hxxps://linkvertise[.]com/3598735/iCdqa2Q5WAJv?o=sharing

Resubmissions

11/08/2026, 23:28

260811-3f66eshc666

11/08/2026, 13:10

260811-qehefstdpb6

Analysis

user interaction
yes
max time kernel
900s
max time network
882s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
11/08/2026, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://linkvertise.com/3598735/iCdqa2Q5WAJv?o=sharing
Sample260811-qehefstdpb

Score

6^/10

google discovery phishing

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
275	drive.google.com
276	drive.google.com
277	drive.google.com
278	drive.google.com

Detected potential entity reuse from brand GOOGLE. 1 IoCs

phishing google

flow	pid	Process
563	3264	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3264	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309274447680681"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 9 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-42486406-2033776002-1658862356-1000\{D2C1BDC8-230A-4075-9D78-F5B228743BE5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-42486406-2033776002-1658862356-1000\{4988C137-8BFF-405E-8526-07FA4745F9E8}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-42486406-2033776002-1658862356-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5228	msedge.exe
5228	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
668	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3480 wrote to memory of 2044	3480	msedge.exe	83
PID 3480 wrote to memory of 3264	3480	msedge.exe	84
PID 3480 wrote to memory of 4596	3480	msedge.exe	85
PID 3480 wrote to memory of 4596	3480	msedge.exe	85
PID 3480 wrote to memory of 4596	3480	msedge.exe	85
PID 3480 wrote to memory of 1148	3480	msedge.exe	86
PID 3480 wrote to memory of 1148	3480	msedge.exe	86
PID 3480 wrote to memory of 1448	3480	msedge.exe	88
PID 3480 wrote to memory of 1448	3480	msedge.exe	88
PID 3480 wrote to memory of 3680	3480	msedge.exe	89
PID 3480 wrote to memory of 1448	3480	msedge.exe	88
PID 3480 wrote to memory of 3680	3480	msedge.exe	89
PID 3480 wrote to memory of 3680	3480	msedge.exe	89
PID 3480 wrote to memory of 4660	3480	msedge.exe	90
PID 3480 wrote to memory of 4276	3480	msedge.exe	91
PID 3480 wrote to memory of 4660	3480	msedge.exe	90
PID 3480 wrote to memory of 4660	3480	msedge.exe	90
PID 3480 wrote to memory of 4276	3480	msedge.exe	91
PID 3480 wrote to memory of 4276	3480	msedge.exe	91
PID 3480 wrote to memory of 4592	3480	msedge.exe	96
PID 3480 wrote to memory of 4592	3480	msedge.exe	96
PID 3480 wrote to memory of 4592	3480	msedge.exe	96
PID 3480 wrote to memory of 4476	3480	msedge.exe	97
PID 3480 wrote to memory of 4780	3480	msedge.exe	98
PID 3480 wrote to memory of 4476	3480	msedge.exe	97
PID 3480 wrote to memory of 4780	3480	msedge.exe	98
PID 3480 wrote to memory of 1528	3480	msedge.exe	99
PID 3480 wrote to memory of 1528	3480	msedge.exe	99
PID 3480 wrote to memory of 1528	3480	msedge.exe	99
PID 3480 wrote to memory of 4888	3480	msedge.exe	100
PID 3480 wrote to memory of 3892	3480	msedge.exe	101
PID 3480 wrote to memory of 4888	3480	msedge.exe	100
PID 3480 wrote to memory of 4224	3480	msedge.exe	105
PID 3480 wrote to memory of 4040	3480	msedge.exe	109
PID 3480 wrote to memory of 4040	3480	msedge.exe	109
PID 3480 wrote to memory of 4040	3480	msedge.exe	109
PID 3480 wrote to memory of 5364	3480	msedge.exe	113
PID 3480 wrote to memory of 5364	3480	msedge.exe	113
PID 3480 wrote to memory of 5364	3480	msedge.exe	113
PID 3480 wrote to memory of 5424	3480	msedge.exe	114
PID 3480 wrote to memory of 5432	3480	msedge.exe	115
PID 3480 wrote to memory of 5440	3480	msedge.exe	116
PID 3480 wrote to memory of 5876	3480	msedge.exe	117
PID 3480 wrote to memory of 5876	3480	msedge.exe	117
PID 3480 wrote to memory of 5876	3480	msedge.exe	117
PID 3480 wrote to memory of 5888	3480	msedge.exe	118
PID 3480 wrote to memory of 5888	3480	msedge.exe	118
PID 3480 wrote to memory of 5888	3480	msedge.exe	118
PID 3480 wrote to memory of 6072	3480	msedge.exe	119
PID 3480 wrote to memory of 6072	3480	msedge.exe	119
PID 3480 wrote to memory of 6136	3480	msedge.exe	120
PID 3480 wrote to memory of 6136	3480	msedge.exe	120
PID 3480 wrote to memory of 6136	3480	msedge.exe	120
PID 3480 wrote to memory of 1064	3480	msedge.exe	121
PID 3480 wrote to memory of 1064	3480	msedge.exe	121
PID 3480 wrote to memory of 1064	3480	msedge.exe	121
PID 3480 wrote to memory of 5216	3480	msedge.exe	122
PID 3480 wrote to memory of 5216	3480	msedge.exe	122
PID 3480 wrote to memory of 5216	3480	msedge.exe	122
PID 3480 wrote to memory of 4876	3480	msedge.exe	123
PID 3480 wrote to memory of 4876	3480	msedge.exe	123
PID 3480 wrote to memory of 4284	3480	msedge.exe	124
PID 3480 wrote to memory of 4284	3480	msedge.exe	124
PID 3480 wrote to memory of 4284	3480	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://linkvertise.com/3598735/iCdqa2Q5WAJv?o=sharing
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ffb8bbfc188,0x7ffb8bbfc194,0x7ffb8bbfc1a0
