380 wrote to memory of 5140	3380	msedge.exe	108
PID 3380 wrote to memory of 5140	3380	msedge.exe	108
PID 3380 wrote to memory of 5676	3380	msedge.exe	114
PID 3380 wrote to memory of 5676	3380	msedge.exe	114
PID 3380 wrote to memory of 5676	3380	msedge.exe	114
PID 3380 wrote to memory of 3636	3380	msedge.exe	115
PID 3380 wrote to memory of 3636	3380	msedge.exe	115
PID 3380 wrote to memory of 3636	3380	msedge.exe	115
PID 3380 wrote to memory of 1688	3380	msedge.exe	116
PID 3380 wrote to memory of 3708	3380	msedge.exe	117
PID 3380 wrote to memory of 4152	3380	msedge.exe	118
PID 3380 wrote to memory of 4332	3380	msedge.exe	120
PID 3380 wrote to memory of 4332	3380	msedge.exe	120
PID 3380 wrote to memory of 4332	3380	msedge.exe	120
PID 3380 wrote to memory of 2052	3380	msedge.exe	124
PID 3380 wrote to memory of 2052	3380	msedge.exe	124
PID 3380 wrote to memory of 2052	3380	msedge.exe	124
PID 3380 wrote to memory of 5464	3380	msedge.exe	125
PID 3380 wrote to memory of 5464	3380	msedge.exe	125
PID 3380 wrote to memory of 5464	3380	msedge.exe	125
PID 3380 wrote to memory of 5072	3380	msedge.exe	127
PID 3380 wrote to memory of 5072	3380	msedge.exe	127
PID 3380 wrote to memory of 6076	3380	msedge.exe	128
PID 3380 wrote to memory of 1184	3380	msedge.exe	129
PID 3380 wrote to memory of 1184	3380	msedge.exe	129
PID 3380 wrote to memory of 5832	3380	msedge.exe	130
PID 3380 wrote to memory of 5832	3380	msedge.exe	130
PID 3380 wrote to memory of 5404	3380	msedge.exe	131
PID 3380 wrote to memory of 5404	3380	msedge.exe	131
PID 3380 wrote to memory of 4644	3380	msedge.exe	132
PID 3380 wrote to memory of 4644	3380	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://twitter.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fffd007c188,0x7fffd007c194,0x7fffd007c1a0
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,11956289664348274025,6395245525203646948,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,18211793913918406978,125581306298004831,262144 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,12235648869003440159,13990398456658240576,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,13532603140848955897,934976835880328880,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,5611754003004024977,15916761502399378243,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,16022137117674106395,3884897954424190935,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,2417001925707589768,9045532087660018541,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4996,i,16480021865267205016,7916815365829182146,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,2782305681385506293,14082427252178029510,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,7313181287396048433,4163810976404894292,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,10032179978572284018,4921292533423113736,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,1346755612544931312,14371273509702559916,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,1346755612544931312,14371273509702559916,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,14925041273214735202,14462394759564905179,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,1789247563099436554,8666227971324383118,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6620,i,17596381415020168857,11797213187036544147,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=3656,i,5371360670334968708,16766519677180965636,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6712,i,14355993469800713085,12633848525606746375,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,13666343792037073280,8637504204355258456,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,3855433324579536218,6884085221129087231,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,7141782289051160165,14413088221755255924,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6652,i,12791872092567549472,11436769791802335533,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=2064,i,5275402246702300795,3401865468981762987,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6952 