hxxps://nationalsconsumerscenter[.]co[.]uk

Analysis

user interaction
yes
max time kernel
208s
max time network
210s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/08/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://nationalsconsumerscenter.co.uk
Sample260816-e4mvpazcmf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
552	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134313281985790638"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{0DBE1843-9C1F-4332-B870-5CEB95D5ECB2}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{5509F644-DB7E-4839-9595-F5E01E7ABA86}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5644	msedge.exe
5644	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1820 wrote to memory of 3144	1820	msedge.exe	86
PID 1820 wrote to memory of 552	1820	msedge.exe	88
PID 1820 wrote to memory of 1208	1820	msedge.exe	89
PID 1820 wrote to memory of 1208	1820	msedge.exe	89
PID 1820 wrote to memory of 1208	1820	msedge.exe	89
PID 1820 wrote to memory of 1084	1820	msedge.exe	90
PID 1820 wrote to memory of 1084	1820	msedge.exe	90
PID 1820 wrote to memory of 3840	1820	msedge.exe	91
PID 1820 wrote to memory of 3840	1820	msedge.exe	91
PID 1820 wrote to memory of 3840	1820	msedge.exe	91
PID 1820 wrote to memory of 4600	1820	msedge.exe	92
PID 1820 wrote to memory of 4600	1820	msedge.exe	92
PID 1820 wrote to memory of 4600	1820	msedge.exe	92
PID 1820 wrote to memory of 3400	1820	msedge.exe	93
PID 1820 wrote to memory of 904	1820	msedge.exe	94
PID 1820 wrote to memory of 3400	1820	msedge.exe	93
PID 1820 wrote to memory of 3400	1820	msedge.exe	93
PID 1820 wrote to memory of 904	1820	msedge.exe	94
PID 1820 wrote to memory of 904	1820	msedge.exe	94
PID 1820 wrote to memory of 460	1820	msedge.exe	98
PID 1820 wrote to memory of 460	1820	msedge.exe	98
PID 1820 wrote to memory of 460	1820	msedge.exe	98
PID 1820 wrote to memory of 1844	1820	msedge.exe	100
PID 1820 wrote to memory of 1844	1820	msedge.exe	100
PID 1820 wrote to memory of 3376	1820	msedge.exe	99
PID 1820 wrote to memory of 3376	1820	msedge.exe	99
PID 1820 wrote to memory of 1228	1820	msedge.exe	102
PID 1820 wrote to memory of 5116	1820	msedge.exe	103
PID 1820 wrote to memory of 5116	1820	msedge.exe	103
PID 1820 wrote to memory of 2624	1820	msedge.exe	107
PID 1820 wrote to memory of 2624	1820	msedge.exe	107
PID 1820 wrote to memory of 2624	1820	msedge.exe	107
PID 1820 wrote to memory of 4344	1820	msedge.exe	108
PID 1820 wrote to memory of 4344	1820	msedge.exe	108
PID 1820 wrote to memory of 4344	1820	msedge.exe	108
PID 1820 wrote to memory of 1616	1820	msedge.exe	109
PID 1820 wrote to memory of 1616	1820	msedge.exe	109
PID 1820 wrote to memory of 1616	1820	msedge.exe	109
PID 1820 wrote to memory of 4660	1820	msedge.exe	110
PID 1820 wrote to memory of 4660	1820	msedge.exe	110
PID 1820 wrote to memory of 4660	1820	msedge.exe	110
PID 1820 wrote to memory of 2028	1820	msedge.exe	111
PID 1820 wrote to memory of 2028	1820	msedge.exe	111
PID 1820 wrote to memory of 2028	1820	msedge.exe	111
PID 1820 wrote to memory of 5204	1820	msedge.exe	112
PID 1820 wrote to memory of 5204	1820	msedge.exe	112
PID 1820 wrote to memory of 5368	1820	msedge.exe	113
PID 1820 wrote to memory of 4208	1820	msedge.exe	122
PID 1820 wrote to memory of 5612	1820	msedge.exe	123
PID 1820 wrote to memory of 1368	1820	msedge.exe	124
PID 1820 wrote to memory of 5500	1820	msedge.exe	130
PID 1820 wrote to memory of 5500	1820	msedge.exe	130
PID 1820 wrote to memory of 1652	1820	msedge.exe	131
PID 1820 wrote to memory of 1652	1820	msedge.exe	131
PID 1820 wrote to memory of 4792	1820	msedge.exe	132
PID 1820 wrote to memory of 4792	1820	msedge.exe	132
PID 1820 wrote to memory of 4792	1820	msedge.exe	132
PID 1820 wrote to memory of 1856	1820	msedge.exe	134
PID 1820 wrote to memory of 1856	1820	msedge.exe	134
PID 1820 wrote to memory of 1856	1820	msedge.exe	134
PID 1820 wrote to memory of 5644	1820	msedge.exe	136
PID 1820 wrote to memory of 896	1820	msedge.exe	137
PID 1820 wrote to memory of 896	1820	msedge.exe	137
PID 1820 wrote to memory of 1468	1820	msedge.exe	144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://nationalsconsumerscenter.co.uk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8c6a6c188,0x7ff8c6a6c194,0x7ff8c6a6c1a0
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,7493475784203666559,8475066061904318045,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:3
  2⤵
  - System Time Discovery
