hxxp://sunfunart | Triage™

Analysis

user interaction
yes
max time kernel
1049s
max time network
733s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://sunfunart
Sample260820-pp7awsxblb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2920	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317027352804047"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{5ACA4E5D-7A2C-4C23-BC15-00C43250F230}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{6453CBE4-F4B9-4B7C-B1ED-3E96C7C179F1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4764	msedge.exe
4764	msedge.exe

Suspicious behavior: LoadsDriver 7 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4068 wrote to memory of 3268	4068	msedge.exe	89
PID 4068 wrote to memory of 2920	4068	msedge.exe	90
PID 4068 wrote to memory of 2364	4068	msedge.exe	91
PID 4068 wrote to memory of 2364	4068	msedge.exe	91
PID 4068 wrote to memory of 2364	4068	msedge.exe	91
PID 4068 wrote to memory of 4736	4068	msedge.exe	92
PID 4068 wrote to memory of 4736	4068	msedge.exe	92
PID 4068 wrote to memory of 2552	4068	msedge.exe	93
PID 4068 wrote to memory of 2552	4068	msedge.exe	93
PID 4068 wrote to memory of 2552	4068	msedge.exe	93
PID 4068 wrote to memory of 644	4068	msedge.exe	94
PID 4068 wrote to memory of 644	4068	msedge.exe	94
PID 4068 wrote to memory of 644	4068	msedge.exe	94
PID 4068 wrote to memory of 1732	4068	msedge.exe	96
PID 4068 wrote to memory of 1732	4068	msedge.exe	96
PID 4068 wrote to memory of 1732	4068	msedge.exe	96
PID 4068 wrote to memory of 4512	4068	msedge.exe	97
PID 4068 wrote to memory of 4512	4068	msedge.exe	97
PID 4068 wrote to memory of 4512	4068	msedge.exe	97
PID 4068 wrote to memory of 2828	4068	msedge.exe	100
PID 4068 wrote to memory of 2828	4068	msedge.exe	100
PID 4068 wrote to memory of 2828	4068	msedge.exe	100
PID 4068 wrote to memory of 4860	4068	msedge.exe	101
PID 4068 wrote to memory of 2296	4068	msedge.exe	102
PID 4068 wrote to memory of 4860	4068	msedge.exe	101
PID 4068 wrote to memory of 2296	4068	msedge.exe	102
PID 4068 wrote to memory of 3144	4068	msedge.exe	104
PID 4068 wrote to memory of 4944	4068	msedge.exe	105
PID 4068 wrote to memory of 4944	4068	msedge.exe	105
PID 4068 wrote to memory of 4944	4068	msedge.exe	105
PID 4068 wrote to memory of 3032	4068	msedge.exe	106
PID 4068 wrote to memory of 3032	4068	msedge.exe	106
PID 4068 wrote to memory of 4380	4068	msedge.exe	108
PID 4068 wrote to memory of 4380	4068	msedge.exe	108
PID 4068 wrote to memory of 4380	4068	msedge.exe	108
PID 4068 wrote to memory of 4308	4068	msedge.exe	109
PID 4068 wrote to memory of 4308	4068	msedge.exe	109
PID 4068 wrote to memory of 4308	4068	msedge.exe	109
PID 4068 wrote to memory of 3352	4068	msedge.exe	110
PID 4068 wrote to memory of 3352	4068	msedge.exe	110
PID 4068 wrote to memory of 3352	4068	msedge.exe	110
PID 4068 wrote to memory of 4832	4068	msedge.exe	111
PID 4068 wrote to memory of 4832	4068	msedge.exe	111
PID 4068 wrote to memory of 4832	4068	msedge.exe	111
PID 4068 wrote to memory of 2008	4068	msedge.exe	112
PID 4068 wrote to memory of 2008	4068	msedge.exe	112
PID 4068 wrote to memory of 2008	4068	msedge.exe	112
PID 4068 wrote to memory of 1416	4068	msedge.exe	113
PID 4068 wrote to memory of 1416	4068	msedge.exe	113
PID 4068 wrote to memory of 1416	4068	msedge.exe	113
PID 4068 wrote to memory of 3600	4068	msedge.exe	114
PID 4068 wrote to memory of 3600	4068	msedge.exe	114