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4388,i,13541623871966498266,515200343516917153,2097152 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,9025999788344907653,17104800419152336971,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7896,i,7641168496226278890,8265449402662801258,262144 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,5642309606311179415,13529037648498340683,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,2036996905042852084,1865332637475912270,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,12330763866169769765,5575676374810611274,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,1111398505291171593,5939087866536133299,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,11762448604867181847,5642034770521527299,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3296,i,6286836961913069573,5935698098872103548,524288 --field-trial-handle=2256,i,8836277888323085897,10318388840388727004,262144 --variations-seed-version --mojo-platform-channel-handle=1076 /prefetch:8
  2⤵
  PID:2712

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

81a9b0a9-128f-4751-8aac-401dd782226d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\81a9b0a9-128f-4751-8aac-401dd782226d.tmp
Size 27KB
SHA256 afff481cd990d34fae048202b42cac4e3b1c6033880c5d558e84a1510806743e
MD5 09fdf5d8e4ff98fa7969c6dec5e455a3
SHA1 7756ac5faddfaeee4154d70eca6305932fe8d0d4
SHA512 5aeaba10439436ed6ce1d8a5cb5dd31ab680b6eef8c2e49d76525a98c2fa841f51e43f71b9f66bf9ebf52e245f5353710ec0c895476dbf4583ca2f33204045b7
SSDEEP 384:TliFMZcI+CsNO8TUNTUlIl8EcL9jY7ozX5od+d8y0VuXRXgXK9Li6Uq58bhP+syT:QFaXdwg1cqwO7+RXgwLwLnBu5
TLSH
T1D8D219F244D79836D9AE9747B73E2E038EBCC067B5846A90B3981A1CCD561BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 0c2d5bbbeffd9d5e1bce31e422bf1e232d8e9eba0da3067143c150ff62bb565c
MD5 c2e1472fc776c089fb908e765391ddf2
SHA1 c93e6138751ecc01128156abcd4d463982a04c20
SHA512 621214adbdfa516fcbe8ea6582c04bbe4d575be63999b4ebfc02de08f12fc0c163ddd24d9fe9794fe11283bd344161d7633e90f179876048971ba64751178049
SSDEEP 192:0jazlz+zGzGzNzNzjMzjMzFzjzjzEzEzEzEzpzpziziziz/z/z/zwzwzlzlzlzeb:0juJC66hhccp//ooooddmmmbbbEEJJJY
TLSH
T10BE17057C2D8DA5ACF0510CB49B0975C82B13F0FEBDCD908174C8AEE314F59AA9E1AE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 3e2b4a7f74e5ae9d32aa0c9738f49a9e7aecebb7f11de87c22024338d0f66caa
MD5 eef83a9e0b4e31ec494c2c795c673e0c
SHA1 af5500a087049d1480336e3326eeb25fc2fa2505
SHA512 bf4f6cd51e5fab8dfda118ad050660ccf45ab4463dd30320775b76e22d771f6f2f557889ed9c72590a16edc8c72a7d64bb6854db9c864cab929641b2e8c40700
SSDEEP 192:4jtzvybbcc4G0mFFssrrraaQQCCCCCCCCCCCMULO:4jtzvybbcc4XmFFssrrraaQQCCCCCCC0
TLSH
T1CEE1304B46D5CB6B9F05508B49B0A35D80B03B0FEBDCE908574C8DEE314F89EA5E5AA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 e3d17eeddc4a5a616db62525f08b5c43823e18069100e24638253a81addc1311
MD5 62273bef5bca006afd3a47fc555a73a1
SHA1 97dc378a703a137b07ee5a5ca91df17e705af8e8
SHA512 8b4c81ef9b9a0fa35e70ed6a46a7b1bb6118cbb4ac5598409e0d6639a5c6cc24a8ba7bbcb151b3313a0f6bcc7a25f6eff63dde2feadd8d459adff1845e8ba445
