hxxps://scratchviews[.]com/

Analysis

user interaction
yes
max time kernel
1048s
max time network
731s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 14:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://scratchviews.com/
Sample260810-rn4jqagg49

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3364	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308452922231463"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{61477688-39AC-4901-A589-E211C5BE401A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe
5168	msedge.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 5168 wrote to memory of 5924	5168	msedge.exe	89
PID 5168 wrote to memory of 2780	5168	msedge.exe	90
PID 5168 wrote to memory of 3364	5168	msedge.exe	91
PID 5168 wrote to memory of 2780	5168	msedge.exe	90
PID 5168 wrote to memory of 2780	5168	msedge.exe	90
PID 5168 wrote to memory of 2612	5168	msedge.exe	93
PID 5168 wrote to memory of 2612	5168	msedge.exe	93
PID 5168 wrote to memory of 2120	5168	msedge.exe	94
PID 5168 wrote to memory of 2120	5168	msedge.exe	94
PID 5168 wrote to memory of 2120	5168	msedge.exe	94
PID 5168 wrote to memory of 3868	5168	msedge.exe	95
PID 5168 wrote to memory of 3868	5168	msedge.exe	95
PID 5168 wrote to memory of 3868	5168	msedge.exe	95
PID 5168 wrote to memory of 6048	5168	msedge.exe	96
PID 5168 wrote to memory of 6048	5168	msedge.exe	96
PID 5168 wrote to memory of 6048	5168	msedge.exe	96
PID 5168 wrote to memory of 6064	5168	msedge.exe	97
PID 5168 wrote to memory of 6064	5168	msedge.exe	97
PID 5168 wrote to memory of 6064	5168	msedge.exe	97
PID 5168 wrote to memory of 1604	5168	msedge.exe	99
PID 5168 wrote to memory of 2204	5168	msedge.exe	100
PID 5168 wrote to memory of 1604	5168	msedge.exe	99
PID 5168 wrote to memory of 2204	5168	msedge.exe	100
PID 5168 wrote to memory of 4092	5168	msedge.exe	102
PID 5168 wrote to memory of 1480	5168	msedge.exe	105
PID 5168 wrote to memory of 1480	5168	msedge.exe	105
PID 5168 wrote to memory of 1480	5168	msedge.exe	105
PID 5168 wrote to memory of 2644	5168	msedge.exe	106
PID 5168 wrote to memory of 2644	5168	msedge.exe	106
PID 5168 wrote to memory of 2428	5168	msedge.exe	108
PID 5168 wrote to memory of 1096	5168	msedge.exe	109
PID 5168 wrote to memory of 2940	5168	msedge.exe	110
PID 5168 wrote to memory of 256	5168	msedge.exe	111
PID 5168 wrote to memory of 256	5168	msedge.exe	111
PID 5168 wrote to memory of 256	5168	msedge.exe	111
PID 5168 wrote to memory of 3244	5168	msedge.exe	112
PID 5168 wrote to memory of 3244	5168	msedge.exe	112
PID 5168 wrote to memory of 3244	5168	msedge.exe	112
PID 5168 wrote to memory of 4624	5168	msedge.exe	113
PID 5168 wrote to memory of 4624	5168	msedge.exe	113
PID 5168 wrote to memory of 5028	5168	msedge.exe	115
PID 5168 wrote to memory of 4132	5168	msedge.exe	116
PID 5168 wrote to memory of 4132	5168	msedge.exe	116
PID 5168 wrote to memory of 1124	5168	msedge.exe	117
PID 5168 wrote to memory of 1124	5168	msedge.exe	117
PID 5168 wrote to memory of 4400	5168	msedge.exe	118
PID 5168 wrote to memory of 4400	5168	msedge.exe	118
PID 5168 wrote to memory of 6020	5168	msedge.exe	119
PID 5168 wrote to memory of 6020	5168	msedge.exe	119