PID 4068 wrote to memory of 3600	4068	msedge.exe	114
PID 4068 wrote to memory of 3204	4068	msedge.exe	115
PID 4068 wrote to memory of 3204	4068	msedge.exe	115
PID 4068 wrote to memory of 3204	4068	msedge.exe	115
PID 4068 wrote to memory of 1812	4068	msedge.exe	116
PID 4068 wrote to memory of 1812	4068	msedge.exe	116
PID 4068 wrote to memory of 1812	4068	msedge.exe	116
PID 4068 wrote to memory of 4504	4068	msedge.exe	117
PID 4068 wrote to memory of 4504	4068	msedge.exe	117
PID 4068 wrote to memory of 4504	4068	msedge.exe	117
PID 4068 wrote to memory of 2524	4068	msedge.exe	118
PID 4068 wrote to memory of 2524	4068	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://sunfunart
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffaf801c188,0x7ffaf801c194,0x7ffaf801c1a0
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,13438379947173642860,5872192731203251244,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,5721632518377679529,156627120316656762,262144 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,12285601534090884173,8924797524151183632,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,1653032346699743712,7752774051353785440,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,13696320086104529406,7714946072822981195,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4084,i,16312110541390798526,4967134027040013539,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,15843923860614469402,2379568779924829131,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:2
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5040,i,12591755478589905515,17754055349669190443,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,6140307842364106095,2095064693709882057,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,13709042811941853078,17045948979730536094,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,4127336936241432338,11374717293127732778,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,4127336936241432338,11374717293127732778,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6048,i,6602498385618610169,1190965648457424596,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,6983362168385323662,17026276937207974034,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6368,i,16429349636825333536,1409676564883645509,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6540,i,6093572911546094405,10935379902735065311,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4280,i,16302580159195986427,15716633205921727267,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4820,i,16215852091804879060,142523828987874549,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5972,i,8801213164494377336,12843048681199971818,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6840,i,13502319788375684640,2160612927256144858,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6908,i,4969747888682224893,14742094006495793685,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6936,i,6085864293355078114,4256722990580170255,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6788,i,7510553686435588109,3867121577179685188,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4804,i,15684487307943792964,9857352574877083713,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4284,i,1448457990517013211,7768605749869385349,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7404,i,11694972406559753507,1924042175213976950,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:8