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,12658812070162269274,5398841344090026176,262144 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:2
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,5910629901386586164,15769719361831579567,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=3176 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,5575131898934247368,4982045599669253000,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,9538515910378608454,14542807216597618574,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,10813673575842040265,2495627386137819497,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,3207386082767822085,2370528314958741290,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5124,i,17362910946060077199,9983362903065180033,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,8165813702974245023,7344686348270965418,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,15228082443444546634,16741003353768685639,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,10283325627781873586,14361672189783256360,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,10283325627781873586,14361672189783256360,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6612,i,4233968705972062717,8918610180155439467,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6768,i,7252224111561356065,3106851511202473383,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6136,i,11541337272839198761,9931420528086420369,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3908,i,6516465024528167269,6041564724753966667,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7216,i,8583105186954554082,1157790733010612246,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7244,i,11603043706436285047,5091019947847512642,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7580,i,140142313701203484,7957097773778383194,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:8
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7284,i,12415553890942596413,13947754693697092732,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7352,i,16924320852301806935,17746777253899603940,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7520,i,15457482241446199668,4344306748741171443,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7224,i,10450390327693545535,5753696622220352628,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7400,i,2753466915880378765,9996556833301280230,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,7219322035217818013,10754664345320562487,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5404,i,3934627986955276036,16374219144630113443,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4196,i,13900731471461261969,1700530780794849336,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7308 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5464,i,12231060878970783811,5921687826402424716,262144 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7772,i,13398438987075540062,11186311448684363804,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5576,i,363044293926748839,2861068576166868736,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=5812,i,240419114994574033,3672321312680191472,2097152 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=8224 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8376,i,81773824860943986,10435518361255158473,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=8040 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8396,i,6636035684261755281,11994228189242856566,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:8
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8556,i,12724229420284061669,5732296554729330610,524288 --field-trial-handle=2908,i,13931373615583891963,3483646370936968273,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:8
  2⤵
  PID:440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 64adbe87f28ba055e57bb44fb393fa404edf5d5bbc75fd301ab70721a98bc24d
MD5 7f68772ca6f2a8c269df3d3941385875
SHA1 c36dfe454faf38ffafeb390d0e9b5a6cd436e565
SHA512 66de12aee09b049eb74cf1af9bc63502585de81b8fb6316c2262546aa78ed45928c9e5ab250f5a1481322772c0b23dec961ef77c1b82ac11d23da20f9aeffa8f
TLSH
T183E0268409C8CA3FEB70A787A26D430C82A0FB5AB7C8FD4B676085C83046454A6C7E90
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 75493411dd4274e99f8ce1e554e84c390cfbc8d1b77ecb3f8a44a2556587b803
MD5 f304697aeefb1f6b521030357119134f
SHA1 cfdb9cb95c2e5ba5585ef562d4af99f9314ddeb7
SHA512 c66224b518df2d758c49b4c41efa0b071cc1a4ea5eb9c030126370fb0a18ba2b9f482944e420cd8f10d09ef29c6e222beaac53ff20528c0647ca564cb29ff281