PID 5168 wrote to memory of 4676	5168	msedge.exe	120
PID 5168 wrote to memory of 4676	5168	msedge.exe	120
PID 5168 wrote to memory of 1416	5168	msedge.exe	122
PID 5168 wrote to memory of 1416	5168	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://scratchviews.com/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffde5b5c188,0x7ffde5b5c194,0x7ffde5b5c1a0
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,11730695021438929527,561894701492309285,262144 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=2816 /prefetch:2
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,3739781918990684349,16563328547603874727,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,16235345342211570099,14511503057138884059,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:13
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,8515111863794792954,12779268895550491581,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3596,i,1581534214167156381,15862577827948995009,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,11589398111071984028,15136564754628632706,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,9804227213401105219,3873805188371347502,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:9
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,16285326835882130794,17686422692674012198,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,9475933304857569303,16791717870181147377,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,16119243077483328185,8250432804740819954,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,16119243077483328185,8250432804740819954,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5272,i,6947031753643797170,15591830906263205376,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,1641269281807991741,15256795863814526168,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,8725848721168689436,380233571927815060,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,12171710574470166458,4603771671941615390,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:14
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,9756060017826080352,15057861244355641004,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6888,i,939440100559246929,10156070074060988285,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6784,i,6061160836993900027,1008478925197545114,2097152 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7116,i,16031501331125426311,3566431724890605028,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5424,i,15844107360087206231,12304187688495475825,262144 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,13666125730157343306,2373222373238883308,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3344,i,10250088994785029986,9075051778763894056,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3340 /prefetch:14
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,16062517029936427152,16075460604919106569,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3340,i,4809849789743912705,4513994539200162783,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:14