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7252,i,2502196058556473003,16536378418913084168,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:8
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7224,i,18060488212712591892,10584104617694472026,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:8
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7240,i,42222709189376347,5787835719999657129,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7264 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7004,i,13726726805895662554,11472167536991400431,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,16437678340062323185,15453334368137369596,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7636,i,15148790977584428124,7537968183011116637,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:8
  2⤵
  - Modifies registry class
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7664,i,10836302911719500377,6935471683261597758,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:8
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7864,i,13464842578771327820,13461455283328335862,2097152 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3632,i,8123754022398872268,11848350789856664358,262144 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,3337967158628216108,11460628404619962708,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7924,i,6648266764300063673,3072308109744903027,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=1732 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8056,i,16905177765449793397,15221286929189790798,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,2922672100861266813,1840392691646588352,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,13332944553733850449,17861754981093837716,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,7602882159634225041,4328646325780248678,524288 --field-trial-handle=2332,i,11625150031739297456,14398428092525708493,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
  2⤵
  PID:2660

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

229e4047-8d2e-4bff-b839-07c4755832fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\229e4047-8d2e-4bff-b839-07c4755832fb.tmp
Size 8KB
SHA256 32ca1e6fb2d255b45a82716cf163007ed09b49bcc8404c1ee953ebe4c9a4ad6c
MD5 bf3577ded2980ec9b8d285715707b418
SHA1 d52ed859b125bee162548622929981cfeab4beab
SHA512 ccc86b143b4f9c3f2984d2a954d79466729fe9000ad149d237c27c771160b835e9942c571e2460b2cd2707ea618e2c41f2c7b8cadb0942e69fa4b61616e76e2b
SSDEEP 192:qONt6O7+3hQmiUyIOGttb0j+Fd/9UgGL6W8rU6:qONt61KGt99d/9aLt8rU6
TLSH
T11602D7356C786CB78EB2AD49F58727235FA5117BE9962F81DAE81E0C00D765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 cac55920f8823c4ceaf21e9df262ea5144feec125c060a5abe9067d5317a32d5
MD5 758e232e0cd6d9a81ac6d391eae4c336
SHA1 87b9bddbaf74e9eec5f3f50faec56838c804652d
SHA512 070c7f645a47bcff78d2d6cd584b80ebb96040ad737531962fdbfe7971fda7ba4ce3ef9b1d1ab66f8279fd13535f41075f904d2b233a1a35c9f128131f7dafbb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7i:fwUQC5VwBIiElEd2K57P7i
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 6618c399bd84fe4a220b60b6cd72d08336d8cb2cbc3bcb31ffd818d84feb7293
MD5 6d3fbeb971944747fc5ec05bc023ee23
SHA1 66596343fa8cf87971433b7d62e4c0bd63ac76fd