TLSH
T1C1E0D8451AC7C5DD6D59D7CFD35B42144024F385B5CCE8D933CAF14C15484104E86485
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 56KB
SHA256 e5a5b08d10282d3bb102ea60da50511d94b7b5df75c6975bbcb52b8e67a1a66e
MD5 478f8ce6dcfcb252b4f7d031a7a8bdf9
SHA1 019456174b6128f6338f050b7eadbbfabf843d10
SHA512 84ddb1d80040c85fbf2fe0859693bc8fcebf8601a5681553bf2802c5066b2ab6fdab36afdb9f044961fb8cd7b66aa7665c218c6a2cc477677f4acb037eaf17cf
SSDEEP 1536:5Y2SKLfu7ZOkytKkWajYMwpc9nKF6C+i8G:5YNKLmVrMLWvpS9KACrl
TLSH
T1AF4312CB90B721CC13B2D65420E564091A730DC3B06E93D6EB5CCE139627D2BD3ADEA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 673KB
SHA256 1a2c8901dfefd789a0171c0cbeb36d2bf3fc5b9fc04453bbce723cebf001c278
MD5 f1b884b8b3f6ec8952dd162c3b479b52
SHA1 1b98c65730bab5758c8126a2eee2244293d3b4ae
SHA512 18e2204bb2448949f35a29dd7949fc318501c13978fd6d3ceb4436bf5bb7598d3f9b24676556bf755429d1db307af88ab87dbc2f11d57aac10367a7b46524628
SSDEEP 12288:Ng0KNdFWW2sJTMbOqXr7/W/zDNm6ypGMRdoqK08CLKg8YJjJvwNJIC0j+w1FeHD:TMWW2smbOqXG/9mrpGidF1KzONvwNSbw
TLSH
T189E423946BC2B1753A83C876EBA747C72B5E1A15F17669AF7710823B039901BF812E0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 22KB
SHA256 e7117ea5da69ba8f1b014559bd9ac8ade5d62997b6d1fe849ee9104a16796319
MD5 c37a4d8b82d9ea83a38feec4e61c09de
SHA1 d77afafa477c23b9c5b700443ca360d0e2ac5a1d
SHA512 04126cb9fa6b96cd27b7d620c4b4bc80b25e3e35fdde7856314df13500b38796acdc76a29ec3cf4b7fa3137c63d0bece62687f0e8bc8b21a0db5e2990e4a0630
SSDEEP 384:oV275NNEOTI/K+NUs5mziB+DOWxGOcWj4av9DRMsVVgQAq0LrBfEfA+sf85VYUqC:ZEtTt5mjf9cBav9FvCQARRwAiyUH
TLSH
T1A4B2E130B5EEB1D416BAA2F8638AA20F001DF19F70081045FA5B790056EDF91BBC7BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 34KB
SHA256 29777225e76232b1615d08eb7058e82f04ae3cde70dd7b507eb07aabfe737497
MD5 165621151e2e6c9ad0686bab99280513
SHA1 4c01f90da9dc1b0166304bc86ebc26987a512fc3
SHA512 ebd19d5df5a40f219fab0456fe50a0f8872d488dd1d0ad82518d0b030394bd66eba4fbfdc9140c92b773b5c2b88f72c25fe2f51523042a3f1739853cce561889
SSDEEP 768:2Ie3hrfoRgiywlsGEZvLMBnQ6lJq6f1xago3tHJO+R89FvjOX:O3DMkZvoRxlJquxMR8Tve
TLSH
T135F2F26A270890FAC2BE136C4575413AB49C43569CD911B12506EA8376D7FFA31F36F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 284KB
SHA256 9b0dfe6beaf6a20afa2a5d4e520c67dab3dc578e0d0e2c455469c237cc252238
MD5 b7bcdfdf9f87ee7ad8cbf346814b5059
SHA1 1aa3fa78ffd5ed1d28704503c24c651619981253
SHA512 84bfb716e92a7210087b60b7256b4786708f4f7029fd96ba85d1781b3a68156f463b0c3b65bf191b819dc02986ee405667afa2ad614fa26ee1bb0dde6b3b2459
SSDEEP 6144:TUrV+q8WU+s8DkTUOZ8EftHuQUmb64bn2A3RGkXNWhNsMZo26YNF7R14kezQn:T6QWUJLduQUO6rMGkdMWMv6hkfn
TLSH
T17B5423CD5A86F3B49BC58B7436D774F352CAE0A8700E88AE42FD811651C866D39345F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 76619adf13d7decaf6442e449929b1d1456bf3a6c5205edb202a6aef83243052
MD5 983dda692c32e061880e93b2dda2d040
SHA1 e733deaffaa85f380db916d5f7bb24e7ab94e6d7
SHA512 b5a50961394a6c041648ca3f314b367b77ca3c964955913b6cca0f88f46a4d6a98509a8991841820ab804eb0b8951cd5f3af9d63fb2f80403623e54970174924
SSDEEP 96:vXvS+GNRcrQfKoihXmeEyzx02wzzohGnE4+H:va+WRYQfKoIzhwPzEZ
TLSH
T1B3C1D62A83A743A2EFD4357DC8E24942B7F3A44748239E77434D0DBD2536F91A2E421D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 ee7628d2d916d17efd9cf246617a0f754204d71b03efd2139406afb930eb7f05
MD5 a6252779fd5de1c7d89b8b4ec8ba700a
SHA1 9a5d5107d3a3ce1b9066ffcc1f1811e80d822802
SHA512 e6f43211bd7571e3f18df479476b9390d8332b363d1ac1f9fd942c4b38270f78a3d6274583f51066ea40673c35da31b46ba7097b2d501d836d0c70443b60e0ca
SSDEEP 96:lXFS+GNRTrmfKoihXmeEyzx02WZzzohGRE4+2:lA+WR3mfKoIzhwPlE0
TLSH
T115D1E72A83B743A2EFC4317DC4E24942B7F3A4434863AE77434D0DBE2532F91A2A421C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 7615a14255231dd6d3ad6b94271e038e9a1b66b20e44baa7e47db1c999afa52b
MD5 9e451856b16324e7783d726cf191e1bb
SHA1 9ddf40968838d54d85ed54b569cffd8195bf9651
SHA512 c01c3df4532aa0adbd78aa98a2c0c8572f1689438ef125b725299cdaf907e1dd7a556fc044b4cd21b69327254e88de90c6f5bb86ad1ac49409b143f70499662c
SSDEEP 96:G3XES+GNRTrmfKoihXmeEyzx02pzzohGnE4+G:G3j+WR3mfKoIzhpPzEs
TLSH
T1B2D1E72A83A747A6EFC4357DC4E24942B7F3A4435433AE73434D0DBD2532F91A2A421D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5939b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5939b4.TMP
Size 3KB
SHA256 3e95a466d94d54ddfbc7cafff09aec58616d99e44db473f40f1a74069e0fe88b
MD5 0beb10378a25b6c6ab950fb890115169
SHA1 8428da6f0299a9d942cd2e354766b7d6da3fa9da