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7336,i,5330058478232271181,9668918681623976379,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3268 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2748,i,6906598218029237747,17979907888658878169,524288 --field-trial-handle=2828,i,17180247153808949261,15358290525197516189,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:14
  2⤵
  PID:1416

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:616

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4108

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9c4a613b73d7cb97aac34270d3f626307efea1bbfec5927243e22ed8d499ab1f
MD5 f63a0416fdeafd6789bac204d90adfdd
SHA1 59780bab502cda86d39b94bdf43f777f5026f256
SHA512 dde47c1591f78a62dea1c046b70f3fd518d142d759a4a6c4603bdd25c0ee374883d48db7eda28854e8fbc83c8cf47310ac9282a4cae67dc98d0f8be60aa67808
TLSH
T1ECE026E814DCC2AFEA64A48752B8670D83A0361B92C8F98A3700C4887046A40ABC3BB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b59db4ed7fc34daf97541d9a73c7f3ad7fe96c1d95ddbc1e76d4ae23eb1183a2
MD5 e719a9d96a6b498ca0e9b09ea1f6e4c9
SHA1 c6594b00a1c13b4d52a12f9b834b877e087e0273
SHA512 6c79737a383152d489c689346071c7c63727859223b86ded3775f3d584760581403134efe8299720105d387749e200aef929d8234c7b981766bd9b0b5ab1122f
TLSH
T1B7E07DE805CCC2BEEA40A4CB5178670EC2A03A0FD2C8FD8A5B00C4847607640BACF7D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9daa8701663f7a27cdfd1a106f3b4b6d1155c05a3be7416360f752718e429121
MD5 091f2154ab1bebe89cf508ea79962d91
SHA1 33e0279f2556d931981ac7dd87564c58052ba6b3
SHA512 d03e5cc7ab39f7a9f96825f6accfed4ba1c0373df6076691b9bbda99589a774f2f9d8c39f79b92ca44ed0ddac2cfb0a29c2b66c9bbd75f330d030b121d7a90f4
TLSH
T192E026C425CCC2EFEE406A47537C634C86B4360EE2C8FA8A3710C4847049254AAC3A92
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000eb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
Size 68KB
SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
MD5 0032df338799c529f8900ed1df3fe473
SHA1 3552463fe133dad96c5fbb369d3225e51f729c51
SHA512 15265ff935bcd4e70263c233fcc97185785291a454838bde98267e26dc2143af16720dae70710ff0149a783ffa484ca7478ae76fc451fe2743c2c1069d7b04e0
SSDEEP 1536:U6UIpg9QPWEgHpuRQAPmrc930G+7F4rwzk50fpuMSKlZh:U6LO9AQy+GnSfDS+Zh
TLSH
T12863129CB8B56F8C40B28EB153ABA01DD306C65DC47B93FAC214B64F029D129A43769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ec

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ed

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ed
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ee

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
Size 38KB
SHA256 49e64d3ed6fa7cd75bd9e1d68a4a6db1667e4706f6354a97bf562dced5c78464
MD5 543599d2ca352c98f24b367fed1efe87
SHA1 a478e6c9c448b507158198b2b9936c8fab198cdc
SHA512 ad6705236eebff2e182a7dc1a1163741962ca6d87e485663843a4badece80424fec831260826f95890b1d4663026198ec5646cb5c7b9ed813374627ec2a96147
SSDEEP 768:GHRXACTGqn4j/ADPN0Qo7pPg0gbCy6E9pvZwcWx83rmnbhaRbRkhQl6:HeR4bA7CVjgbZpP3Wk6b8ruT
TLSH
T1DF03F1AF2B7D6A752F2A9394013F0AF4D48DE01E3465A158A26721F97D2C8D7748B0DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 516503d5a57bc5b4c1213cdd97cdd505e0ad99343b9475733c136c29a0a0c432