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,7095348173487760965,13180065143754580302,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand GOOGLE.
  - System Time Discovery
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,12274997016908630037,16198319797285313351,262144 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,17381430084892935865,17552092332817739915,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,14719598934216866540,6347028171054165540,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,6517061489973862408,4636220649153199953,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,4656581580761019434,5415155909371399035,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4372,i,3640895994569935361,16796331234283946137,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:2
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5216,i,2591823456650873087,5199867757592643650,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,830269950790670536,14080016786497896975,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6216627640450941306,1761274868206696701,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5704,i,4914007865943970348,4445905032339765324,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,6509517111068728963,8907734756964102570,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,14436913853064015342,13592704233507737100,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,9762637491084128081,7243215048813036641,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,9762637491084128081,7243215048813036641,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6996,i,10891770224583426960,8964060959115527008,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5228,i,7486854039844706159,12177902880513669950,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,2520093433613468839,14571123780493777316,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,12090177422709097521,16708258274241244373,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:8
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,10141824715322504911,12936571860702717529,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7104,i,6601599687730476259,3470395142586903828,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=2140,i,3072136700778774930,6396085078410180199,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7240,i,11562153261822451633,9239577790119802252,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7388,i,11228583895048584803,8126766988343499715,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7068,i,12472073867128452978,124083039956000520,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7212,i,15392206107787603473,4964122379202681254,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7148,i,14093841247489749949,5980866959284515821,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7728 /prefetch:8
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7872,i,13343873936889436037,1020145230522872629,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8008,i,15982336407784071621,4892419288221105081,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8024 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3560,i,2337319885261861537,4315369949308887637,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8348,i,412226745976372621,4804312510663711324,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7388,i,2025026225214731556,13403822446557603254,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7688,i,8107175607942339660,3283205918231599979,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8752,i,14583070017576412309,9603862290240909568,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8732 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8664,i,15896355782384184101,8151691183977882637,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8984 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8812,i,18091627081202064556,10557738444925964141,2097152 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8784 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6916,i,4820666032003727807,8680397927369201973,262144 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=9100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8552,i,532723694802589638,3977712297498493283,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8880 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,9438710429259288168,7267409667002790844,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8952,i,5403375188300085202,2190949056550913599,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=9364 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3036,i,8026425520144963321,13281773998992695844,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8336,i,620489923571315618,2090136318743685456,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,5192119562723172187,18268226668448871531,524288 --field-trial-handle=2268,i,13895034385911549756,8545570356179870971,262144 --variations-seed-version --mojo-platform-channel-handle=8156 /prefetch:8
  2⤵
  PID:220