SSDEEP 192:Q7Fjz0uwu1uNpNpNpNpNvNvNvNvNqNqNqNqNININININtNtNtNiNiNiNnNnNkNk/:Q7Fjz0uwu1uNpNpNpNpNvNvNvNvNqNq4
TLSH
T1E2E1498782D5CB9ADF2510CB59B0636C42B03F0FEFDCD508138C8ADD318E59AB5E5AA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000d8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
Size 2.0MB
SHA256 f6f931cd2ceeeaa9f3acc69c75049e6c53b1340e9ce95dd9a6c832b138b348ac
MD5 4e5b3998fa555a4e88186785a3d2db6e
SHA1 19b909d7d45e8e47891c0fa9831ba102c0a851a5
SHA512 e2afda5c7f2c9d479cb608cf5b3e187985ac86c0b48cedfba9f482e4dbfcdc1a23480ea6468530b1a05592cc14df89abf43f0b61bb881ada836e86afb5c6ae1e
SSDEEP 49152:lZUdM2eAu2P861bLRjFx0leuO801FVLG8ooNce/rxOp:lypek88tcleuO80zw8oZW0p
TLSH
T1C2A53318658F602DBD001AA3ECDBE705EAC5D634F884A34A5B0F49491BF70F85926FDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000143

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000143
Size 1024KB
SHA256 5a29da996ae8112f111c105d89bae9514c419daab594a2783cd950cb8cd9143f
MD5 36f9f79ee17ef43a2d04319e8b1471c3
SHA1 0441f3ec59e45f53036de5bd98575826e44d3cf3
SHA512 205f04d8667661ac1523099442c4f55cfde17d8b46e505df026b861485c0ecd6cc641f766a7ffca71999c142f468b1818763fc4eae35c253c3238b9b76b5e9a0
SSDEEP 24576:pz4bSmKu94Uhkur0akwokjtu9vpLm3EsWxBL70K3jNT:BGKu9CSREBLjr/bp
TLSH
T1182523843F6056A6DB95123D61E833F4373CEA67F66EA6CD37AA0A3839F13D014520D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 16KB
SHA256 23be2126a9791af0611c524c9b28a0f5cc13c8d6101b6c6a4851e6249bc85e5d
MD5 80d3d8897fa537bd545dce9d09c6a9d6
SHA1 f4de159820618c7f88e714146399ed6a6c58e66e
SHA512 52705d82a84b3d20020a2c1d4bb53e50c01f5e98327f968e5f7f349de2a1c239194db39574851971f3e52343d04b7ac0223f48ae9ce35bc7e7c259f04e78ab04
SSDEEP 384:x12Dr4Ei3uNmwE48nzCXDiDDqIpWbExysukuzkM4wjG9F4ZTv24m988e0:LwdxsydkTnse4E
TLSH
T15672D81904AB89C3EB4815F8DBD78BA87274FC263B830E6747745C3C257ABAD8AD1474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 16KB
SHA256 0d94bc3c28d8ff62ed4febe1c73dd6eed5c7b9f1c210fd1cbc26d6c676ac1e33
MD5 95be69a21e81ffef984c70be46e9ee18
SHA1 2040f70f35b19a2803822391094e7ec8bf13f19a
SHA512 46d046e85be40fb6b67472aaa24719733bd818147dad9caaac6482ec5f0b3550695df30ee189e7e0cc693c980f8ebebbe9cf0d453da5026b4b19eda28c3d9822
SSDEEP 384:tSzr54fd1/661OBv+Gik4oh3qbYzb7CfoQuBznMnwJBaFa0Nv2lszazVZ:p1W2ffinU5Jell
TLSH
T19672E90844AB99C3EB4815F8DBE78BA87274FC663B430E2747749C3C257ABAD86D1474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59386b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59386b.TMP
Size 3KB
SHA256 0889ff88d536ca1be23bd3c0f1ac67aabd3a00c1d4d88c4a31810488d16de90e
MD5 2671fc57fd530b1533b6dbabd8b64b6a
SHA1 cb617501a90c64ea74241aa6690557755f14349f
SHA512 d8192411928317bd8b66144f527deb553692cf2c38044c8e1d413b8e06b7609d853ecad07f1d23ff4611bd06306fddb9f5f337fd21b614d368d4dfe42a1f9747
TLSH
T14971E92D084E49A3E31D2732E0E3098EB274CD994FD74EA35438993D668EB56CFE546C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 a252d03c809274be09540f9ceedd6c054cd4a6912722e0d23c2c969627f15f77
MD5 620285f831be42e2d1347ba4ed7e532e
SHA1 eb57f57062f0dfd991219ffe05315cfa18c10a15
SHA512 69724928e03456366a1efe4f7720f3f8143c86dadc24a9028264115f2a7c979dac2f4861fa8c28016015f5343d65d3dde432de333ec5ecb5206c447707c67eb9
TLSH
T135B0121844081285C23897F02BC8C0C134F80C21118F39030054187BA1032744081140
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\00\00000000
Size 1.9MB
SHA256 8f5076f8d6fa8dd441b9050360cdc1b8f9926e4ce435b91eb681e2f71db35cb6
MD5 6dd44285551ee04547bc86620698ef0f
SHA1 44a996add522b5736de91af3cb643b588fcc16e1
SHA512 3f3c87d78295ebdeaa7fedb7383551f8d919e9d571dc8616bf386602f49b962e3b18a06a09cc7e3ab584dd0be14d5b363ab0fb93a9d7c426919f9eaa83e41c1e