MD5 2bc8093f5fb99ee9d72a10a871d8150b
SHA1 d70796a3272cf6fb7245a81a4942a66d0e08a269
SHA512 a41b735ec5a081640be76bfcc096e56c3dbc1d7d0a2845a05d7268f85efb23031f23cae76e7465ac319c2f49fef1be2f5b77fe4fcc33ee00b1acfe95cec1198e
SSDEEP 192:U0cBVVQEunv53xUC1+UOKYAYcF41oY4HNNNLhbmuYMap5mWAGCAchohtDnr7Qajl:08Pn4lTv91r
TLSH
T123F1646EA1BF35F2DF68A97A10FE08D97E33046248A72F361EF05EF51443781AB95460
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a739b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a739b.TMP
Size 3KB
SHA256 922ec20fb8c4c8f439f592b06e20b5306a6cf9101189795376e8670e91a27f5b
MD5 c59443e55c3e8f6bea08a38c0d9aa7b3
SHA1 b6faaf1afa96ab30486ab711b8a627001e05bdb1
SHA512 4898aae30048005f44514f1195ade596705bb7a884d9c39114e9efedb60f1292ef803e3ab71bd8bf41621ed14d49aa62a39393d87cf0810c3a2bec2eafacd36f
TLSH
T19F61708F233E1AD1EF20AAB820F554CDBE334C9505E77E0030F563745407A05AF256B0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d7e973c47dd1ddcf7da8e16e6f845679590370ef3b95e34cad97854ce3eef2fe
MD5 4be70360e263a6429a3be44a7f6bc054
SHA1 5fc4046d028ec8e1e9fa3ea36a71553eafdbc21c
SHA512 da1905436d3962acefc4b09f8521e1be7d4bae0ccd1c10051f8804dd986d2d94bb56e969d856938af21c68140f76d1e89c29a5ecf1cc33c42f972e23ba306cfc
SSDEEP 192:DbKKMqPqPBxlzM82w02wB7c2Mjdt5Tf5GtjI4QgGy4x:DbKKMqPqPBxlzM82w02wB7c2Mjdt5TfL
TLSH
T174E1BEF2C3E5866DDD1155F0AA247E1BCE1D091943283C5AC9E4BF1BA3F24B0E151BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 81084e199644e8f3e437526319f7047e26136acc1962f7fd54b2a42a9c31c724
MD5 c61e687f1e470f2927077e11776ff580
SHA1 38d4bfcc8f2dfe44960bdc9fab101488d57d270c
SHA512 e305291d6d6820777396efe0b9d5a73b6b9c8ef08cbc3c9f601e96c2a089da45d64d006bb48bbcf14220676038a7e41b9c3e28353ae3676b46430d541e8a59e0
SSDEEP 192:DbKKMqPqPBx1M82w02wB7c2Mjkdt5Tf5GtjI4Qgmx:DbKKMqPqPBx1M82w02wB7c2Mjkdt5Tf9
TLSH
T1A6E1BDF283E5866DDD1155F0AA247E1BCE1D091943283C5AC9E4BF1BA3F24B0E151B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 d6cd6b9ed3c20558789bf72a5c3dd4791348bd800cd3d89f69e07bc1aa88b370
MD5 8125ad43eaf133bc808d15141ca9ff67
SHA1 d3f926eb5ed0608f0bc743e85b63972f6a2a7e10
SHA512 b7d735dabcb1ef9f97299c99cae7ece568acac642d0481205727fce218cc1bb1b6632fceb554618ef65ed0784971d3a780e697afaf5a4633fa502f1bab01834e
SSDEEP 96:D/OZzbSjL2+3Q1ZzB2w02wBSBc2Ijct5HzRB/GtjIEBivzyj4/9GwQ:DWZz+jL2+3Q1Z12w02wBSc2Ijct5TH/a
TLSH
T192C1AFF743F1865DDD10A5F0AA18AE1BCF5C0516436C38A989D4AE17A3F20B1E152BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 07f9383f824fbd6b6fdffaca856c4a9663cde6980b357c3fbda6ca20c7fc784c
MD5 90f1c23135b791f5dde566a6f4ca7313
SHA1 b934806db1d13065feb6d131433c053b0e3a701f
SHA512 61b79bc4aea9a7bcd344582f13b3f47be9870935c11a29141f3708b238d74ca65760be63c04015bc0d94959fb1ce10e4dd55e54db222730732fa934c9ff9fe88
SSDEEP 96:D/OZzbSjL2+3Q17zB2w02wBSBc2Ijct5HzRB/GtjIEBivGywBj4/Qx:DWZz+jL2+3Q1712w02wBSc2Ijct5TH/a
TLSH
T170C1CEF743F1865DDD10A5F0AA18AE1BCF5C0516436C38A989D4AF17D3F20B1E152BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 86c6b0289aee56d1c650c17c0339e23b6150a8b0ced3314772a22a1a637380a2
MD5 affcbe3d9b601ba99999517faa8f2be1
SHA1 79c0425e32725d5bbfba1d5933e1a051461f81d2