SHA512 f297d02451fa0902b9bb76f001333a9dab9a82473eff24962c63c5747c74f26a801765ce1f93b8a23a2af7339b5172a472fbfc6f482d18a39953e7f0bfbb4f96
TLSH
T16761D52A02B34797F322323CD4E30A13F3738488197B8D77464405FE7A38B22972966C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000008.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000008.ldb
Size 33KB
SHA256 da74563c170daebf0822bbab67a613febf5797eb425c350f0fc53b6eaf906439
MD5 49d376f2bc7c825c532f2f68fe3c2dee
SHA1 17b0ad6b5fc751fa7a85c7dc46b57cb6ca5bb1b9
SHA512 96c765b76c282526b6cfde33941252274bdebfbb31397040ae316931c0eaddfcc0de1358e32bf2c76c15fd91a50dba5e471d98a3747b6bfb4e9305a5f861b0e1
SSDEEP 768:UUPsiDwadhX8mADzr+YuAMlAW62MW06JehcFFHc:g8dED6Agc2MUIY1c
TLSH
T19FF2D0DB7AE9C4C6C135E1B3D4FE25462F25B10A728DF0ADB2C2204C196537B2499F4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000009.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000009.log
Size 142KB
SHA256 cae4209e5bb8bd887813bf69cf9fecbb40cff28797c10c36c42604583ce9d41d
MD5 2f451615e25f028596788bd87a7047eb
SHA1 59f63dfa09608b7a1f78bfbac32a377dd44d9eef
SHA512 5d9a394eec77a68ab1be07309b82a6bd0de2e8de53c0020cda2fd90ae40ed213b31ce3906daac67b2a01e319db509fc8b106564975510ea9cad76876781d4eaf
SSDEEP 3072:IctuGat3B3XIrwlu220Jm+FoEeGmYf0JmM8n:kEc
TLSH
T191E3B525725292C4F02E83B706168D02E735D9C892A87899BDA2BF0D27FB7543F6573C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000010.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000010.ldb
Size 1KB
SHA256 bd7fc8c9ce20ca87c8246437606f2c6656ed1c7d7e125163e36a39bca9b0096a
MD5 e587f4c55a3450d77e070328f6b0b417
SHA1 077b15807b77f4e60cc37704e9318c01733b2f7f
SHA512 5609836457daf6f3523425f3184b2cd102893b1ab9ab1a6d5b6b3a02c588ef7b33e7008cdf2fa1cc502400c6ade7411797dfba98a98c72ae652865e312fcf339
TLSH
T1B731741856ACA534E1554E3610B627AD7322B18235A8FD4A3D01831C5C3689D8C73F35
MD5 SHA1 SHA512 TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 17KB
SHA256 298b2e87842b7312ebf9c01a16c7b7c53cfb125d2c15726653a944ebb96751e5
MD5 1208024c007c72148b2f80b68d2bbcb7
SHA1 9cc3b32bdf2c41a06a7d704d8536f53622ccd944
SHA512 2f7984095b521b417de218ea350398343034ddded5da7e74af1920ee8ce869b51298e77ae51834edfa03991b6bb734f7bd805cadd3a9dec3d7979bdd1d303bd6
SSDEEP 384:92WGQObYj+bX2Jbf62Mw5Pc6JeqeStqMXFpPrH:9h4W62MW06JehcFpL
TLSH
T1DB82B0273ED98886D17A9177D0FF00997A3178097589F44CB692308C19637B7389AB4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 3KB
SHA256 75554793586a7f9dff59d10538b6189a4e4694efc01ed9212dd4cf04d8b04176
MD5 edf47d6ea2e3040269306d2dca21276c
SHA1 9b8b663a5e5a602046e1619515c31c66f968ff8d
SHA512 02585b6a9c68ef46ec21031209d417819a3b1be0f9c6aef18418a35a76d176428cfbfdc5ae20f29926c7e83d4d9f07fbca65bb97f3ad8f90f277b1b01d5d90ae
TLSH
T1A8815BC70F0448A889D6C2A2E72CE086C9ACD740A70CEF54AAD9F79F17E052BD5D7065
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 508B
SHA256 48ba49815349f87fb11b9da566a2d789483e51ea935f279fece8fb6433b0ab1e
MD5 39e4bcaf2c6dbdd80cccd7c3e34aa12a
SHA1 4ac3da529f260f36ed75bfb7a1709aeb48aa0df8
SHA512 997c3a58ca2883763e40ed4969cb62db444939b82e5e9a8daec987bded4bb31219f535e6cef8f3276ff9ce406fffe58a6f10c28e3ebdcc71f6192307ee457083
TLSH
T181F02702FFE8A4D2F834057044BFB64EB615B1CD180ED90F100E70AE49F36424D6462D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 cb8f889efeb9fdd59ee33e41cca1d36de4f2fdf8f1c90f697904ef8b6a677138
MD5 6349f2e6134eef5e64cc0f563b39a87a
SHA1 372854cc11dda78b19f966df7a89b3eedea63f14
SHA512 a1542912b569974d96d201967b808f9fca445c9bc226202ff7c20f7d75c9d55a59983ee70dc36cca5f1c989cbd212f42f548604b67eebaf7e690cd1235ee06b9
SSDEEP 192:D5jfphjfpCXjfpGjfpOLmMzZS2AcS6Sgej53bKJ/jfpQjfp6jfp4jfp3ojfpOjfH:D5/IXU0LmMz02vS6Sgej53bKJ/aUK9oQ
TLSH
T19A4290F2C3D8862DD91257F097287E1BCE5D0D6882243D2AD5D5EF4FA3E5471E280A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 3fc564eb2a45bf43eb374dead01753df4fa9fd5ac8f39e6d07408c521229c88e
MD5 20c87eb6a5b1f35eb6ce0180720242f8
SHA1 3cf84995fcdf32915caa379654d0187dcdeb58e7
SHA512 64df003cd0ddfdb5407195f703325c1821e451cc7b32d6a80a4c551a1e8cc5b3a2afb52804360a033c0d1344ae4cd811054367e6f4b811d261a9dd1cc70d74ef
SSDEEP 384:D5/IXU0LmMz02vS6Sgej53bcePeSOtDOS7bMKJ/aUK9owl/suWiJ1FdDT/Y2rxWS:RL/Uaw76
TLSH
T19672C2F2C7D8862DD91256F4D7183E1BCE2D0D6843283C6AD9D5EF4BA3E5470E241A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 e2347e36c61fc167bbb89e179becf0ad2eea473ed561c122c9d4d36e2bf10e41
MD5 f53f2e41f0abeff2d52f100785695149
SHA1 2e107c6b34edf51ec2135548861b677200d8c4a1
SHA512 c18e75fae075c74ffe78576ea8919f7f8b6424e966bc5f11d5977374b4191b63eb4a313c65ad67af3c0bf1525af8a37e3acb33cf3da3776a0731748dd9b43047