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bc2a0f53b019acfa3a5cc1bc50af2c2cb6df74dd2a925c9c72dd0a442beaa04b
MD5 5c8b0bdd174029ae6cd3f23c959c144b
SHA1 c21b1f457b40bae3ffa3dc0ea01315d394f339ca
SHA512 21a7704edfb871aab933ae757f1b239ef7f5e91b6a716f67e6c7e0bb505212ca0662dd3aa65d497449a01ee8dab66038011cd7cdf865c6538b42f79809d91c6b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7/:fwUQC5VwBIiElEd2K57P7/
TLSH
T1A6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6a64f2ae6a6617d628aecf24522b5fc03d56fd3b87da29c09e359aa8c784278c
MD5 319f3e9547ae8f5bd93b63a209353feb
SHA1 2cbbe39cbb469d1b008a38a5f66950de62d7be5d
SHA512 2335ad7dd232ded853c12042411a51f4c045d5ae5954aac7df9f840b69e4aee72129d3b0d5a528b94f8c84e50d9f92ecc1fcda50496c846e7b2b716f7e287127
TLSH
T115D080F777586105E75DD131EC13CB111B65195215D7DB02E314C99CA4644F566871C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5c85913b3d3cab7ba2879d18441341b2b4fd7ad9ce12d0c3ebfe421e6267c647
MD5 962c87a3f67f82f2083d6294250d9e58
SHA1 cfe9fd1f6729400cde038cbdead8751b96eacaca
SHA512 059eed3376b6b470a0be74a5db7d47fa3bae4b0557c4216789040d711e15417470e3ff6f96808c2e42bf6080c9af25da282ed4dabe378bd81b0971591713ef3b
TLSH
T11FD080F737586105EB5DD131EC13CB111B65195215D7DB03E314C99C94654F566871C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c0503290c0559258849045b6751d6af539755d527b58f81f044dc2e9afae1443
MD5 d16dd0fe9b865ce678803fb8f5d2a4b9
SHA1 6310dd82151b9ca4d64fc52ae795b94d9db31090
SHA512 ab2308f3e0f15d898915a3c8953cc1cbf0c2bf91c5802c2792057e12360100a1a424a682d08a7d6db064eb173d4b912ca0d783bb1e38f32d87304f1757bf69cb
TLSH
T175E0DF9404CAC2AEEB80A9C7A1A8730D82803A4F92C8FB4A6714C58A3883580A7C2599
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 7c8fd489b3e95de0c2454b20d82e99f572efbef4d70fedb153c5603d74bd9add
MD5 2a682c83a70737e4d86bdc47399e9a44
SHA1 9bd13da225eaaa7505686d2b67c10dcffba0e241
SHA512 c4dfbe7d9f984f0caf9decf5e641befc93eea426c4b276d8eb40b7fc203d83bb727c81f9090462a0a952b8ec97ea9cc1d101999df6b8424951c667bd227ea7be
SSDEEP 192:BjM91WWZZZUqt9YY+1GGLlShXOOzzccc9P9P9PMEh:BjM91WWZZZUqt9YY+1GGLlShXOOzzccK
TLSH
T130E15A8782D5C79BCF5951CB49B062AD04B1370DEBDCEA0C179CCDDD304E49EA6A26E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 75e22a8e50db8da69b54d3a9b3f886d7b2dd3519fa689cca31ca8a902a4cd87d
MD5 a8bc68472c0a70d992917643affa99c3
SHA1 6144f309180f55d2615cd6c7d6f5f100b21ed831
SHA512 3d38a94117539f56ca8e28e78947fe53e546dcf874391bd34bc9bc41384789e3093feb08e6287a34ea426b96be1224bf9b8ee55460f595b3bfe468fa782ae360
TLSH
T115E026844ACFC22EEBD1EA8B5168530CA380364F93C8FA0E6718C9C934830C0A3A3598
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 16KB
SHA256 f1d76f41d21fe34b0a82fc0ea39933f9aadb371488c635eae19e2d2f14f61700
MD5 8ce394b6a5f47f58f30720e5ee8e113f
SHA1 75fee251b6ced1c4dd496f0c69c7376e3d35dea1
SHA512 14ed895d7182164b1ebae85b38cffd9e2ee3430c9b847c964c0b391c16fe1fd6b48535a03aed910da26648fa5eeee83ebe5ebac4e3c3423871ab7f2f454a6717
SSDEEP 384:qAjxTnCVfJnXFXGj3/ZXaVGj8e+VEDaDMKMwNWyt9lGxdxysK4B:DjxbCVfVgj3/ZX3JOEuWyTaxysK4B
TLSH
T11172E1BCBA81728EBEA3070C791784239B9DD5CAD1BDB46C5E5212E3D11375A2014ACC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
Size 60KB
SHA256 4aa1e360419a353d4a90554b5a97e7c8f1574121ddb51574354430d22d87ec6a
MD5 943306a3b415fb47090db22703f6cb30
SHA1 9833a316652f297054791d4585b51589d749612d
SHA512 1cd867b27edf01247e39efa9359404253acdb6672c8fee442e705612a3fb5f6a82aa32cdc095cbcf565986ded14ca09247c110a8083bc1c4e206571751a21089