SHA512 85aacbb8900edd568fdf5560d6ce554291ca81f8c97da18fc2366f8488ac4b856798a95d0cb4a754eeb521753b48bfd2ad644dbea7d0fddf01b68603c96ef3c8
TLSH
T1B5D022631304F0B5AAAE3EC2F4EAAC8FC32710700816EDDBA5D09C9C057346C090F281
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 79605b83d3a7caec42f57575cbe8bfc929dcf8ae6e3c56494fafa3bf6eec729d
MD5 5c70a519c6f93ed7458c742a0a92fa4d
SHA1 abf40399d419ef5c2cfa76574bd4a9a1d9e17e84
SHA512 3c79a1710a58f5b718bc9555deec53aaa602e3f4de0d3636ea2e51bfbe5904bd9eb56fe0dc3523302deb706c42572e9d6e1efb29048432ed13e956b17754cb6f
SSDEEP 192:sxRmRLby/f++sVusmZBzoA8pHl/g6+WNB+9XYx7lfJsGpIgDTJ:sxRmJy/fFsVuiF/5+XqNJ
TLSH
T12A42C8166938A93B8CCAD21DBB55BF53E2F91032A1D11E54B7FC9A1C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 46d3ed89dea4b12e1ff3d8b47fec29bfa03dab79c96b9a1a953dd8f5c7f3192c
MD5 e73a22e437498349e5c7a0fac10cf13f
SHA1 3583d8de010c7520203073ae3f88273257c73b2f
SHA512 c62248db12127d965c13ad419f28ab1a4e1e9faaf5624aeee8b5fc59d3902185d4fd3070ad64dd29d57729f3c8a6b6e291b9d65ebae9ac17077905269529551e
SSDEEP 192:sxRpRLby/f++stusmZGzoA8pHQ/g6+WNBVb/YxYlfJsGpIgIJ:sxRpJy/fFstu1w/5T/jNs
TLSH
T1C042D8166938A93B8CCAD21DBB157F53E2F91033A1D51E58BBFC961C05EBADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 fb698f17b9848a6fb7cd8329e8e0f29fd44b8334ffa0365f433161810b31d9b4
MD5 0d160762848b2c528ff7ef2275935287
SHA1 4d70c7958924904901773b575790a16674d7239d
SHA512 3d5bf25a8f4f40a91170a72c72079209ba554faca70603515318857330d08867b3e5f498bef4a74076bc3634b368e2f5185afa7402723d2f546622c841e056f0
SSDEEP 192:sxRBQUn3RLHcB1y/f++sV+smZ9VTbwkVoA8pJ+Lt4/g6+WNCYqhC+9va5/YxnlJG:sxRpn31m1y/fFsV+1QJL/5Adw/SNov75
TLSH
T17782E6525424993B9CDBD559BE22BF62E7F81033D8915E5CA6FCDA0C00EE6EE2213807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 895a84ee2fee620d8d3a520fc517ce54c9f66d39a0023fe740bb752f3bb7315c
MD5 07c5b961c64891e18168fc031c819f66
SHA1 5497978a6d0896b315f32c4e35bab2c8efac4111
SHA512 6d5945bde0db922663a8640da741b98eda5936d57b0fd92dc9a289d5a7caa7863b96c51c398a38e9b795d9dc83f0cb1e03723bdbcd8967739c012c6557bd8038
SSDEEP 384:sxRpn31m1y/fFsVF66s8qMpRiYnazAW8pZS15posJWeT+T1QJx/5AdDAXvNov75:sN31m1y/f2F4Mnc7WeT+T1k/51vK5
TLSH
T16FE209465424C8379BC39D28A93D7E32EAAC106399C5DEDE66ECC90C01DE1FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 8c0fc634fd389e771bbbe9d4f9e11086b90a1b772d01c20ae79a904c4a730c6e
MD5 18780d893bbd305c9c24668dac8d849e
SHA1 210616a07140be4408c728cf29b215a4e8017c73
SHA512 1a523220794de7677eb386e60fa7f6f104161f40e7a649dd59b15d129ab15c1eb06f6a711a3ba797bcacd346f7191ea79b5751203d81b67fbca2504987a241e2
SSDEEP 384:0OxEyGzfCtgbpFfp1KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVht9V3RkYroruu:0YEyGjWgbrfp18F1+UoAYDCx9Tuqh0VN
TLSH
T1ACB2DB3B604CC77E9F800AADAC596FD77D9802C796988D444BFE990C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1bb2e5c9-57b8-4e31-9c73-5d8ed2e3fbeb\index-dir\the-real-index
Size 768B
SHA256 6613a4d8dcb429c0a1952e01287169baf07df1fda5eac454759bb527ac4c7c61
MD5 f7386b911ea1cd7af747e83709e4218d
SHA1 c7d585d72c25c73b5cdbe591c1f0f3ffe19e0d34
SHA512 cda65df8f544cf0883a5e355f092e6bc156e90e218da83ea6a5f388c1dfb201510996e66bcce121831d788261f0c40fc00dd9e326ab978bf2939129fefb50caf