TLSH
T1FCD0236317013075F65C3FC2605DBC4FD72780614441DED811E0DC981D3146F5507345
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58f018.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58f018.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a0d7306df1e9f06f48aa2c842131456dec235d343cb2f2efda60f6bc0c7e189f
MD5 55e64fd208b3647df1211b763edc9705
SHA1 60834dadc8be5d6f6f96a560bc7ebfe81099c846
SHA512 9ba72befac2c901a41e468a3174664adc5897ad40f496ded6be76e6a4b02a262676029272941e0d197141d1e16d27a876cb16af9574b0e7c69b1bb743c0677e2
SSDEEP 192:sxZ6R8yM/jK1Ml8M0cB1E/fHseLbD07dpmvLmCHW6+WNUAlNHn88/YwTBjlIgr+4:sxZ6Ssm1E/fHseLbw3QHbVN/Ja4
TLSH
T15C62D7516A209977CCCBE209B925BF13D7F91462D5914E4CADFCC90C04EAAED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 9e026977c77babea4fac67711762157acbb7a39a276dc8fb8dc5d011f39a2255
MD5 1022a8fd6ef31efbf5516ede29ff4718
SHA1 d191e1bd7f7a579c3757f799d4e37f81cac6e525
SHA512 2b9dab36acbbcb193dd7a90ef5979da83d7c6c13efafb4c91997367b1af8a00e5118b6b959a314ecf9d072331873fb4b7bb36ff1815aa60ad65e07015fcdbe0c
SSDEEP 192:sxZfQUn3cGR8yM/jK1MlnM0cB1E/fHsbLbDP0GdpiQvM2acBHW6+WNUAlNHn88UC:sxZzn3S1m1E/fHsbLbD8G1HbVN/Jrk4
TLSH
T13372D652A92059B7DCDBE209F925BF13DBF9147299914E4CADFCC90C00EA6ED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 f31bd37354d7bd212d54b45b8b57cee7f8d5841bdaec706a45bf6f81499f02e4
MD5 04d56a946163b208a79e19c6b96e7a4a
SHA1 126978c1b44caef8c17db9479bbc558d9d01cfdb
SHA512 7b80b3000b08342d018dfa8ff706901952a1ba73bc6f72a9f7c388367fc4dee5e3da141e3278dbcaa10987466b89464532379f588c9a86a9114f50b992903de6
SSDEEP 384:sxZzn3hbam1E/fHsbLbD8GKHbjGNgl7J4:sr3tam1E/f8b8JHb3N4
TLSH
T1DB82E752692059B7DDD7E209F921BF13DBF9206299D15E8CADFCC91C00EB6ED221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 d46f9729ea6b059dbd2d8eb0043f4a1f68ccf25b37df70705e4ea7d73c58a772
MD5 780042f6ea6d8f8d7adf586f68262a35
SHA1 a92ac85bd84196d33139a94c999a09dfd6d2f856
SHA512 74566f7993516fe725c453ef4033f4ed6a11beacff77de265b74989bf10fe895d0f38f45b722962414525c7bba944d3325d8f5f7f53fb2a712ffd97285511ada
SSDEEP 384:sxZznxhbam4E/fHsbLbD8SsHbv8NgllJ4:srxtam4E/f8b87HbBv4
TLSH
T16D82E852692059B7DDDBE209F921BF13D7F9206299D15E8CADFCC91C00EB6ED221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0e09e4606cc926fb7ee641210d5e33653b53818f3584df55132fcea63f165c3d
MD5 df3c47dbbd9e4a23896445435d8cbe91
SHA1 a00f9c52d8bca9bc1004e55190a5e4275081de0c
SHA512 c91bf351f836186ff4ce0a10707df2d6047deb67b7077b63d86f51f85416b6ecc5be3798d3f7a8fb45d733645a42fe007d5de8ffdd97c1c4ba6de546ff814fae
SSDEEP 192:sxZER8yM/jK1Ml8M0cB1E/fHsbLbD0Gdp0QvM2acBHW6+WNUAlNHn88/YwTBjlIq:sxZESsm1E/fHsbLbwG/HbVN/Ja4
TLSH
T1AF72D7516A2099B78CCAE609F965BF13D7F91462D6914E4CADFCC90C04EA6ED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7274045e564f5555a23ddb9000ae9b420aa9fc145ab5e737cdb3077aae2611de
MD5 7f466dcb0c6f6fb320f14bbe167614e1
SHA1 c61ea0d52097a796445a6dbed98fc46eb26ba91e
SHA512 36f4f3e31f747919bc1e905779400571d76261c25dbc089beed78b7b0861ca2a27a85ad2c24675723674dbe239a92d467799c9549389faf2b3c2b764ff4658d3
SSDEEP 768:704jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dkrohocUad:704jeXmWvmKLEu1jacPLZQdvZN
TLSH
T125D20A3B284CCF7E4F844E5CED26AE976ED801CB6A584D5047FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9c0725cf-6c63-451f-a528-6f63473ccc49\index-dir\the-real-index
Size 2KB
SHA256 902a50df79b596b3b46b2eb8e183cd2fcaced2113d2510cba42e8f9236513057
MD5 f32d5c335b260548740940cef989e8f0
SHA1 b2c478f3990cf92157dfc75050f6cc6853af4b03
SHA512 a0d22e65002cfdea147d92fae8948d03ffbbdb7e9766c4e3372366079e40042a6d8c1132ce8ea7d258c67350976b1930e9a19965a1ccf5f9cd8596027c78b639
TLSH
T19951954CCD8097AEECB150B92DD804F653752D38FC58C26280A4B1B53803AB41B8B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9c0725cf-6c63-451f-a528-6f63473ccc49\index-dir\the-real-index
Size 2KB
SHA256 deea25ec99127441dea18767843c97616ee64f432efbe7ec29aff68c7e4248b4
MD5 043b4d341ba5346078818b91bb3f6e74
SHA1 7f7910e376d08a6dfcf76cf3f38ad8925697aa68
SHA512 bdae4d7090e764e3f12fc18427258e5a8d91bf8cc7a7c69df0bbea49417653f926c01dd5fa15c36225e5d4b7f357fc58c85a08010286766f93d0de2b845101ed
TLSH
T19351844CCC8067ADD871A0B9299514B253752C38FCA8C7A280A4B1B174039B81B8B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9c0725cf-6c63-451f-a528-6f63473ccc49\index-dir\the-real-index
Size 2KB
SHA256 cbc0a96ffc2110896b7488b850c35c46deba7c066a84b9d61e71ab3bf4ecc844
MD5 0afe096eb5ebad07dee640797c6d54c9
SHA1 8a3b01a64f521253a6044b26872691a42dfbb81f