SSDEEP 12288:3LZ3LSYWX1PzG21umw1lBvfXLaKT8VmMxMLdi2zrO+a1hvzQ:6LuB3m2LdjzrO+SU
TLSH
T1EA95642F060ADE7AEB46FB31F07624E7FF74785B13ED595069881D6B013A252E1E024B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\LOG
Size 333B
SHA256 a98d1b71eb10a9e466fd1acc53f55db2372061140a05344ce039a9f01ea7a7b3
MD5 110b593a131000b33c32b986736ad9ba
SHA1 c88fe7998c8f71b398dbd15a1ebc2f10d887e7b0
SHA512 c4af086191b0ac0f32a284ceb355cb9b06732847aa1a9b1e0d3cc3f8bbac518fbc2fe636c9504801c2d11d969e351160bfc1f67371cabde0e38e05ea8cba9709
TLSH
T118E0D87E85C9C11F655450A715347F49F7B3791EDBC8FE455F01C814B546044A1EE191
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 079c7428f839332f14cd5ab24d06af28a454427407c5ef5bd1bdee7c00e795e8
MD5 03ca713be1c16d068caa3683a7d6b7f5
SHA1 ff2e74b9f1aa4216cce692ff22f884aefd71ee06
SHA512 9a0437ed6efe8878ae118c556ed4d1ef31e90d00c54205026fb84809c805edddae1cf7265e75ae0fcf5c87adb75b3ac82f47068a14af6e3e44fe1f9b6845c1e7
SSDEEP 192:DHQ6y+7eABekJGJPbJfRwiQi3Ci5feVRf0Bc5BRaeXZRkhuPs7XrULPqxPi9cQoA:DHQ637eABeAGJPNfRwiQi3Ci5feVN0BW
TLSH
T104F1DCF6C3E4462DC81162F09A156E17CE6E0A6603A83CDA85E4FF4B93E2471F2D195F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 6f6aff6f7d00fd0c5e8a50babea699135d47a29c69b4828ac12ae70901fd7c53
MD5 693a0dbf4cd2e8baaf81e9faa90b6f3d
SHA1 301c2369dff2b4cbd523d31bcba2161f430a4e01
SHA512 090b6d5db320dfa48665e501f7f1e85a3ceb90e6da70feff834bc6b72c336cfc5062f1542d48a6f80c457edfcdc85079c66e0b7dc2dabf1f1f511e9c3bd74273
SSDEEP 192:DWv+M+veWBesJFJrcJtJ0Bvi3qiZfTRf0BR5BRceqZRhuPimrqLPixPi9koQj5yl:DWv+FveWBeIFJr4tJ0Bvi3qiZfTN0BRe
TLSH
T120D1BBF793B0466DD911A2F09914AD278E6A052703AC38E986D0BE5793F2071F2D1A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 1f378a8272a67e48588482c33a1a27dc29ce8ce7d5eeeefb8b79f776556213c3
MD5 fac0b9ffab3e2b5b90a127c4d9b97d5d
SHA1 6a906adbf109294593f2a87cecbc27c4a22c4d3e
SHA512 2aa0dcff5af73791bbd10cc4d548de5f4e57199e509674c11138eaa1bfce566d203f155e59e1c9b4a2196998ea85951032cd89cb8f29f2806facf63457078d45
SSDEEP 192:DHQ6y+7eABekJGJPbJfRwvi3Ci5feVRf0Bc5BRaeXZRhuPs7XrULPqxPi9koQj58:DHQ637eABeAGJPNfRwvi3Ci5feVN0BcA
TLSH
T146F1FDF6C3E4462DC81162F09A156E17CE6E0A5603A83C9985E4FF4B93E2471F2D1A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0cc680ca5cd0056544fd1bc2f349bd79a09301178ce93f3032fb5e4721d779d8
MD5 81db36c5bae5e5f2008641f1a98843e3
SHA1 6061cb09e28045e1186c486a70dc2609a2dc9a62
SHA512 a8730f610f131a049580f081b86034416cfe18a9448bb9a405ec5c4b6f789d8a72b4734900faca19957d3e7765a26ba3fa29b63cc6dcaa35cdfac90126ba8a2f
SSDEEP 192:sxZMRMyM/jK1Ml8Mks/fusDUSIdp4dlHW6+WNjDWnp/YHSEgqFIgrJ:sxZM+Ms/fusDUbgHbfUp/Bo9
TLSH
T10652D5126A34A977CCDBD219F945BB53D6F50432E2940E48AEFC9A1C04E7BED620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8d31d87d02d2c2b5731ded48297f3c3a6887335bdbaee68008cd1f860db4232a
MD5 61b1f667cab7f8e384d51cb758788aa3
SHA1 24a5e37e553402d80fd58cf56a23d254a1d6e106
SHA512 3f9ec1b5e051e6a6cd526280abf9a1813842c6710bb3e11c67636c94bb95a63283c41d3ee62b4b3ff869cbc10757beb7c819c197b3c92e2b33164dc5b4ad4b1c
SSDEEP 192:sxZnRMyM/jK1Ml8Mks/fusQ78Idp4dIHW6+WNjeddYH3zgqFIg5IJ:sxZn+Ms/fusQ7lNHb8d4C
TLSH
T1F252E7526A34A977CCDBD209FA45BB53D6F50432E2944E44AAFC9A1C04E7BED630381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5062e54e8bd24d1a0287889f1807a2cc1e9399720becea91194e88f78a29d323
MD5 7b255b9259d843d59a00b2cb7a3b2228
SHA1 080f86a7ad225d552c74b4d95464c1be21c007b7
SHA512 8d04c90b32c88c8943ca30048724caacfbfd052b795cea4f41a664ef108d2d0e4fb9231fcbb8aaed95237b5b13da0f704ec18ee173b43dd955077c40d5fb42c1