SSDEEP 1536:vLiTxMg5No42qBUdqmASK8ROIF6JamZ1C84moczzYH:Dvg8qGd/ASTe1QH
TLSH
T19953F133BC27D069733218283F147A653228AC78E459AF17BADD268BC7157A125886DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 72KB
SHA256 84b462e89cd4dc9c4712a72f8f0cd279b7ab0f7e49ea7dcb0c7cbdef3b1def7e
MD5 1d6a99f11095371df8fc5e45b1b5fd71
SHA1 af4683177ef65ca07232db930bc31466f8056a9b
SHA512 0bbec3fcd26e41320d5ef4f5e40923b8f1a7844fd3230e8fc6b1e1cc1f51be4a5ae170ed53521d068c5a76cda6b951f377d64dfc15b14248569a3f8854f08bc2
SSDEEP 1536:GtOFPiv85IX7IFXuNqomje7qXsHzCpZpkNoitK+1AfjsEk9SJt3VZ/HGs1UWzY+:GoKm0IVuN0jMDHzgZpv8z10sXqVhHGaB
TLSH
T1A373013C81999CB9268033FDF1BE68C18A7853C716F6662F918AD4D67816DF7039072B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 17KB
SHA256 45f853bfde5497fee0ec39e378b8940d9bedee1c9ec26cd0609d31786f00cc33
MD5 fb22a9c1cb9acb212cd5879b029d1006
SHA1 a7fd325e50874c33ae4992100d1e54c71d3111f7
SHA512 02fe622a593b7bb3f7c2c8dbbf7fb6262a70c9761b74b759c5f37bca13239d7d6aaae5877c1b25c52914dff3fdd33377d2c44866100db28e992545f3aaa21eaa
SSDEEP 384:h1v82unP6XE7WxwJ3ejNo+EsRAvzG2+LUosD1O5G7:hCxnPHJ3yoB2AiRUo1G7
TLSH
T1AA82D11D17E188E06E3CF8016CA5A8246CD17BBB7FD2167D1A09796D2CF98B01AF9714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 df1e415cecfb3868a773d7c8f5e17a30d0a05ce27c915c8d26a0628ee58c5c9f
MD5 0fd106dbde546d18e48466a9a186c72e
SHA1 d9ed057045d5a2c858e5ef2b9f4731910d0a7202
SHA512 f07979464fb032aa0853d15d36dd8f605fb9563e07c57f858d99614eb6f62afe464d770d034d010e466e4104bd9b2ab0eecd0a72d30afe869d2c6d35583c357d
SSDEEP 96:PS1SHrhGvg7XAKndhkCFYjdCU2EVGbryV3uO6P:PaSdGgBnrzmxcyFuOQ
TLSH
T1F9B1621C025AC8F1EF20CA3E68E5D75C313556B7835B2E52A29DEC75F012BE2875079D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 88360531cc8269a4382869ac86a8ca8c3f319cd3195e6181a6ed981ef9e60021
MD5 35655ef16817f6d50b05d57560dd7cab
SHA1 4dbca72ff76ff59ce789e8b28a83a8ab94fd649b
SHA512 71b422969b70a4936daa4ad391e86f8b376d86c7f0e14b82bbef9705cf241719490b982e03439ce4daf4da16c729d0e4d194659494ec4134c3ff6a2d02a23aae
SSDEEP 192:oZTqu6Zlp2PFHcTmGQPueG/DkKtUICCzk:oZTqu6sFHcSGuW2
TLSH
T1B6220C5E029AE9F0EFADD93968E08ABC7131557782872F135398DC34F817BF6821529C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 33455d1354c4df90f7d5b62e5eb1994b57a421992c5530a70317166ebc5f06fa
MD5 cd3d1e7abf82cd2ae5acc5068bf9d58a
SHA1 a9521fe4f20906fb4216851e91fe3d2b1f9bd010
SHA512 2a6773e428c7d74372feca5265cece61e0c8e31e4ec095a2a42551909800e62942732453c06b6697d5200f1bae531120c641c0f7a8515b52080c50b2f50575c0
SSDEEP 48:SgRSogFwHT9WCdY1s7Ez5vBNCw7nWUsJ/vEQPhusw71drIGsC/WRixyVAIQLmzbD:DSHSvdY7HLkCQPcaGbPyN3h6K
TLSH
T19F913F1C064EC8F1EF21CE3E68E1D36C367586B6C72B2E5252DCD875B112BA2475478C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58e857.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e857.TMP
Size 3KB
SHA256 0b6771a90f7dd41ca14d2ed88425321e79e9aadc05d4c42a35ee036e12b92fd5
MD5 e5e1149e2b8668b44cd1424d59ce2f4f
SHA1 36dc970d6bc573b261a99a5344cb7fb31ace246b
SHA512 fc9f4e28f67bc6df7b3bb589fb0c961445de7280befc5768ee6ccf19b2c6477028aaef86c159db3de15779b73e27b5b8db87eba5bf99d58a8e10ebf920eb92d7
TLSH
T15271082C060E48F1EF21CF3E74E1D35C767286B6C70B2E1621DCD8A93115BA247A179D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 efa12aae4a1afd98d5466ee71e5e9d5d78348979c2ec0067ac8277b36d5410f3
MD5 de8e372f724827236e4f5e3ac4e68a2b
SHA1 eae9f2e2385453be83cb775b085a7f6ed4ebde52
SHA512 c0546499bc888f95fb1ff14d2f2d034d10cab9cbd40a83c4763d9e27688f7ea5636e68f3193b5441543188ec1097be8535f61bf42fbceae5c862fd49225c9702