SHA512 2d469f6ff5a94fedfc95f06cfd50c3627c0dd962e56a8b028265d30a9f76c6001170c24304c4882676c46b166b37251274cf3d53a179961d884dc94a68327ebd
SSDEEP 192:qjoaK333BzzzzzzzzzzzzzzzzzzzzzzzzzMVLO:qjoaK333Bzzzzzzzzzzzzzzzzzzzzzz5
TLSH
T1DBE1474383E8D79BDF06258B49A4A39D50B03719EBDCE90C138C9DDA308E49AF5A96D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 ddfefe60118fea7c80bb9e09dacc1be3425a5af29a45c777df5ca4cc25e3b8c4
MD5 8d9020e119e24a8cad17c2365451b986
SHA1 e6389166eea7eb24286ec1ddbaea232ba4408a92
SHA512 418ea59eb6dd75ef54674e68b961a9dd13c13c2e2997061853574ec3beb19ef09404553d7135844088cf489aefd71da235b9f559b256f959583125dacc59f2e8
SSDEEP 192:+FjBVFqIIIIIIIIIIIIIIIIIIIIIIIIIIIIMbDLO:+FjBVFqIIIIIIIIIIIIIIIIIIIIIIIIx
TLSH
T1FBE1601283E8C7AAEF1A50CB8AA4635C00743719EFDCD50C674C9DDD35CE4DBB8A9698
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 2fff5f9d56e183e3d4a9bb85bbb88616f9c669cf79fb50eaaeb27c02f6b895a9
MD5 a09c7616bf771c4a8dd68faea87c88b1
SHA1 2b9a1ca80537cbef213ccea80f576f0b8c1bd071
SHA512 62605b4c985ac787d63dfe5f21e1d0e9d6995d81d9ccc253b10808a643abd83f2ed3b05a9374b2ed857221f7544e304399fbce1e67a8a12cd1405a410c30e6fc
SSDEEP 192:4jAq6HHHHHHHHHHHHHHHHHHHHHHHHH9999MnLO:4jAq6HHHHHHHHHHHHHHHHHHHHHHHHH99
TLSH
T1C3E14F5783E8C79ACF2610CB49A4A29C00703719EBDCE60C178DDDD9318E8AAE8B5694
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 690ada6ca81787b8e2a41b98ecf8db9db5ba79149dbb2a40e311b8929acca5bf
MD5 0a547df0e716fd8ac96e51e907d8435b
SHA1 1cff3d6a0a90df02dd60033b731a08e540ba840f
SHA512 2348c3fa0996c0e72821621f26e2538256e9535e733fab94ffed6afc2de5d6c1992769e4dd688750930e22cb02e997cda831e7d49fbef0b0b3016f7e936cfe89
SSDEEP 192:mek8qJl668g4nPSlEoxaKwIA7WVmDh/unD2VwwWFRvl/:o6AVZhYh/uMI
TLSH
T1D7F188108F9D6C60EB9C2DB9D8F0B82374F557E4849B8FA2684444FEEB17796690E027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59642f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59642f.TMP
Size 3KB
SHA256 e96179d5d76a5702480f9b1669d631a2d546cb07def95e84563ea764eaf685c0
MD5 eedf71fa28118a00a849465d71e2ba85
SHA1 c75e6b7d1bc8e47975db1caa3bae568103d57a07
SHA512 eb141d1acf833f5f460103f3ae44370d358b66c52b48faadf700f410cb1827ece42d0a1e0e23dfe569e5b31865e387b94cb612dfacfaef29013507f84c559250
TLSH
T1C3717F59C64D0C91E7601CF9EEF2B27130B284C809A3CED5A51449FF670ABE98C6F407
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 bd0c60608ed0b5b5575c037b713a6a34df1c44f82c68f42c7adf1c5237d8dc1d
MD5 8ac7c34b832cc782d5e7d88f050fdae0
SHA1 95bd20a2ad822cd7a06067af281256e86d254106
SHA512 ea45d016ab93bde854c3f5a99def64d15edfeb704df877386fb75768a0866907de74f0870eea4bd6f321b5a6626df5513cd67c54737fa8b9e2cfba7e799a173c
SSDEEP 96:DvOtaGZqtTq0qkKtzBkKNiELqA+O0nq1wKqm5q8qiBqmIqiibM:DGtaGZ8TNTw1DNiizT0n8fn5zHnI7ibM
TLSH
T1A6B15AF3C3E5866DC91112F0AA187E1BCF1E091983583D2AC9D4EF1B93F24B1E185A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 57a55ddd97699d78ec8cdc58afdc1152b44a87a3d9b2927ad1fb8ae828290a52
MD5 8f60f764139a76799743cc3be1b9bca2
SHA1 a84a24f1416d339b163bce7c6b0a534fead8ecaa
SHA512 15b86a919d00c5f061c041b93c7be876598aaca437de1cec95f46277e7fcb03ee36984751bf39297f6ed49e48e8feafb176a0cc6fb722cf750fdbbe2355f04fb
SSDEEP 192:DGtaGZ8TNT73jK71DNiizonn5zHnI7bElkSZP30Rq0ffji:DGtaGZONT73jK71DNiizonn5zHnInElJ
TLSH
T1A3F19BF3C3E5836DC91122F0AA146E2BCE1E0A5543583C6AC9D4FF5B93F2471E281A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 d36596a94e40373ffa88b4e3873c7e39adc0df423b43bbd44f7f9e84b01679e6
MD5 275483450073d967421a4e7c1d0e8044