SSDEEP 192:sxZnRMyMojK1Ml8Mks/fusQ78IdpudIHW6+WNj96TYHlzrVFIg5IJ:sxZnFMs/fusQ7lzHb4TYC
TLSH
T1E262D6126A346977CCDBD20DFA45BB53D6F50422E2905E94AAFC9A1C04E7BED620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 aaf3007497de995758525422fb9f394dc3a3074c6a429432db3ba836876cb677
MD5 066b7307e070895906ed338ea6c69a8d
SHA1 de82f65737908591c0bc8e2a0392285c66a730a0
SHA512 e1122970e5d37554aad401bd1d4d177cf0411e487e0c1fccc163cfa7b8ceb4977716560e4e07fc224bb5c962cada7b2eed6c20a0e56435c6b5e678824c423d1c
SSDEEP 192:sxZnRMyMojK1Ml8UQRks/fusQ78IdpudIHW6+WNjuklYH2zlVFIg5IJ:sxZnFqis/fusQ7lzHbplVC
TLSH
T1F462E712AA349977CCDBD21DFA55BB53D6F50432E2900E54AAFC9A1C04E7BED620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2727885bacba688ac07859a30d64e236e4c17d547a6c05a9f3f97e1f236c63ab
MD5 150cc0031e9bf214173342250896ffff
SHA1 2c2931ac5e99574e6930ee2b7445a1052ec79564
SHA512 0425755aff9e78973860f09579f6d7ffe4cf2b663c055858dfcaddbe690464795be450a17cc4f355a98458d0cec3e9284be7c1d18773d19c658b642470be8cc8
SSDEEP 768:N8UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R+roVS0f:N8UZYTMWvg0Pou1ja7eLZmRVLf
TLSH
T149D20B2B280CCB7E4F844E5DEC2A6F967ED801CB9A584D5447EA884C03CB7EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 1KB
SHA256 7f93a7d6e3bbbd21ed938b1e9b839d1d77a4c40afa5179fba73c62b41f09a3d6
MD5 62123c104b4df5caf9a9aaa887aae2da
SHA1 f82cb0c176932b1066e9410d7a677afa7d231756
SHA512 12bb5f899263ea866ba428407eb49bc0d021f93e83fe0869ccf38aae4f3c49662bc665c90a56897b28397026e32358aefa1d286fb11328a2073b32617d72194f
TLSH
T1223121499E60C99FF8A441B214B6A1A47370D4CC5B12A3138C2C22327E2731A2A5B5ED
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cd4dc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe5cd4dc.TMP
Size 1KB
SHA256 8ccf233973449817806fd51b124ac28b403cc3facde94eac13a1baafb45f1a41
MD5 ccd5a656f84ccc8eca11c01adfd6f7a6
SHA1 a8538939b674d54188fe687bf9fa7b9d40cc309b
SHA512 6b96b51458d72ef67425afc5041b352425c8386be9afebbba7334e3877b7759d1da29ec876455b9b4063834024f68acb8309698093169067cbf7cae8e3777089
TLSH
T12F31464B4A908E1AF8C4507709A7A4B87376D9408321B793987C6639ED31B9E1F5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 dbb19421b6da972a2801e69d4e9fe75181470b2fa21b6476b8c08d49e3dfa283
MD5 382b48190a47d539976d9dbb69534e1c
SHA1 9369d8355a96b31810fe33cf0725ed7d64cbec07
SHA512 492ec71186966825fb97b6e24fa787c5c6d347b66ac0c3ad782c56a2f174bbde60124030603e07cb635bc6bdb5593f88daae58334624324962a3ef74f9c24f0d
TLSH
T10EE0C0F77DFB1820AD7FC3D74471E4A402013CB8C64DAD8E00AAB2A310B23002806C32
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\b88590de-64d3-47db-b619-822317c3e5b5\index-dir\the-real-index
Size 15KB
SHA256 f1cd5b1b57564785fcb2cea357c7f4f6579032774170a9423e90732a15913a44
MD5 49f9e71e1dcaea06d20df8928087f1cd
SHA1 735161711a73b41f1b618370372239e6749c190a
SHA512 0fbabd61cfabcce9348ad6db86fa67a24f71dbe579da4435986cc60384411105317142ccb1063dd1fc1b40140beb0f144419388421cc7e99bcf0ecfc3d07d9ec
SSDEEP 192:KPZKohsqJHcfvCCvd/xpix4k6smbW2WTFWWUxNNF0F+f2uMc2WyhknKL2Ksldv:KMssq14vTd3W4k6XbWXhUhmnUyBL3sL
TLSH
T1B7723845CD7AC667D91A0AB53AB800847FBCE5CD474CAB2716EC58F0BC4271A2DE528A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a2cfd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\b88590de-64d3-47db-b619-822317c3e5b5\index-dir\the-real-index~RFe5a2cfd.TMP
Size 48B
SHA256 21b10e7984b5b3290de497d02fbcd64b6fec14f4795cae1d6f99524780eb2164
MD5 0fd196667007497a90c26754b5a2d910
SHA1 3584fbf732256a9572ff1eba0ada9751c5e2d996
SHA512 090c8e6d09709f1c05dafad903860e966b365ffeafc7ee93a251969aa4db32431fd626268ee69cc3569123f7a1701955de4089058a06e46966c86b32c1f8d6f7