TLSH
T10701E167CCD75843CC22AA77B67B344A373906EC210ADE57005D4E3D8D9753C9D41258
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1bb2e5c9-57b8-4e31-9c73-5d8ed2e3fbeb\index-dir\the-real-index
Size 3KB
SHA256 17c7ba58e0ecf7d88903278b5b2a6d6861e3f1a173dc9f9cfc4674d860167e6d
MD5 ff2d4be4078b4fe20f8208d4674d790f
SHA1 74bd649e8c458b4d9f90c8e91e249fe064a96004
SHA512 c7ed38cf70e9b741a89323be77d1c6d3a2d19bae827eed6e3e40c7a94ffe23da58c900778141ac6a53ea4d61d1910eba844f9aadf08c111b50a7ab4e933b0c37
TLSH
T1EA51C7CDCC821B66EDAC15B318FB1480777624DD96845B17AECCA838BDC336E2C5A650
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a474.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1bb2e5c9-57b8-4e31-9c73-5d8ed2e3fbeb\index-dir\the-real-index~RFe59a474.TMP
Size 768B
SHA256 820331f96cf2ca374e04946e76e88d51a514976dd46af43481321371d02db302
MD5 91c54ad675b7bfee4491a4a971608619
SHA1 afad82da3002bac890585182fd38cc045b66db3a
SHA512 3717dafcf90ba7ce1ae5dbd8fbd26f9bb49b9611537fc066366f25f057ca787a102953a57866510b98fe3f4eae2ffa638f098002bcdfa8b0e9614241ea78e8ac
TLSH
T1B50175E780C2FCC3CD21A1B8B587206A333F4410210ED74F20DF7E69499363C4541565
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7f25de63-2aa5-47c3-9175-acfd1b9ed14a\index-dir\the-real-index
Size 72B
SHA256 d342eceee7c26c67c069c88e278180823296077fb383b9df79561c21bf184c97
MD5 a8d088fabd235ea1dd566a90ad220847
SHA1 401c4360a90377e991620725229636560b98f98e
SHA512 a070dc487234c3beae7674ff460b168c0089c98fa2028684fb01b026903cda0f590d61f607edcd2e5d0273fade97fd94efc6d85ccbb55c6dab8a49c63fd86720
TLSH
T192A0025503C81047CA13D1B516D743A216459950B101121A40914246CC504A0A96341C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7f25de63-2aa5-47c3-9175-acfd1b9ed14a\index-dir\the-real-index
Size 72B
SHA256 648275ceaf7c29698ad80a7a7e33985a838e2ecaff3fe6c6c127298de38c440b
MD5 3a0656876f2545acac9f0ace9f6ed763
SHA1 0e164477e896bda2ca160fa5c232dad3a4b166cc
SHA512 34d487de8cb9fb4d8cff9b9f3fd4302ee39058b665611d85137630bec433c66c173dd1315dbe55c6a50e12e47803cae82b3183a52c166044de4cfe4db6fcdfbf
TLSH
T18DA0023502B23041C082D7B43BE6818272144D101703130DD9D116C8C860945A68921C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9fc22c39c36256ea7073fc3968df86583fa79ddc4ca3b4bfbccd23de08478935
MD5 4591068ba3afa6514a972301b2833710
SHA1 7c8d0f7a6948c665c17c5a07ff2575ee15c5a63a
SHA512 a3f075ed70b9071c4a57de463cb29a83a89263d644a0754e9be749488704181f055a704d1f7465816f64a9010169b8c498c33d51e5283abde8f1781826ea8d2c
TLSH
T16EE020BB3EF61634F97FD3E2183189F1464279589940FD4F646592C75071350645AC22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 82ee4c6ed95872fdc1e144dabecaaa5aaba5c826124cc67b8e530c8f91efb414
MD5 dd3a810e16038ee3cbe1a3c8d877ae7e
SHA1 165afc48b0472aa3ad74561a3e4d0a0adf8379da
SHA512 2016287a801d614cab01e799cad58102d9870b9eed34d7e7c9efdd1a9dc06ae5fafb3b883345cbfbf24f098a4928109e8aed4b610e2e65d2aff4ccdc6131278c
TLSH
T17DA00219CF6FE086E00042F090A5168D2A1188DC460522A14DED00988D5229042F2564
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59fb8d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59fb8d.TMP
Size 48B
SHA256 371af806f4322328eb0694913ef63ff50f854ca9ca13a71ed498d0068aa12e65