SHA1 2fbd71b9b71ec5cb90098ad1a63cba5f8cb2b3b4
SHA512 d0a678b6da41ea967f4fc1d0b8deeb4315573e1dab9e236f2b49d97b93e8f8e04f33626c38d9154b66e43636d38186bd8cc3c772f19a5a5cfd1a0e00e8b94b57
SSDEEP 96:D/O5KrQq2TqzqofSj+qxwzBksiEBqcvquqm5q8qiBqmIqiiElwBSZ4K3qsqi3zvn:DW5KrQPTyH6j+Kw1Nig/vnn5zHnI7iEB
TLSH
T1D6C19BF783F1436DD91162F0AA146E2BCE6D0515439C3C6A8AD0BE1B93F2171E181BAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 af37c780b8ee6f4b51713a6702976a6f42bfa70dc736b687025ece115c53cccf
MD5 af4fc17da476166ebd4939833efb9497
SHA1 067a5c2462db60a874b8636f450b12853ce1f403
SHA512 edcf50bb61edfcd380fdf97e3d1498deaf31c2ddedc381ed226f241f2975b544ae8a450b21128ef48b3f3a04fc19fdc758100b401e6c0752002f4818a323237c
TLSH
T18DD0A923324460B9A5AC6E9690AAE88F872701710802AED920E4A998262246C4507284
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe587f9b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe587f9b.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6488bb3d96595ae79c8c09c55beba62253526d3748c1a9fe1dba7f8e4e7e68c5
MD5 2e99a8e7f7e55ac1d66366ab607d6eff
SHA1 15358b55acf4369e6ef4ea831cfaa947d7fbff3d
SHA512 4aabd5a9b698bc065743bd42d0920226031e546d5fd3849525ed9ef0ce1777be64866fb1759dd009680c105cdd6e033e9bbd0251ec5ff5dded452d21651fbe4d
SSDEEP 192:sxZERvyM/jK1Ml8MkQ/fTsHFPIdpwLHW6+WNGYLzkApIgrJ:sxZEfMQ/fTsHFgSHbGg9
TLSH
T1B342F9126A346977CCCBD209FA55BF53D6F91472A2940E44A9FCCA1C04E7AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 b84cfa9114ed3591039264e77d5e0823545e18fbaa3e43eda7f199149e056245
MD5 ac93484b74fa123cca82352e1c5327c4
SHA1 c7036842f232181584b7af3289c6ef4075085886
SHA512 c407861958d367ba47333012c40ac2a290ead14bd174d65aa870f6732b1f0dadd75a7a539089bcd49b3013c696a7897f8539650ba8f707138e7d36afcb0c3348
SSDEEP 192:sxZKRvyM/jK1Ml8M0cBcQ/fTs4rbydpu2bIWgWxHW6+WN7hUbHbBnS/YLXvCpIgu:sxZK5smcQ/fTs4rby5Hbyg/zIC4
TLSH
T14672F7526A3459B78CCBD209B925BF53D7F5146295914F48AEFCC91C00EBAED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 30ffbcaf19d73c24ea07a99b8708adba76de9b9fb8ee37392d7ce359e20e8b8e
MD5 9d2c85b7fc4e5ac8140483be45286f1e
SHA1 c442df4b13ca650f45d99a5ebeb57b9bba98c47d
SHA512 649c69d65dce9a09009814867800ae33a3647c2114d015d943c6325a9a49a485dbb5a12828b3fd7f1698b7fc0709acebd7488f9b61b0786ef42583f1504f6b35
SSDEEP 192:sxZERvyM/jK1Ml8M0cBcQ/fTs4rFZdpTSWNHW6+WNibBnS/YL8BkApIg5S44:sxZE5smcQ/fTs4rFdNHbZ/pV4
TLSH
T14362E7526A3499778CCBD208B965BF63D7F91462D6544E4CADFCC91C00EBAED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 8488c59755772fd8b8e2861e21fe1a81690aa069a30120b77051b5eaebdee250
MD5 a703d9af2cb09e5f224cb732c54d91cb
SHA1 7658ce9ce2b03802815dcc4c78d331c2681088ae
SHA512 026697657d7731caea5225765cdae14f58d9677ddf0dd114c5a4882df1f18b7c9ea66113f0c0e7d08111e67653a749176ab869202a402351194031cce4064cbc
SSDEEP 192:sxZKRvyM/jK1Ml8UQ30cBcQ/fTs4rbydpu2bIWgWxHW6+WN7hUbHbBnS/YLXvCpu:sxZK5qEmcQ/fTs4rby5Hbyg/zIC4
TLSH
T1DF7207526A3459B78CCBD209B965BF53E7F5046299904F48AEFCC91C00EBAED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 65a72d2524b748435e679e49e6a65a6db1667bb260b3d633e64012dcd41bd9a1
MD5 311a1b28a4153e176ce2eb03c8768f7e
SHA1 05cd7b04b91aa3ad3f3c3b426e0f43f53cb2721d
SHA512 7af1f0677d24fcdb2d05606d5d5883f2bf09d052f28ed1bf0c47b5079b226be0c0183d5c41a5a5a8d5f38f18c9380ece21def20bd36b0dc4561b5b0e72a0259e
SSDEEP 768:Jxs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNCroNh:Jxs6pD1WvxzWju1jahILIsNZNh
TLSH