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\e90906b3-b84b-4721-bac0-c38d98403999\index-dir\the-real-index
Size 72B
SHA256 931bf8380d0cc694fae8829fbd9ddc77685a831f8f014c01c93194f86f79f5f2
MD5 94f314f6188a329eacd263a73920e968
SHA1 41518beca4f1b7f9b161c7c9afe50d412e882ef8
SHA512 58a303933ddc8a3781fe14f17a3c4d20eafaa96793c8c4e714a984a0073f350d36da495964c587a7be5d892c2d246c98cc85a69a995a9b803532c33065f75f75
TLSH
T1BCA00265D2B40D45C5940778389305C07221BD10830B52C394F12284ADB1B444133310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f42f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\e90906b3-b84b-4721-bac0-c38d98403999\index-dir\the-real-index~RFe58f42f.TMP
Size 48B
SHA256 f88d891f4fecd4e88bc146a0f5f8521d9c59832ea5270f18cfe38ab461a5c494
MD5 f246ff6f0b569a86131e968ef9e3ae56
SHA1 d9ffe80bef6c668864116ee36eaee7d309ee014a
SHA512 78b98ad3c37ec1b1222890a007e9d2cd27662070748b38953e15cb5c10d4ee87794b1bda15c08e6e583647ea4b4863fd6365c12643bad20f8e7b1c70e6102ea9
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\index.txt
Size 705B
SHA256 676d1480e8ebba560ee3c37e785e4f7e27391d659594cd7de7571880791c5b69
MD5 3e76331bba5abe02a64ef6fb9480403c
SHA1 15379ce33875bafbe0d5cd9b5477c529fa40f1c7
SHA512 de463a684f976d30b8a3fe199a7d360e04578db9efe96fdac6d3ea0b3d07dedaca98c4b638c1b7b136c13058b50772e868c1129fcfa863f6f3451429ff17be7c
TLSH
T14F01DD7E5DB0303313FAC898C0E401CBEC5929D639821C0D98CB03522B13F473D8696C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\index.txt
Size 703B
SHA256 a904d1a001209d7716b6b85275831bc235cbf4f6ef40f15087c353fc196faefe
MD5 6c0a10d81c2bad95afdcd221849f55b0
SHA1 cb3dd7d74f802e9a5038c1a4e178e794bdeac036
SHA512 8cc8947748a428c4bdd3b4a5b34c56552ce0670742912e46a39267fb0aa706698cd1944a5e83f0727c5202661f028898a7caf92e97b7d9d8893d7544863fc075
TLSH
T11301447E9EA4313713FAD9A8C0E401DBED5A21D639862C0998DB43626B07F433D8696C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58a2a4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\index.txt~RFe58a2a4.TMP
Size 308B
SHA256 ec6bb79cb7f0077ac4426130fb694b81e5da5d62a0c390b0a9f06e82a5d6ae58
MD5 82b5d3cb70fb761402557ad3e8a6ada7
SHA1 5ea683f93291e9503ca8b1cef8cd871fc3d7b0a6
SHA512 807394b48e058d298c14ba82734432af5e6d67d29e2f817dea6d80a8f8930c7fe764455f05aa19cbbc187e3a218c608c437b816d30394c32b27f238c7d948490
TLSH
T1D2E0C2AE4AA4213253E9CC98C0A804CFA95529963D4359489CDA62A22627A53798A57C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 ddddf4cb785bce1f8bae514b934cd998485bc8fc4d2154fc0537e3963b428012
MD5 849b27a0b886744aab784d74acf3f395
SHA1 826a8725c211ef5ad4335350d94475f804c848d8
SHA512 a3827e0536e7c3822f17546f147f5c4b39549bf4ada22803c2b750e07955eafbeb862fe9745f1634a5770d225d7040412e33595e1c1f94faf30006647231afcd
TLSH
T16FB01188A0088083C030023888E200A8322CB80003020323C2E8A020C8282A88B020AA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f076.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f076.TMP
Size 48B
SHA256 32242deb364c031d11801d68c8b7a7c7422aaf5c46982389a30ec50c1f77dee3
MD5 fb3f71a7534a74a69ade23284dedb104
SHA1 c95cc7191a0dc56a701b0a09efb8d2f2c7dd6162
SHA512 f48f756afa6f310c60d8999de5d9a742aad15eb264d68514932eb6fcb0ddd889004346f48ecb3e298582333f70175db6de28f098170e9364d6adc1e89c660316
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 16d1d0df4b6797bfcbc9650f9ec6495ca0061f764e66f850059695b5ef7a1932
MD5 6151d8a06570f4df022c41fdf067869d
SHA1 ca2cb39cf6fb5d537b8eff3cff62b9da647f4962
SHA512 a16a55be67835536b1ebcd2df69efc91de498017c33ebab103863bef5159db0ae82c7de3465a22be08cbe82a42eaa16db45062eb0cb715d353486fd824aa8bbf
TLSH