SHA512 2e8bf90cce248fb37829d8253b2aa637a1a8b38ebc6ce5cafb607904361adb8a7ed3efcf51586bd105045353c8c572948ff7327ca55fc03091a085013b96a993
TLSH
T10F41864CCC909BADECB561BE2DD815F647752D38FC58C2A24094B1B13403AB81B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c629.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9c0725cf-6c63-451f-a528-6f63473ccc49\index-dir\the-real-index~RFe58c629.TMP
Size 48B
SHA256 f66a0b53b58f80e01ae2e25ec3a6ab622d4fa96ff14eeb518b48bc8d49f1d06a
MD5 1f665365cf87585f9e667c794e8ee003
SHA1 7d30cc595ad4549272f1ea6a7db7e9b6fda988fd
SHA512 64c08ac681d61a462bf77a4badde93cadb52816eb37274dec84026cf4846e3824e463a6003c6f5e8327007fdcc54a6636fdea1f34c972d6c99ed72a57775deff
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eced4ca0-0095-48f7-b012-53fedeb3cb25\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eced4ca0-0095-48f7-b012-53fedeb3cb25\index-dir\the-real-index
Size 576B
SHA256 e4e42a5db6e17cc7a903a141880c47e0910ce28850a1eda376f7026776ae907c
MD5 0c7ee259683791b93fd97abf2beb66a7
SHA1 3eeee5873b5e3c122704210324393b0d217d89ce
SHA512 2975d3ae3789749a65184a307d68d39ea9db18b3f5981b4f9a47db17cfd4b6f79adcd949a37bfbe6f3e8cbaeb8dd1cb1ca0bcfe1f8bf560a9f9a42b0e65dc7be
TLSH
T1EAF0AB70BF75308ECF5144B4202D0D20032C6C460655AAA7549C707FEC3F1514F80252
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592a23.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eced4ca0-0095-48f7-b012-53fedeb3cb25\index-dir\the-real-index~RFe592a23.TMP
Size 48B
SHA256 b635509d1a9bc2ce750b0d7e93c4edc7754a9eb4e16814e8fe21376b2f784c2e
MD5 45903da458b5049a3d6c0e5a1c17bd11
SHA1 ed6eab92e00f5cddb57cc0d30b79513766ae2fca
SHA512 025e8c237b145980e2e61b788c482dd2673fb8883303c4d5925d5de6084e53ca5f6db1d81664d25696df9189c85dedcbd70dd03439858ecb0752a672dcce5707
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 239B
SHA256 a5a1cc924ae3ef5320aa9afde724be2661dfd38c46a2e57470c14f2e3dbb30ea
MD5 6de95dbe5851d6c6e000f3f11af2fc03
SHA1 0f79082c123b56b64dbe5b7eb362fbff40458cf1
SHA512 55bd0d55dc15f83aa0ca2c43ef8c1b75a26cc5ccc4f330b759565bf21003e9f5272d3d2f5c5d1b149eb50151160e7ef855d35475163f51147c52c2276011ca37
TLSH
T147D097836A91000602309FC43034B36C8A0FE14DCCC6DDB403808040B238D12C001F3C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 aec7ddc080ff20b407149d4b077705447691ff1ede787a54dceeaa434f8f0669
MD5 d1ef80bad910e9926933a5ce12b77bb6
SHA1 30fd2e48dd14d52eda42476fbaf08a63632aac8f
SHA512 6d89287fbdd9a10bcb25c5264b86f91b8fcfca33d3a9f991f23f6b987753efcae11bda12d25cf83ff6734250a8043ab8276254d5337996c2ac0a49d1a4914988
TLSH
T1B8D0A9D58271984A0274DA88262862AEC94BD84AA990EAE44B85B14268BCE23C4099B1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 8cfc3d92f7fcd4cae5002380192d631dec89450fe16513692c072742f38760b9
MD5 15125ac73e71c58d13f1803e30be747e
SHA1 ee42f2f9fd35a0e41d192c2fd9e9aa82132950f8
SHA512 95a6f8e26540e6655fb34ba9ebc7b4fa272d5db7398cee8971a5e087b2507f0a845875d96c4d80719735b1e9db53281efdf38fb7ff86d41c48a95fef1103b3f5
TLSH
T18DD0A79547715A8713309A853438325D890BCC0598C0EEB48E41B082A5BCE02C005936
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 cb41a851ceb87dc61315ba1beb0625db63fec968eae3d1b9b90aa3b1e74b7407
MD5 8257c0ff27bb40c99a0c90cd396ccd37
SHA1 28e1a25b3d6139185656ab2f593344340cf37a9d
SHA512 0fd38d90fbf4cd8cdec913223f99e21f59210f380b67a56775e3808b27bfd44ff950a40cd5c499d3b17efc02b0e791ee889c53ce1a6cc4e7cc8851a210b3fd9b
TLSH
T166C04CA24561459606309AC92428775DDA4BC14994D0EEB45A859042666CD164405965
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 0fbeb164eb51ca8dcb6c96944178b6da36053ffc42ee417ad6b5c888de82ea85
MD5 ccc96ec5e6d1651330348e836418f6fc
SHA1 5792da06950859db441a2742f0736b5e546fa222
SHA512 14aedf173db2f5401c550eacd4601cdaebbe5f15c88fc3a4b667892d79cb1ffc72765367e2ca235302a4818a4d6181138a9fc768bbee5b00b9f2bf5ddac165f7
TLSH
T1B0C09BE24561859B0674DFC91438735DDE4FC14DD4D0DDF457859042643CD174405975
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 243B
SHA256 d02f8c98a2df177f4472b7e72eaf9172b97e5678bbb98b9f73a1ca22bfc3f091
MD5 ba0bfe13edc7e11adb75b4658f354390
SHA1 239568f6160391c6752b0928134a3e976a07f396
SHA512 dc9411d7e339f758881d8b2d3574deb2039b5df608bb9a99b3d2ed840095de100dcdbc7f6af1dc99afde0a8024ffbe92745cde51fb11838a97775e738ec4c4e7
TLSH
T127D05E926A61014A46309FC92534B29D8A0FEA49CCC2DDB41A84A045B378D16C055E78
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 239B
SHA256 b4d8c64db8e3bec7e05f485b2d9397ad52208b492e8cdd899f1ceab0dd77922b
MD5 c77b5e537711c4f8188a87ddd4ebd375
SHA1 03e315498f4709b3818b343f06d300f47e5cbaf2