T136D2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 1KB
SHA256 0759a330773b1c90730347817f32e0d33b2327a409f7751bbe8f784d3aaa0029
MD5 94fe63527283f9f223ff59d6c6592098
SHA1 f9a5613052c7d9127ce0d4cfcad121d758036a2e
SHA512 7f614b5fa0f179cf8f2b4099dcbbfcf5444f5b0343ec75ad4bab9fc655d3f63e2c40231f107731e394d5ea6cc551ccbc1b3e81201fee92e515b52097eebfd39c
TLSH
T15D31634D8EA0CD9FE4A441B21572B5A4737098DD0A26E7135C3C31327E237192A0B4DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ccdf6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe5ccdf6.TMP
Size 1KB
SHA256 d478bd235493328b4fc4a5310db3e652496c4f1be947ef111dfe170127c2028c
MD5 dd83a6a7bb340069d635b140de919dd4
SHA1 26240ab245c5536fd021329daa9a47da61f62039
SHA512 86f08d8c8697113c18f490f4976e71596fc8a509db072dace4c65a522d860aee520e4d6afafdc01eed4b8f997dbdf0a4e11c97785eafa0d6a8ca1ccfc4b34f6c
TLSH
T1E431424A4AC18D1AE8C8507B0A67B8B8B335D8404311B793987C62399D25B9E2F5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 fec6470209be76b4bbd4f498e412cbd9f2af8364a87a9652bca73ffbb97422bc
MD5 fff33617ee9a906148f7eb16411b3401
SHA1 7c4def22941a7d5305e07d404da4cbe74f1d14e2
SHA512 96255d5f3b147b2a41e304bacf7821d7c6152814a6edf895beeb7006b233a5f8129e9b164619c342ee0db915f0a4a52be5b536d9014f1970f4024daea9b23a71
TLSH
T1B5E0DFBB6EA76830EDABE3E7287094B502823D2CC805BC4F686EA6C350B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 8b9388f0c8e1bcfe2cca7a79e101b0eaeb36396837f86f4418fe44ee73f77a01
MD5 33ca6b822e7ceb26a0bf9b4f7cc4cae8
SHA1 6a3f724267ab2c0afae68996e72ca1ab86aef180
SHA512 6e1e37fe54a47c3337cdda4d4c98d8b814b90a3d6fd4fcbacbd3d19c07525843b7b68aa2bba9a056d7d17ae60b841a42672ee434ac1dc55260470ab9111b6006
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyRwIvKFWcCyx6IvKfKQrylrIdKA8wz:KUAAKtePiwQKFWvC6EKfKuurmKA8Q
TLSH
T161C1F012717B0A033D7E1B0CA255872B97427263305CA92B3BED44754DAAE394DFC6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

212a4122-27e5-4b52-a06d-a16d543d7fc7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\212a4122-27e5-4b52-a06d-a16d543d7fc7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a6991d4fcebf586441303871de4af1696de42ecc4735446cd05696c15c3fe170
MD5 b2487927fecba3914b642c8ba89c9fc9
SHA1 adda2496c47a796eedfd6b735c29520b1f09e8e0
SHA512 3bbeb719dd887a965aa12c99027f1dba86cb6a9e51ac1b64b607145f95805c68405f0ce9029726a14c9e1f8c698a44da5e91b9e439df65144ece2f194e7aa814
SSDEEP 192:u6m+xasuheOwQxMGsN2Ia8QLSHjNo7+3vx2QmiU1BJ6B4atb0j+Fd/cQzDRKLMVF:gZcIhsN2mtHpLgh6ua99d/VftZivbvo1
TLSH
T18E827C316CA86C761DB2E185F58636175FB590B79ACA6F90D4EC9F1C00EBAAC1306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1aa18ddb013bdee8c66d3e8b5ff330637bda6938c1eb39ef71f34e17e1270838
MD5 df3605338f6a4250f8178f7da3977d90
SHA1 a56bdb36abd8eb16982a590943e9f16496454dfe
SHA512 451981eaffeecf92100fade41de396e8f3f8175348b4933b3511ffe5f543244e889f3c4594551ff4e6bea8f35e8854b9dbfe9e84193bc3af02ea679f0be3fa69
SSDEEP 192:urm+xasuheOwQxMGsN2/a8QLSHjNo7+3vx2XmiU1uJ6TOatb0j+Fd/cQzDRKLMVF:1ZcIhsN2LtHpLdE6ia99d/VftZivbvo1
TLSH
T11F827C316C686C771DB2E185F5863607AFB590779ACE6F90D4EC9F1C00EBAAC1306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 2dd597544285347d1dbc4f5cf72c34002a2282c24a17fcc2e802487c8eb938a9
MD5 70b1e88e2b348e84a565dea44f9b7fe3
SHA1 a9e7f55d4166a6452548529dee43ee21c3a56ce2
SHA512 c9ed62ae96b986e4ec6b2254d26a36e47032414445ca917859a0e58085cad268dc2f116cfe17bc4ea48577d8ef5208c5b05da2eeed01bbeb9ec5927ed7707dd2