T1D5A0022001417545C43443F81FA11273635499685305469669D0025499FC28E5242361
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 d1593f8bcb8950d341381d0d61da476df7da09a83c7dc69f5088699c38de8aa7
MD5 8f5a41ff7997ec589c6123b8b1fcbdf4
SHA1 1170bd925f07eb7a3a323884e4476308ae14ca11
SHA512 efa515b8be58764d97b49c262e12e5e65dcc060e24d1c8d1353ffcef29786a6d037fe1721d8250a5f3f1b6470e59d46f789e4e9833577b2d0e1ebd51d56f4b5b
SSDEEP 96:KA1eK2AMaMKXqOCOkKHqUdOKmkS2LWKEgX:EurfyVlC
TLSH
T19BD1EF1272BB02033D7D2918A3A987764F85F6A33418B42B7BA840B15E67E345DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c27afdb-115d-4978-a25b-474b9dba5101.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9c27afdb-115d-4978-a25b-474b9dba5101.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b7749f78cfd71bf7ee98186bb20e09bc71e5fa6b68ccafd531e158d60ff85bb2
MD5 32d4ef51a07d1e1978147f135f5a17e2
SHA1 618695877641a6a38857e32f73adecb8dcd5b740
SHA512 e1cc01c9d92bba8fcac5a519ea508b9b1d9df7c9fa43bfd1d6f0f957343e7ff73baca7fd0f226ea637440b2e847beb474b0008a4b105e4b423654ae9efc6fb06
SSDEEP 384:aQZcIhsNLoEcL9j9cozX5od+d8y0VuXRqgXK9Li6Uq58bhP+syYBu5:VhEcgwO7+RqgwLwLnBu5
TLSH
T1D3927D756439AC775DE3F186F84B32138EF88067D6886F80D6EC5B1D01AA5AC531BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ac159a8356638f3b70fffa72de94ac56c8a804be63b38981da72f6f2dcbccd5f
MD5 a7702cfbd539d6c73fcb05a72b6ee031
SHA1 4fac2569851cd33f69b82a5b9453f4298c5ee2c0
SHA512 3ce9fa63be1448ffc2b904311150645605c4d8f029ba5d43124180aa4b5093e81435105f4c72c6e163bff545ee9e63c2c393d2a6f0b5cf2866625c371f662030
SSDEEP 192:yONR61VWQmiUyzWgGX5Obd+j1jzory0aoX/ae31IU6:yONR6WngGX5od+d8y0VCgIU6
TLSH
T1FF02D935A9286CBB8EF2BE4AB48737135FD51067EA552F84D6F81B1C009769C2316827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 1f0308410c0953c236bb97ac9d60c8a80ca8ab1dc6672545cc0dece223c7b87e
MD5 9aeb309d2cb272aa5e26d25ac40cf18f
SHA1 a41e64a8e8321ff81e1394f00e0a5509150304eb
SHA512 04bb2ec48ac4e76bf51329973cd4e8e26cf877b982c6f5ba538edfc295ae649bc2be8617ec1155b13ff6217f3f62978376ef8d3d831f3d307c2fbaa52dd28faa
SSDEEP 384:LQZcIjsNLoEcL9jYcozX5od+d8y0VuXRqgXK9Li6Uq58bhP+syYBu5:ajEcVwO7+RqgwLwLnBu5
TLSH
T1C1926C756439AC775DE3F186B84B32138EF8806BD6C86F80D6EC5B1D01AA5AC531BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 dd381e9537079bf03e413f7298d1948fe29594d4bba68b9475dbbd4a4ea6c408
MD5 1aac9e5b77b122de3e0d49286deaf0ce
SHA1 8b554aef390e80bfd3f5494f79985ce50065e5b6
SHA512 a745fe2a77ece49f318852e01ff153f9fef482f4e2a49640a3545c95bb8179750a220d1bf9ac6b092e4a81c50e5ad2b5c874e9f4d2625a57cc51aeb2a4037580
SSDEEP 384:TliFiZcI+tsNV8TUNTUlIloEcL9jY7ozX5od+d8y0VuXR0gXK9Li6Uq58bhP+syT:QFQMEwglcqwO7+R0gwLwLnBu5
TLSH
T1E8D21AF254D79836D9AE9747B73E2E028EBCC067F5846A90B3981A1CCD561BFC30AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ba21a41ccd48977456804fabd040dc4fbe34393b61987e2a8c5d7dfe1b6c61d7
MD5 cefca848b99a104823f86991b20490bc
SHA1 a54834ca88e356c12e4dc7db504603fa4f6f49a1
SHA512 a4061628e76d74156f94944e5ed92783965507f0aa3093dd825743733837302d3814163fa593d8afb1adb96cdb0b54ea2f6e4020fca0ea3fcea097d5f805e5c1
SSDEEP 384:LQZcItsNLoEcL9jhcozX5od+d8y0VuXRqgXK9Li6Uq58bhP+syYBu5:atEccwO7+RqgwLwLnBu5
TLSH
T1E5926C756439AC775DE3F186B84B32138EF8806BD6C86F80D6EC5B1D01AA5AC531BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d83eac07b610fdce862654dd3eca82fda0ec11305600a050e5009ec9c5b4d65c
MD5 2ee9647e8e6933f617f21223c5931518
SHA1 a85643f7942fb70c19434f33e074131a3ae2a645
SHA512 42723174639223b48f581cf7ef90ac625074eaadc0638581405ca0a87730ee2f9a312b1aafcbcd192339881cc9c314a558495193ddb6ea263d9ded1b7ed15775
SSDEEP 192:SON261PWQmiUy7WYGX5Obd+j1jzory0aouX6E2jJoqRQU6:SON26U9YGX5od+d8y0VuXRSgU6