SHA512 01dc0ef5f2689a877d4f99a1841f8f49c01e3c983d96114734c3fdf33806fd0704d6245a726858b1a14498ffd4c90f97e69701a79687016e7d4048f11afb13c9
TLSH
T1F4D097836A91000A02319FC43034B36CCA0FF28DCCC2DDB403808000B238C13C000F3C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58b8bc.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58b8bc.TMP
Size 137B
SHA256 a09b39a3fa602f701a52d91727dabe16db023c501ee0f51bd274fbec32198530
MD5 9ad6878e8910f110269d3fd44a99ec59
SHA1 dcda5b176b44aefc06f2d235f9c4b402ba97ad80
SHA512 3b62e78a19cb3c22c89015e23986cd7c53a8dba50299e7edd4922b91694a7c43f32c8cad4807f69d364d5c089888aba915071e8833dbe373bfd5eab4f06ddd2e
TLSH
T145C09BE28571459707309AC51438778DDE5FCD5ED8C1DDF45786B042743CD178509975
MD5 SHA1 SHA512 TLSH

Submit Download

67a473248953641b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
Size 20KB
SHA256 e3c8b4bd63dbdea962d6e38b5ee689e23296e3e88d2f9862bbda95c1ba1f5781
MD5 056194f956969124faa70e6783d184d5
SHA1 4e72fc5b617816092e8378aa23770b99a6c83509
SHA512 25353843203671d052dd12409a6b7baf9085e7e521c5897f93b9aa9cc6148911f195b089393c63e5a95ce010f77b898e831fd8a80695c9ac336e37b167c102b0
SSDEEP 384:l7UTY616rm1eeqcU1J7JHh50y5/nIpw1dhOHD+1ZQu+JEYK:V2Yoo7jSy5/j1dhaqgK
TLSH
T106920BB60CA4A437C6A1C6F56ABDBF096D7C56BB149A8AE4F06D467C00F49C7034F84B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa813c9ad67834ac_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
Size 192KB
SHA256 56d8cadc6966dd7324671b21dd178ce36987b677f162a7d063fc746cce07bb3c
MD5 84404a74ce4ab5617acd49bb72d3eb4d
SHA1 333f235ebed552479b4b922746389d73bd000f9e
SHA512 795b1063e057fe78c5f5398d1a14a40ae3c0da42d916c77ae1dad4ab6757fb04a3f74cc584f7fded80c4e4c782427586587a7185f249b6d3ec25a40ed5fec00a
SSDEEP 3072:zVRjfbCeds2VNSGeOZIe0rBlX4u9eu/OYN5Z:fCeds2VNAyIekBl7eu/Ow7
TLSH
T1F0145BCDBB91B47752A744F1802F0403B239B896B80CC4B8F595DDD96E24699837BF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 5a40d5750b30ce832c7c5b328e7f2b65a9a0ecea1a86e7950b3e8ba16291d5bd
MD5 3f7de0bd3c8b836d84ef169f4d140124
SHA1 683d62d7217d8d37bf7471253e9914d76abebb9e
SHA512 5d8a19d78fcb43823928e53a36dff1e5584a1a807efddfaf3ba89f5ba875256a026766b261fa0f4265a4e1d488e734573007182a6ce44d0e2a73bfc6678f5170
TLSH
T1C1B022FA8C283002C8FC833C208CA0C830380C30333A22B328FE02A0C03BA08C02A082
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591dee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591dee.TMP
Size 48B
SHA256 cc6ec765a5f27359b758f0584be7b07fea13d8836239853a8ce79bcff12c029b
MD5 a577dea616b647e549313aa743e376d6
SHA1 671b37330d6aeb803ac2a92fc91faacf9b594778
SHA512 3e7db49daedb32ecbe077b79eb5de6789c08f8b68adabe7f6664d937ccd529d977e611c4d4c194a5636c0fa23bf0bf1435c3d1119fa604fcc0511156cfdd30b4
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6b6122a34b551d0aeaf9084193cb81e7aafb453395151d02db4e50b82e17441d
MD5 387bbc475516661ecc9f37c399fca4af
SHA1 8d3bdb9a3cf4700ed0dad61f554592c2a3b084eb
SHA512 4aac30153fbcfa962883070a836bada4f1dc10930fa9ea4a1dd4f08fde5fd30d4bb5d497ab10781374874310332c3561924ce9cd846e98ba4d8fc7dd4fc78d2e
SSDEEP 24:KdKf9G3asdAc44o0+rIji4KibhaU41EioSmWM/8qVyXYof/sdaCdK6W4KG+dIjAx:KAzIhK0YMHy1JIhKa88mFIVKmoA3yv
TLSH
T11F91126634BB53453C3E2A0C935A9B1A5E4272E370A4A47B3FAD50B14E67E114EFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6e67dc8-4379-478c-8435-91d4d92d4a90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d6e67dc8-4379-478c-8435-91d4d92d4a90.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 70cd8ab2ddca7d74acc18727aa8dc0e9dc58ddd82ff87c793a75c115f339ccc2
MD5 e8365e5ffc1d84079beba844fd9913d7
SHA1 a0226f112742c7b1d07928865027098bd5f8403a
SHA512 eb12ae6ed505729085138a71a6138ce3900d30ba39946c059dbc726e4faa5c61bf06c9e88ac71bfca3fd6e89a0058c1aa63006827fb5eeb2957ac3e0a08857b2
SSDEEP 384:FsNs9ScJKkW2f+2/d9Y45aF4OOPrXLpe8C/R:FJWmbM4Oi9PI
TLSH
T115726D31A8786C675DE3B741F05736039FF85567EAC53FC8A6EC9B0C04CA2AC131A912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 dd5f69cbd45a3b36bd8b2b098cf3d84b4dc1ef6dbdf38106dcc02e599adf775b
MD5 a6dde454d6c167dab5a6ca3194365530
SHA1 bbc35f550ba32af2b1704112e268eb46475a1090
SHA512 63f50eb61080e82b42022790fc295371b035e0a884f58472b86cdc93b2aa16c0fa2f4e98314676a705cfea2e0a580045d8744f5845d2982da70a852127e06701
SSDEEP 384:4iFiZcIBsNk8TUNTUlIlicJKE0wW2f+2/d9Y45QF4OOPrXLpe8C/q:DFQBdwgL0wWmb+4Oi9Pp
TLSH
T1A4D229F148E75436E9AEAB43E77E2D024EFCD067B5906A84B7D89A0CCC9517FC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2c1a48d12ff6f8c4c8e94494163d6628995d46e64326239e701502e9fe913be8
MD5 832e88415b8f2fa85fef52a38b3628d6