MD5 00aab3b8a09085d9611ce06662b1a10f
SHA1 b452008334f46450bbe9bea6b9588cd036d0b3e5
SHA512 4e4a8d8bb7e1a8f8406b4207a359e13680a18c2630606faad23a0cd738afc36ade2e593dc2c5033f9cdaf165e75d8547a0d78e0c42485f2a349a172df47a96f5
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4280df82fb102302e2397519417bacffbaac741d209c77776823987a8fe9f1e2
MD5 515e5ec53e8f7ac722dc4e06d015237b
SHA1 8d20df53d5a111daa4495e25b8ca75e188b44142
SHA512 e5f366209ee932b6e2281fa15130fdf62be25b7b3d74ffe98186b025dd9ef022f427e8fb8b7630b7db9767cd0a777979edc6b4afba57886ce78c1f9ff6a1b9e8
SSDEEP 96:KsLSXrJBB+rRAl5L+KhL5F+tDLo1bfa+8KnqA+4KfKiI:vLSXrJBBERA7LLL5FwDLo1bfnsnI
TLSH
T142913046757E46006DBE2A1CC5D5D6268A8274B3306BA42B37E894B60FEFF015DFC8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

fe1c21a5-7e30-4422-a64d-42f7d620b6a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fe1c21a5-7e30-4422-a64d-42f7d620b6a0.tmp
Size 14KB
SHA256 63b788adaf9545358b9e37a6eb1dee42f51d9ae31945b202565ee660bab6dd50
MD5 e59afd23c6b114c6a3f31e9e10705d7e
SHA1 87e8650137d85ba445fe2f9a7d00024bf664d280
SHA512 c1ae4e82e3a6afda6d3f3ecb1af78a48ae1144bfb5a1c82c1bad6d4e36119412a50a52bee1419fde969c5050fd5a954a012e4327dab38305d22a7b8e36b29dd6
SSDEEP 192:sxRBQUngRLGOy/f++sV+smZltbwmoA8pJn4/g6+WNPqhC+9XYxrlJJsGpIgDVJ:sxRpngYOy/fFsV+ytC/5kdXKNj
TLSH
T1FF62D8166928593B9DDBD259FA027BA3E6FC1033E4D55E54F6FC9A0C04EB6DE2203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a231a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a231a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 f7e11633279906560053a52f8d487d24f9a93e21481c8ea466965d8483292f44
MD5 518e9c6c28bfc5ca92679b8a03cef9f6
SHA1 81e31dbcc1a849dbf6f7536b1030344953b62c4e
SHA512 362a121d935c4d07e81f486b76973d9d30090cf3d82657114827e7f9cc2e686880544156e507eef0f7a5d4b2cc97b6a25c1f2f6f4e59532bf2c5e39e6858425d
SSDEEP 768:krv+4UNbds31To6kKL2BBjF669yrqUjWiIwwxMtChy6DqQd:kbsbu3YpBjF66INWZTMUTJd
TLSH
T12E13CF30A8A856B7CAF7D785B1133687BF74015396C50FE8D5CD6B0E468F4E9234B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 64923a7bd5947a52f427d1449d126feb92f6a8b5b217e57050b307e22ca91dc7
MD5 07f5919d94a212d378b7447bd6947816
SHA1 ba1b3d099bf253ad6c8a76c9755ac5d8d2a5858b
SHA512 2f6b8bc40881b8fe03e12ff32686c7d65617d943c582ffd18b1ea6bb75beedf5b78e22a415747d0bd58446d6e0a31dc78529ac37f4caa91cf0a978cb2e52533b
SSDEEP 768:Ar31Ti6kKL2BYjF669yrqUjWiIwwxMtChy6DqQL:Ar3OpYjF66INWZTMUTJL
TLSH
T199F2BF70ACA456B7C9FBD781B25233C3EEB4416392D84FD895DDA70E068B4E9234B429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 12d443aa620801dbeeb1185fcc7c3ed79a3bc5db5505802f968949c32509ba4b
MD5 b97c793675cedf839ffec3b060ad1d18
SHA1 49085985c790a6f9a6a64651feeafc84ebe85401
SHA512 fa483bde9f9927f6c577f8b57fd9f9ebf43825772915cad7d88706579350fa30aba06c12c0aa01a4dd73df5ea2ed47c4519916e7b052da549d15403d0ddeb78a
SSDEEP 768:mFQL3GwgOTqSnkKL2BTnF669yrqUjWiIwwxMtChy6DqQL:tL3YpTnF66INWZTMUTJL
TLSH
T122136AF058D35577C9AE9B83A33D2E829EBCC063B5944A94B3C8660DCD4A0BFD347825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 83782f9f82efb0f778753113c93aabd879400d2bece43e9b53cedd6388bd4c2f
MD5 fa06bb404e690c9e2d866419260a6e10