TLSH
T10E122C36A428AC675EE3B545B44B32139EE55167DB487F80D2FC2B1C01DB5AC531BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 482c0d1a62e14d34a9144f51abfe9b20c5a977e2739432ca28cad0efe6ab3d66
MD5 db1b4a3f5bd7c035c8470d40a8ed55ab
SHA1 c5ed26cd3754c279a8c3f3494fac0220d7c65b21
SHA512 7bcd4f840dd66a4858b06d59f37433534ac4fa3f5f28ee883cad884aee8cd591f3fa0274a4bca47379d462392e1070a00eff9dc884cf2e717c5753bb448a6632
TLSH
T135E00201A314117DD03D13365147163053EAC12402F10B0E4900E2652D072200F32FC5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2f93cd9f0ac5fd0da998c1f1a4e7d066316104a86bbf828e5b6c4aa05d6732ce
MD5 ca57f26c6d9a35b0f49233ed1794bdf3
SHA1 d9701181c30a2eb00745316db9436bb6830cd992
SHA512 a8ab839ec57b7b02c0163b7e81ded4a2b7dca4869900b5b2a23b716fc66c68e671a36bcaf10e08cda3aa768d57ed4482232bb9f3aff0272006b0f91f49e0c5bc
TLSH
T1A5E00212E35841BED13D13365187163163EBC13402F50B0E4D01E6693D072200F32FC6
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 59c1530994e74967ff7b038d80ad92d9385236fdb1bb333cf4f0debd05c6f73e
MD5 b14dad8a15ba339a6af11cd381313ca0
SHA1 d129b385f7876111f7bd9065052a2b867b18d7d5
SHA512 6c2da414d3458a25408651d136a5a7f3f748e5a21597373c00d9e512f47f89f3d9b72e9f33a36b74496df68882d8837a0e4eb9f188c3877fa0a948e75675ef08
TLSH
T149E00112E35841BED13D1336518B163163EAC13402F50B4A4A02A6693C472204F32FC6
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f48b43965a0ed4ffeb16673cad269d4d358ba60b876392282e4e2a939718d6e7
MD5 e6655e84f165cdada519ab797cf0a25b
SHA1 b172f2be1ea06e9e989b7b6f23b73cf52cf816d6
SHA512 49040b523cbf7c46cc24036251d4c8b8e5cab1215dde438267941b670df085f4e152f6ca9b1d299fdf7287d8cbf11c2a51a682eebf88b4ac33c9a1947fd48dbc
TLSH
T192E00912E79841FED13D1336518B162173FBC17802F64B4A8E02A6653C472208F36FC6
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 90848ed0ca63be2ab2a5deb4fd01313fc41d36a5ef2e7d489784b1aed78378bd
MD5 0cd4daa46e0bc9948ce4925c7b02ca0e
SHA1 ea2a6d57d8979205c9e7d615a80e3bfc047e3898
SHA512 d7fb1160c80efb15f62f4fb38fa0f8babcf87d51beb1635bb58f82ed9daf14a3fa8e066777d1fc80589538bed6768a158ea38c66b87db64f771f0e830c707b05
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4ad4f1e3f0dc78944e867489bc7843af23bb2824ff6bdc3da82f0c3c028d4067
MD5 ca1a44f38193cfc49f2fb46d92245456
SHA1 46ae73e9d2e296897e7dfa27a3579f3f4bff0ac9
SHA512 12a4257ec5113feb474837874bf7e00f658bc3d3f7882e2a75fe19e572facde10c2f4e6d17d34a9ba6c0f9f3a1ecf0c706be97ec91080e8c9fdf696d59832299
TLSH
T1C3E00201A3101579C02D0136114B162053AAC21401D1070E4500E2652D042100E31C84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58c4e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58c4e1.TMP
Size 392B
SHA256 1ed10ab759b804cfde1a40025287208b2cbe69d6ccb220ca879d7c19ec0dbcbc
MD5 0ea4412714e1719ba1e31503eebf4858
SHA1 de374948f250d58adc9802250d08011d4cc394df
SHA512 b136355a493fda866fd9b585fe87da60ec785a7744cae4ad75bcf9d77532ca5646a9b23745b5a15ac8b1ec76b855fabdb4a5c7f5e6c70b8210bef11149edc851
MD5 SHA1 SHA512

Submit Download

a59de755-6c1b-4cf7-bfad-5c2d532a2771.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a59de755-6c1b-4cf7-bfad-5c2d532a2771.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 eff11d37f01ada7ead0a4fb7422451da68cd2fb51aee0cea136c32b5cd91f82f
MD5 a36af444da24c5c9b6a5cbb14335d8f9
SHA1 d99821f9b4eb9f8017d53e2ed73a0fb9618fa555
SHA512 8a70d07fa3d9dcb79e626c935720febcd715ef91d4d0d0b30c25f18ca7e60b2525cff504a57b8ab2a8bcf1af480b3e771897d9b3b489c8a385c0e352dacd99e1
TLSH
T19F410958B2F91148B3736F56AFF6A8AE447FBC372E46D45E00010E4F0A66A40D9A1733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download