SSDEEP 384:DWEn0iEJCPAr6sSJW1LKJcFrJnWCtVUOv3ZTWjkKb1593+yn1iN1Xlm0DB5ECVVO:NajNryqJij
TLSH
T17092BCFB47B0867DE91092F0EA18EF1FCE6D0424436C782AC9D5AE4793E2072D151B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 3bc7e078bd47ece7f54a8e8dd11483d7f87908d62563840737435d3269888e83
MD5 a7c8ca28be6f948cc85321b0cd56198b
SHA1 955515341c2f7d4e9b072cc3cc18f6da8855459d
SHA512 301e861a24711c6e19935e8580a86d97cd529af95cd88b23bef4513e665f79f5ed632f8e4156bd3a59f2a508d0000f017576cbe032522496baf2fd1af5e69b79
SSDEEP 192:Dt7K7O7M7b787+7j7U7U7g767+7U7x17z7a7676737Q7E7J787m7pV+G7W7m7u7G:DteKY/A63QIcuKYt1X2mmDE4NoCVV+Gd
TLSH
T1D532BEBF8AF4867D981116F1E668BF1ECE2E0559526C3C0BC9D6DF8793E2071D20058E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 a81c151acb79e9f8078f99399b2c8bd37d6067116766b110e85b21559cee5bc3
MD5 7c98984f836d315ae37333d7f0bedb6a
SHA1 e7d2aa437e0fd908691ee13afa7222188e7c4211
SHA512 d56985a6b950d567da5bc32a264dbea5bb07340f8d6fa42b2b09deaba7ba57b480b9aa25be4731e4f8ca4ad8af0125009de3e47d72729fc9fbddbf4eca0f0276
SSDEEP 384:DWEn0iEJCPAr6sSJW1LKJUdrJvqNakhhYxLhYa0n9TdtPb2VZ8M1Xlm0DB5ECVVP:NqxNrsilVX
TLSH
T17CB2ACFB87E4867DD81156F0EA28BF1FCE2D0514436C3C2AC9D5AE8B93E2071D25169E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 26KB
SHA256 a452e37bdf444007b1e6a8e0870230b471fe0ab9e79d59f4652423dc6a5df8d3
MD5 a9934586c18c3c1c990f311e8b8fa4ae
SHA1 1882f90018338865fc6bb0b3575cc9434ac69724
SHA512 b1e3db9eb2890596756f90ae5890535500294b8f8503dae4573545f415698888485904d4eb0ebc3be5b8508181d7899a1a0c1c77d5f8c0aaa731075cd4872e66
SSDEEP 384:DteKY/A63QIcuKYxjKNRJUdFJvqNakhhYxLhYa0n9TdtPb2V11X2mmDBNoCVVRqS:xYmSoWjlK
TLSH
T161C2ADBBC7E4867DD81156F0AA287F1ECE2D0958426C3C1AC9D5EF8B93E2471D21168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 e9f842c9bc7a4f2da353061f918ec8892b7ac5cce716b3aff77f336257cbfe57
MD5 94519f5834848556ad3b7379d410bd89
SHA1 e9726bb739261776030dc7b48970fcbae7ef281c
SHA512 48aa004c0c884a7843b27ab5e24b7615c1f0034c4a9902879a88d888cff2751f47fb8c4dcb3b1a6cf14ce0d3878ad3f4eb5e3c5ebfc3b42788f1d7ee2dc88e0b
TLSH
T177D022E3220030F5A97E7EC940AEECCFCB3B00240802DDD611D0DCAC2939C6C5A1F180
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a104d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a104d.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 8710ce56ec9df6064a84d2f5a14ac3a5f51da1396079d4edbef0f8f7872b3b9b
MD5 e1916d90a9b1de968d54f31268b673cb
SHA1 e18060759bfd05b7205581af8232cad0f2d481cc
SHA512 f6770aabee9390c642f86aa2cd2a3a3326462ee4c76733a888a8f9d00b27096ed13cfb793a317e50d39145bc9ac0d5324981fa6fce4cec24123fcdb55fdbac71
SSDEEP 384:sxZqnUxqEm1C/f/sgR+wvIYHb+aZBgRx9/Cb+/X4:sMUYEm1C/fXswvHb+aMxBCgX4
TLSH
T1E4821952A5244D778CDBD609BC21BF6BD7F54463D9840E48AAFCDA0C04EA6ED3217C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 31bc94a6f0ebe78fe1ff082580a28213ee1da40492d4a76468b2b5395466cc5a
MD5 971e1d7db23e58fa2c46efda0416d583
SHA1 d9427ddead1f938d203c68c591e39bf9a9aaf21e
SHA512 b2a04bc96c7053e548347684493f2547dca705ff64ca0a327c4beec156b1ea31c2d7a7933b31b86614b995a590e6c000a3a0b34f7548eb8501063457f38910d0
SSDEEP 384:sxZqnUism1C/f/sgR+wvIYHb+aZBgRx9/Cb+/X4:sMUTm1C/fXswvHb+aMxBCgX4
TLSH
T11B820952A5245D778CDBD609BD21BF2BD7F54463D9940E48AAFCCA0C04EA6ED3207C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 da40653fe605bc151a6f9366e51e1a590bc797d61c46e7baed3dc20a6cae1b96
MD5 2ad58ebe1d1091dad3a65826cb8e6dda
SHA1 60f651375bf5afba6c5c60d521afd6a438c6aa1f