SHA1 ceb996f87aeb1079e7bc22433e3998d0d82b077f
SHA512 b71bb4fd9bf9915d1f934ff24513d794c09d878fcd3a5b082ec3cb6b4851714a80d0f9aa818735573324e98f80d41f04a0bc7e92e45f2dfc8b525866c6745820
SSDEEP 192:vONN6hZCQmiUy1Zvc/+jV40+Fd9YD804Nv5cOqCrqYU6:vONN6C6vu+2/d9Y45C94U6
TLSH
T19912E931A868BC275DD2B641F08736135FE8522BDED57FC5E6EC6B1C00EE66C231A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 383ccdc60f6ffc6136bcf5b9edd0ae32e2a9216ff0e80c77150ebee06491a5ee
MD5 d4e408ec95eeff649c530d44eca99f6c
SHA1 dae1f1035d452183a1e1e365482e6d6623a807c1
SHA512 6e358941810ab7c6fcfa0fedc1266dbff97f2c6cd8e351d0f26ca2b6fbcb7053840292e176c7dfbf2734555832f477d1551d249d7c7ba3f7e6cb5a63e28acf7a
SSDEEP 384:XZcIhsNsicJKkW2f+2/d9Y45aF4OOPrXLpe8C/q:fhbWmbM4Oi9Pp
TLSH
T1ED928D31AC786C676DF6F642F08736135FF89537E6D42F88A6ECEB0D04D9568131A822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 75c4bd510432ceea83f2bd7643c39ce3cd493564c304a47e197769518418b1af
MD5 2cca7f06ebadec25b80f5a4137b60306
SHA1 7ce355eaad12e2d54b707f7ed1a7e02a8022903e
SHA512 2914a1f36da12f03a7b29a424b6068bb04b8158a8a626174858e60f9600aa2202001451ee2ca77285a757d5878e6a08025ed1b20d32311cbac76db2ad15529bc
SSDEEP 192:EON+V6hZ0QmiUyZZpc/+jV40+Fd9YDJ5wOZbeU6:EONw6oMpu+2/d9Yk2KU6
TLSH
T1C002C935AC687C778EE2AE45F48777135FE4212BA9E56F84DAEC1B1C00D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 16c77fb2e0e68befbaa01fd873bbca46c27cd174a9a93aafd9ad205cf28b4cdf
MD5 8b364aaf4a4d416a976d4f384b950546
SHA1 ca3cb8188a5cce1ecdb2e561f834ac0f4ce54581
SHA512 ce02c2c22905ea9312ed6e5619a34b057ec58321c29566b91d9406578b5baeeeeb5cb62d4222f526311e7a2ce02b542c31fc6958fc7345d18392934ceb825367
TLSH
T1EEE00103534101EDC028033940939B206FE3813102B2078A5F74056C2C337602E25B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6c8a2480e2be24b3cacfa1f8c0efecbb3b0bf0d3db39023c484e1ae81124610f
MD5 68c1b30863aeb7388340755b3ee43f8e
SHA1 5bd933dc8cc2644132331822968751823cbab1f8
SHA512 958309744ebdfb97c345af868fa2db0b2ee1e099511d50cf4275ccc9d19f2cbdf3ca04422dc888aee01bdb35a250c059874419dda269bacd9e390396d70552b1
TLSH
T175E00103934101FDC42C033940D3AB206BE381A102B20B8A5E6405683C33B682E25B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 768b36868e6fbf9c639c1e2d88fae349321b38e74c6232f2fc12289e1f59692c
MD5 11d023ec4d50e6e2e1f85f0340ae017a
SHA1 1c13cd581300f55b30c7e083fed7c0ba6116ede2
SHA512 7aedf7c3bc1f2a67180dd903f0bbed4b27375173c15fbc75336aa3cf9c65f6720693f38db5f2912338f17da1c079c4f97e4de6ffb25094c0d798ea6be9a7962e
TLSH
T1DDE00243634112EDC468077950935F206FE3417002B206855F74496D6C37B543E25780
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 dedad54d08713c49bb5b9d1be7338896aeb0b9ba04e2d300cfd6c6882d68a089
MD5 f6fd1f4f8424eb1d75ffc16330e4022e
SHA1 ac10bd726bbebcc29d31a3f185879db7b0a7d9e3
SHA512 85cdfb53c25f8dcdc93908415366c05a5d8b5fed9d9f25644f4052f30a25873e61273172b237ef68ddb8059972a0d6c765aa6c73a145012de739deaa5c980969
TLSH
T132E00942A34102FDC46803795093AB20AAE381A102B20B8A9F74496D2C33B682E25780
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d1f9153933004a12b18697f4f6f679716c15814befbc5bbc22745a9f756ae59e
MD5 4a836715d48836ebde376f8e45c99805
SHA1 1c89d50b28934087b629bf9683baa9d16c5611c6
SHA512 65f8370d62ba19db16013ecadaafb71020ab448f715d01eabb2e30da80dcc2997a56836783b76ccb66107c9cf312e813c5fab8b56fff7a11dadf2630d1e50c11
TLSH
T166E00103934100EDC028033540539B205AE3813002A106855E6401682C237402E25A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe592541.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe592541.TMP
Size 392B
SHA256 b3e9d1e08dd90b32cdec786b728d821df66f5f938b2d8524de3249d34e36ce3f
MD5 09a7305f495affe8c0f4900ebc33b22e
SHA1 db574d37f882c4d92df4e4b5196e17cf331a9a4b
SHA512 7b0b32f5654d0a8fbb155303c136cd1d45b30d991f6a5d935aebacf0f23e98c461f1d623f7ce33a7b8033e5fc9f1826f1e5a26f011a62eeb191ce631c2acec73
TLSH
T1ABE00203934100D9C014033500535F105FD28120036107855F74016C2C337403D11640
MD5 SHA1 SHA512 TLSH

Submit Download

a9f6c175-e6c0-452a-8375-1d3c34c1fae6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a9f6c175-e6c0-452a-8375-1d3c34c1fae6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a98422fea19cfed3123d99b1b9fb53356a1f5c0e736a82efc395a061cae60c1b
MD5 3cb4549a1f9143058dd5f3addd44e7d4
SHA1 9af56dee14e745568e86bdbde28e01322d95ae8c
SHA512 d8ccc98c1de3b271c291c86b89a525be5f13c153f3fc1335ed363b2bc9372663e1b4711b876a9f146c4d4a3e247b4126bf1bdae4141f2b2e79a04121d7269864
TLSH
T1FD412849A6ED1148B7B76E4AABF6A86D84BF78772F07C45E10110E4F4A22E40C871737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download