SHA1 3cdf518a289adad80b698877b22360707dab1a42
SHA512 2675a437fbc056d7c05e6f67d81ed1d7b3752428254658f134722a29b242cfae5ccff15cddfe817b068d638367a15d0b2eaf5bd7cffa6e4cdef1036b40e86d43
SSDEEP 768:Ur3NT4SnkKL2BYjF669yrqUjWiIwwxMtChy6DqQL:Ur3cpYjF66INWZTMUTJL
TLSH
T1D0F2B070ACB46677C9FBD781B25233C3EEB4415392D84FD895DDA70E068B4E9234B429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ea400873b5514260ec39291171814074ee2e18a0e41433ec73951997a033698f
MD5 eadd98dfca3a1bcc14643d84e27f5829
SHA1 b2cf576553f2b6d37770733a2a6936182f08ee2c
SHA512 4ee36594867cfe6020ac4905690b793ec249df4cc5129810b634de23df1505e135914eccb97a98fe651b4c0b927e374fc354b75b7df5f1a3bd76bb164acb57ff
SSDEEP 768:arv+4UNbdl3JPkKL2BVjF669yrqUjWiIwwxMRehUiler:absbX3GpVjF66INWZTMohUsQ
TLSH
T1D503CF35AC685AB7CDF2D68672433783BFB4109392C50B98CACD670D469B0DD2747A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 e3a1197e9ed863abbc6f37785d27aca1bb228ae3a75493812f0c03087ad5c964
MD5 d8a44f74285246e61186ff9eb1cc20fa
SHA1 e8bc3b08f49323442be04d2e84a30abe2dbecac9
SHA512 758464bebfb485afcbf9fc1b1330ff1e245a667986df7e4cd101f58c791d76c975b1adf8b3dcbc058e9193f802d350cb32f47bb33c3b4882743dd04a54032972
SSDEEP 768:jrv+4UNbdl3G0kKL2BJjF669yrqUjWiIwwxMACUiler:jbsbX3ypJjF66INWZTM/UsQ
TLSH
T15303CF34A86899B7CDF2D786B25332C3BF74519392C50F98CACD260D469F4D9234B92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 de5eff4856d9f6ce15a03e8c62592b6cec0eed83789c86b1584cbb69e1a0d346
MD5 f69ade1edd90a1b6e88144cdac9eabc6
SHA1 d99b5f603cf877913b65f36e1b4ad71ed8e9092e
SHA512 5b9d3895812ed946c6fd7d8436f6404a78d68da2b43e7bcff063c20c2f69c2af4870465651e13383218005268806d12ecd475cdcb7f951d06439a36dfe02163d
TLSH
T138E00202930400EDC46803304047572027E7C1304176434B4D26095C2D53B141E15780
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7d72c9993d34d2d79cd5869271b8d6f799a60eecf27b949bae7a927b3ed7fe4e
MD5 eab32244d17f9d066074225077606d88
SHA1 8d739c225148d8b22f0889614f1f5aee92bcd5ef
SHA512 c4f50d9c402149daef2a8de4806c03ee355031eac5d7bb3411ce80dc7928de8968fe9b805e000bfebdfe1f7966b27233017272178ae55f6f3d17690b1e5bb417
TLSH
T1A1E00411530400F4C454033000075F1017D1C130407543474735054C1C53F441D30740
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 01f3176eec18e9e0057dd14baffae8fe95f05afe89ec9e1ec9cd3c435a0dcda2
MD5 a1760a1dd63dc9e4407d1a13ddc40637
SHA1 45e892317441f64c751755aedbb2f71e4fec7402
SHA512 ecc09dff368d47a1bbaac922742e0fa19a31c725b3e4e8b9df7af55d1bccba5a3f00caf63fb461907ed40eec71dc8829780b5af2397632f533fbaf0e9424bf61
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe59b452.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59b452.TMP
Size 392B
SHA256 e1372c75723f23f014ca9035e1603579ba379e8dba3211e6a09b8e678f337d6b
MD5 9787f886faa23bbcf9439ec177f63da3
SHA1 34514b077ffde484657bde5fbf2695e5f0f262d9
SHA512 c831725db41e9c9904c0d0bb5746ceb6353d6a11ee1d215aab32df4e6465acb70e1fcff824fa1918f1931b59af112bc5e41c1bd560638cd83ba4df858662304c
MD5 SHA1 SHA512

Submit Download

2d691519-529e-41ee-bb56-cb9a930f10db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2d691519-529e-41ee-bb56-cb9a930f10db.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download