SHA512 3bc276f456c2b666c3e20b6d57091f3a9d10e8612c719191acb8f326093f2640bfd303430414d6a46eb7ba8b6bf002d434a75564433b8e570bf73d28c1b57186
SSDEEP 192:sxZVR8yM/jK1Ml8MkC/f/sgR+BIdppfzHW6+WNpzwdYwwn1y4Ig5rJ:sxZViMC/f/sgR+qJHbudKT
TLSH
T15752F912AA385977CCDBE209F945BF63D6F5447291501E44AAFCDA1C00E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 54bf6bec6967ad5d73cdb86de4a271975be9558df2e42872eeafbc120d6242d2
MD5 b8ab02edbd572e8318f6c4db0e14b8da
SHA1 89c2a55f79108c4ed3925c2e8a5256fe92958aab
SHA512 af7a563fe29d6f1545f01912269e26952293fcf68f59c73a0b78d7e48d04c77af4baf63dd6bca36061380b49819d9ee65aa284ea6bba4dbd50d9f854b190a2a5
SSDEEP 768:SH4TaXWWvya/y8F1+UoAYDCx9Tuqh0VfUC9xbog/OVvhLlJX65Fro6hyiMCxb:SH4TaXWWvya/yu1jaihLHq5++xb
TLSH
T1D8E21A3B684CC77E4F840E6DEC2A6F966ED801CB6A984D5447FA484C03C77EB512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bf3d2d94-2c23-46a6-a1b6-2a1307e99478\index-dir\the-real-index
Size 72B
SHA256 080a34d2156ebd2875039fad0bb39da56bf50898cd281ed7a5dd9928c3bdc658
MD5 999e8e07af7103f73a5bc63063a5abb6
SHA1 1430b037d6c1fcbcad2b4d41cb8854e86a770a21
SHA512 69253120982f9d64aae5c60074bd62c4de6efe229b671a8bffa98e2d50022321b8498b923835c038a1ead817bec295567a1040eccf72372c074b0855b9d26e43
TLSH
T1E9A0021843C18202C007D3B06996D98132D149500255131D61DA144AC9D15C6479184D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bf3d2d94-2c23-46a6-a1b6-2a1307e99478\index-dir\the-real-index
Size 72B
SHA256 e85526cc8658191b2eb5314252a3cbd78563bf9d3f8a7b3a4728ebc79c5822cb
MD5 1210db644d8272973b77dfce623c07d6
SHA1 c0c7d5181d63426eba38c1ae35376ca8a90deb3c
SHA512 a557721db6a39b8c308329f958196ee74b18db16ac54ea690113bc2f541a3db68768b4cfa762537568ff9937a2bedad8d0017b0b6aeea23025086e61b24fff74
TLSH
T1C6A0022007880856CA3211B6555202852344CB611101A31741964544CD525C04D4904D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index
Size 3KB
SHA256 c1ce8ced67dc58008b24c1f07d2726317d0bf4fa2c28bcfa05d0456eebbe74d4
MD5 895524d05407d4346bdf52c837160b9b
SHA1 a034a2a5a3f8cf96c864b998d97af92230dc82a5
SHA512 0862b21d4c37649ee83cd5923e0ed3faac9ac2ca62f1afa7cc947978ff1684033ac222c442fd5fb1a2847b70a3dbe8a69ca278ff35809e23a38c79d3427de0ef
TLSH
T11551C94F4D466E25C9AD11F328F70C9177B5B0EE66889A0BA19CA034FCC376A2D66221
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index
Size 2KB
SHA256 b235aee46cb4b779cad9b14df99d4ab1f2722daf46900a903e024891da7c01a4
MD5 796f9227fe94b7f994af31c91c48bd08
SHA1 3ea5fb102030111c6b1113db4469c58d9817da44
SHA512 3c2b68e281644467a523285343219423b8f3344e7c3e5e91f6796a3bc7632ad7edbbb8d45e16a3cfbbbfaf54f2dafd5351e8528266354c2b592a132f133ef7e8
TLSH
T1C151B69E4D05566ADDA808B304B324A837F0C8DC6754CA136CFD2236BC8375D1D1B39D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59ba5d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cb27021c-049f-4516-9734-b16a4f0e9c30\index-dir\the-real-index~RFe59ba5d.TMP
Size 2KB
SHA256 b9bf320339989cecc5fb951b2c6fb064072575210c4d8724fd5a19e99b29ebac
MD5 3734091113adbd0913def1b36b5310f1
SHA1 125b744e6086b0afaf142ccc955c46c0fb516127
SHA512 52aaf17822cd4d5804de01ac719daf34b8f65a3d37e19eb3cb601116a67b117e9d47e3bbf9cc263dbc4067614d65ea942f272b01dce089eaad498afc6cf6069f
TLSH
T11B51E78A4E42823EDCE444B3099264B43339980087557F47B4FC93367CE63AD3E5E2C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 eb6b35daa3438542eb612270ff2cc7e488d8ba374523ebf3f5796b839ee623d1
MD5 afa84dffac9831f5b0d75ae6eb465882
SHA1 c284af4812af1b7774ed0595736e42c29f95b954