SSDEEP 384:BiFiZcI5sNE8TUNTUlIlLtHpLdc6ia99d/VfEZivbvo1:oFQ5RwgTp6+fzEZiTvW
TLSH
T1BCC23AF248D74836D9AE9743E77E2D075FBCC063B585AA50B7984A0CCC9A1BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d0d05257f276761bd3cd45bf69d583a213f909d32848aa40b5b4a79f5bbef325
MD5 9c72ac55592c2533d18c18b2476bd9f2
SHA1 64478fcea94a5e721c77026017a8871a2fd6521e
SHA512 aa0ef646cf9d7c43fbd7393cd8afcf596dc6422b3e7756e26f4e5556f5e92929e9d7786546cb59f6cf5ab13b85e595f42685fca15754527ea6f75c9bd53f04e0
TLSH
T150E0020253000499C468033000431B241B92C020015253475B2005695C213402E10581
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 660f318650d6c4d76ea941967529053dd8b09c07be3175ce4de9a7ac4ae1b828
MD5 a204377a711ee43176e36fe7c3520602
SHA1 87470d2e86303fea828a171a7bdefd9739c5148b
SHA512 1c1603ea8dff052a5dbf6f72959bdd868606c266e9f6dde605b61d51b86f70085c24902ab35b48c8b43c70d3c2eaad8f97af96c8ffcd82a99d264c11529fffb7
TLSH
T1EBE00902931004AED4AD077001831B782FE2C02402B293865B60A9796C273402F20AD5
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e19c349adbf739ab6d557d9a05146af58171ca449f365b99cbb2adcd45d5a790
MD5 98d568002d6bee7a8fbbec14990af77e
SHA1 bbfc11146f0162fbce7fa38ec08cb562fdaf44be
SHA512 5a18d9fdee5578a8437614a6ed2f1b1a1376803b6cb2fb6dc199fe19c692360d0774855575cb525dff2bdbca93aa4f660a3374c14663249dab79e38d9b7514cb
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5a49dad4530529e03958bbadd00b9938876ba033c4768d9b2e3aad5858a390cd
MD5 52710c4df9b40c36dee72c94e1de6f93
SHA1 7f064e5fdee433ae2d7251418e2c46ee1c1d97aa
SHA512 71c588751112f937de9f784af92f75d85f7a09aa38fff04e2fca16d69f3d7406601216cd62f6887fabe982a84d75a1d0fd3e015ccc769b0134c4d691bed398c3
TLSH
T157E001029310046BC4A8037001931F283FE2C02002A253475B30557D6C333402E20A99
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe586992.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe586992.TMP
Size 392B
SHA256 6dd637a5d3dde0eb5b5ee3e2126406016deb6b60a30382c18e4aa17f3b55f165
MD5 aa972c9b2defe8c9a92646afeed1611d
SHA1 196f3b146a990f6b4dbada3ea8cf41692f5d6ad4
SHA512 a34196ad3b3cd182792404238d59a4e33c0904dd8525c31b7d7d06381b0640c852afd85bba5c94066b974b6b916718880b72b1f1a1898af9e0c37b808c7df29b
MD5 SHA1 SHA512

Submit Download

a2f55940-d3ff-4d64-bd22-d0aa2fb4fd2b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2f55940-d3ff-4d64-bd22-d0aa2fb4fd2b.tmp
Size 8KB
SHA256 13c3efb35fb3d1ba71c875685fdf2e51f59d5c36fe4ddf44fc59c186af2fdfa5
MD5 35efe3f67aa089d89855c88f40399679
SHA1 a03907c6c0602e346eaedf395ae855af71a974c8
SHA512 2f174a0e9e577d28684f772f5cbec753906511c3b3491dc11e100a18a0908042ecb6b9f803bf8535a13299ca5f1760c9e11f9c424203f5ad2c6e28cc851535a4
SSDEEP 192:aONH6O7+3VQmiUypOtttb0j+Fd/cQzDR5cNVq2jU6:aONH6V5tt99d/VfoZU6
TLSH
T13B1209367CA86C674EB2B485F48736135FA64177EA8A7F80D5EC5E0C01EFA6C2346C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

618bf2ba-681f-4308-a1c3-423a50a2205b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\618bf2ba-681f-4308-a1c3-423a50a2205b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fb3951ce3c619d048de8f5ccbc901edf51ca88c241699c51557542eeb8b14db0
MD5 278ad6d90167d2f32ace5adc746f3077
SHA1 ec844ba105483cf151a5a76c053447a3204ef46c
SHA512 fbf9bc3f1b9accdfe8afbfe0af437b23da0c0064712664a83f549ec21a0905ac432e3ac0fd19fd3cccb5ea5e6931cccf43695dde126d8f78715a4176f4950566
TLSH
T1C641F45CA6F91148B3B7AE56ABF6A86D447BB9772E06859E00110D4F0A63B00D8B1737
MD5 SHA1 SHA512 TLSH

Submit Download