SHA512 6284a9af90aa56bbaafb372bf906235ea9f827e515a52517e1424634dab6d43acb3a42c77ad16c9ac53e6b88a50f386c659d9b98ec181fc1b3676bcc1cc055aa
TLSH
T16AE020B79EF70C24FC7FD7E66071886809457844D585FE4FA42E75C3A4713053846C62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 7cde2d6a4c1237098e36f75288a1634f0f3957f798ae99a4aec7da840294f176
MD5 a6d089b6d702e53cba206f92c6d4e491
SHA1 616c5acc73ed9bb0b9ee55a8db0fd1b8790db4b9
SHA512 00ce1a4a7089b319c497a5c25096d07671a454740c717f656f116d521fc8a2308533003298628ee27d300feec3b4099e7693f70e39e602661ee88fdb1cb0b645
TLSH
T103A002518B969046C0C84B7192A5128C235C88DEA605221980AD0078D85536642EE80C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1270.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1270.TMP
Size 48B
SHA256 e432e1e83f284a58f024cee727f17d8add63d184cbe0318ed53a6998dc494b7d
MD5 114d4cbae7e87bfd9cf5071790d0cdce
SHA1 cccfcbddfb220e7966309fade9057602f7f661d1
SHA512 94f14b3182e62aca8fc2414ba0b61fb386ff355a28d1190772256f528aae2f5dd59c4fdf0637a9c88945e11360dbbe48c2139042b047b542c2cd8f1083c0963a
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ac3aa907bcde1bc4266745f78257bb1cecf9199d961fbbe1db33a71ce715d40c
MD5 a04d5c29d816c017a9a874bffbc16ee6
SHA1 b9ca3e01680ff1cb2031ca82de0761696b99c468
SHA512 147456e101a38d29d80b630289c0cbc177ea0925e47774c33d0cd711dffc5b9cdd6220345574883d72adb1a57822eb523b900a23f07950cb48a9bde714569f88
SSDEEP 96:KsOeOROAOkOeOQOwOx7OEOrOsJOsOxKhO4JO+OxtOGOOOzOsOwOSGhyKKMaCA+Kl:mJIrXJ7bc36rvF4Qpih5yvbSpFKJHFW
TLSH
T14EE1E422377A028339BE294CA7B7873B4E4131733018EA6F7BA850955D66E125DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\8b2d2d73-bd7c-4391-b392-1d3680a43497\index-dir\the-real-index
Size 72B
SHA256 3ff54ea39969490e069bfd75e532fe9c6e570628ab28de2aea12df41ad11010c
MD5 3476ed2aa53bb90cb47984dea4301370
SHA1 0011a4234faaa6098ab46cf105ce94ad8c8114f7
SHA512 5cfb6a06cb87284eeac6d0bdb536c11dfca413c5cd7de36982c08563dfeb884a529f736c1ddd9950570ca55f08efe6f118c192ef54eb1e3d9afc1d47743ad6c9
TLSH
T111A0025083D520C1D41522B954460FA23310C890055207038491098DCD916C46D15056
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594126.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\8b2d2d73-bd7c-4391-b392-1d3680a43497\index-dir\the-real-index~RFe594126.TMP
Size 48B
SHA256 7411d610d5572292309045e4743d3bc3f186d82d7893492ca6b6b3a0b5b7428a
MD5 fb2ceeed4809288c6c471fc3f1e14aa6
SHA1 b5fa7ad65cf8a1e947bd669741c626d69b1e0979
SHA512 718c7a2282a95bfb30e2c063f0790e9ea09e066570c4315590cd6e17ee47dcb01082e40c10d59bf4ba0781a68968ee3674cf30f37c273210c36e2064998d2db0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 95B
SHA256 4c1b32d5249d09c96afe1ae60cd58b1ffa63a23f1895c8623d1b6928389a8029
MD5 d9d2ab4710e3c5dd22a2b294eb902124
SHA1 bc0fead019555412badf9fb31ce96cd90fc8de78
SHA512 ca2db970eb010abaf2adbf9160c4b2b1f0c712efb06f26b2a65013f0ae566075d5e4efe7775437c8ad4a166f819609ee31d0740da3dd3fe4926272b64edf9d0a
TLSH
T105B002FB4445D9D55E7138E7414633DDC57273DC5C85FE8DD4751055322057F5011D64
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58f306.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe58f306.TMP
Size 182B
SHA256 be34d397947344837e882dcdd793f6cade5abf537277c0e606bc1abf37260515
MD5 84a7166a734abf6e8f4383f13422cbff
SHA1 17f8811b2f47d75c7119a29339109df8219859c7
SHA512 7406ef1a77e341c332ef5fa3fc954d7d3c37a27ea255808f9ffc06058c7b0de3d8a5dee8a23ac081dec9e6a3c3fbf06034c7d925861136ca038e1ff1d65859af
TLSH
T1DCC012F7A48985A12E7574E6510633C9C5717FDD5C88BDCC88213115323085A1411724
MD5 SHA1 SHA512 TLSH

Submit Download

dae6d108-d200-4389-bfc8-09f0d8b17306.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dae6d108-d200-4389-bfc8-09f0d8b17306.tmp
Size 12KB
SHA256 a94f3c573f9ba32f3796e1c1bdaeea1a1ddd163de97069820cb03de553485c88
MD5 580f0b51fa95ceea5d114483311055da
SHA1 660fea4be6bf200d14e2b0c23f4342277591005d
SHA512 2c7798acbc2cc8ab10a7faf21c4c4869df967d165bb3cdb3632781da52e037561097a723fd6e27a6443fd3ab1f4a01c480e15f40844586605e43b295a408b52a
SSDEEP 192:sxZVR8yM/jK1Ml8MkC/f/seRkBIdpqzHW6+WNpRu/YwweEy4IgrJ:sxZVKMC/f/seRkqkHbG/a9
TLSH
T187520911AA385977CCCBD209BA55BF53D6F94472A2941E44A9FCDA1C00E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe591999.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe591999.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 54c69f03ca21a2f2fd401b0f2ceb6eceff2bc9064e5bb2a9922e0baabc1772ca
MD5 9c77005f1e0d54dcacf8452ef19a33e3
SHA1 53d822e115432b26a2701f46b6b1a2c3db4e2186
SHA512 b3d1e20c433d2fecfae29a9527c22181569b735c732298049016e2d288a856eee82352621fcb7302942fd720c766ff85e0307ae99715f616e8c29665eeab1f79
SSDEEP 384:hZcIhsN3kjAJwxiYXUiX1aTE3YOOPrXLpe8C/9m:phnxZT5oOi9Pn
TLSH
T13A928D35A468AC765DEBF545F88737139FF8842BEBC42F9496ECEB0C06DA554030A836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 51f6b97840a9cf3617bd40d997a089dd04f9501815dc134f96454343037ba1d7
MD5 fd5bf2bf999aa8711caa06e930a77027
SHA1 22c6a0c53cd9d95fc9bc1925ec70c1079ae0806d
SHA512 bbd7977e74070a3c68d196123f176c0067adcd40a8a7c3efad41614f1881831fc16162401e59376b197a7e7d3a5d17cfed54b63bfe9d99ce8aaf6c846c2f2f1b
SSDEEP 192:mQJONG6zZU77QmiUyZszmaU9X1J3wE3255U6:m2ONG6t2tBzmaU9X1z30U6
TLSH
T1F3021939A8696C7B8EE3AE45B48B37135FE4103BEA952F94CAE81B1C01D765C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 90904ccbcad9596b4674e41a28e30045f00b8f5d13e9f80739e08d5e2e29de46
MD5 a0f008b7a53dc7a9a44ba0804983b3f6
SHA1 f203e1941e7fe9dcfd5c56e8cfd1507277ae943b
SHA512 6edad62ba0cb1f31505954118392e736be970aecfb2cac0d6bb3735f9e74cd21dfb5d469de1560bbe3c0d27d2f10d2923b038b618e44d69b12ba03e2bb947822
SSDEEP 384:siFiZcImzsNJ8TUNTUlIlkiAJwxif9Y2UiX1aTg3YOOPrXLpe8C/9m:XFQW4wgZxu9Y6DoOi9Pn
TLSH
T105D23BF154D79876D9AE9B43A77E2E138EBCC067F5805A54B7C89A0CCD9607FC306821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4512125642300520b209d93b714548b25324d159e41644e2967b30a918826712
MD5 ef2c62fcb7a26df615269486a57a3bc5
SHA1 341d4b415d677a2167ad22497d036467f2d8ee49
SHA512 687397d360cb0572d74b93a7b9da48cdcabb245c2c0e4bcada0bff8a3d36ce8ff894140717bbad3edeea3a601a2dd1f10c5b14f802c5acbec161386d033257a1
SSDEEP 192:/ONy6zZUE7QmiUyZszlU9X1JIeEts/3oqmU6:/ONy6tdthzlU9X1aTQ3YU6
TLSH
T1EB122939A4A8AC7B4DD3B451F48737139FE1412BDF896F90DADC2B1C02DB558530A836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 f43b9db7478a10f21f0a7bf74bf5704805642d10b8efefe3c1c1e3459431f185
MD5 911f8aaf2f0a588e60b679619a331375
SHA1 28cf1ff2dc73ee22cb0414da200fe58ee6b2d74a
SHA512 de048a2a61be8808b3ce619d54f04f76d923d2c041cf893bcc4f60f20b287991cf1b83fbe09db14519b95a1a9b744315c1f5cdc262e67b4d66f15e6be434c963
SSDEEP 384:WZcIhsN3kiAJwxiYXUiX1aTE3YOOPrXLpe8C/9m:EhsxZT5oOi9Pn
TLSH
T1ED928D35A468AC765CEBF545F88736139FF8842BEBC42F9496ECEB0C06DA5580307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2d41963ab89c95625240bc07aea394478b86e1259f673d7587008504a6f29ad6
MD5 a2246613b9100a912a330b555eb71efb
SHA1 a3c2b6b3c964bb78fc25480f79873bc260128008
SHA512 ef5e5fcfdec79283602a1a7e0498e69c260fc7520ddb29c8ff7fc06254fc72f603c8664c11dd66399568cdea9b64cf7f01541bf656688a99a20b1c754395c718
TLSH
T1E0E00102A78221B9C1AC077540A71B242BE2E07502FA47078E2011783C263887E32FD2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 94bfbfe34ea9fbdd2e42c99510ec6eae82bb07698c0bbc7d2e654cccb2487e7a
MD5 56872db34ebd2845b0e4a0241461e606
SHA1 37acc5b9b7c01800091b90e2fbc81e1f5008c09c
SHA512 dfe0f1168fbde4e404dfd23be2eb31b6c72c5110b6e28bf3eab56c80c35d52c67feda46faa863a0e7e38d6fce3e607056b4109411bb6a78eb5c38cf2f039840f
TLSH
T10DE00103A74110B9C16C073000A71B202BE2C46402F643079E2001682C272846E31F92
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 08b05e8854d81e763e5321514e9e2c74c53f0cfede47ab90af5606d8fc3f430a
MD5 a90dd2dd819dbbed6280574f55410a12
SHA1 44fffee89b0b9db3a2448a9058725ae282b13e9c
SHA512 400e1c5a8135c1bc19bbac7413bf45ca5931dcbf0287b3ac0d0e2a7388384d1c5e76a5b011afad5907ce56720c242f042887c30ad79831261d98924311965a40
TLSH
T1B7E00203670110B6C11C0730009717102772C45403E743079D1001742C143846D31D51
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59284e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59284e.TMP
Size 392B
SHA256 a709bcc2031bb623258c9a9feecfe7a81e01ab6eede87f252e32ab8a6b793067
MD5 fd40028489affcb1beee4434c6d41856
SHA1 cab4f8f595fce402240023a09acd10dda45d29c5
SHA512 72f6ead071317f8a51f52fde9703545ab81d61e2f074ee514dc54858e80b0d2d3ecf6cf087bd910b20e8e3cc53d2408e20fa7d03c7ab6fe0be2a64b86c584565
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e0d59e16d40ab2611af4d00c8ff230e88058b11a0d8ab754d24a43ef3edbb8a6
MD5 daf1b1aea55f98d1fdde95d2b5afe7be
SHA1 81a75dd44b8a2906e74f0e03e17acfc857b430e6
SHA512 b41bae17f6321df55bc0efc347bdad28fe48fec65bb6f29e2325d9b6b6d3945b42c3512256c012d10cded54bcc9c2ab566b062fd7a1d4eaead1f1c0f83f3b755
TLSH
T149412C5CA6ED1008B3B77E569BF6A86E887E79372E47D09E00110E4F0A22B44CD61737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download