hxxp://discord[.]com/login

user interaction
yes
max time kernel
1049s
max time network
1051s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/09/2026, 16:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://discord.com/login
Sample260901-tm3l5swtct

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 9 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
16	discord.com
24	discord.com
46	discord.com
69	discord.com
172	discord.com
3	discord.com
173	discord.com
4	discord.com
15	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2188	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134327526899567422"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{FC8D7608-4E0E-47F7-B714-4AE223035FBB}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{CC7DCC1A-9F46-44CB-B87C-FB2699E8561E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 3756	2324	msedge.exe	85
PID 2324 wrote to memory of 2188	2324	msedge.exe	87
PID 2324 wrote to memory of 832	2324	msedge.exe	88
PID 2324 wrote to memory of 3980	2324	msedge.exe	89
PID 2324 wrote to memory of 832	2324	msedge.exe	88
PID 2324 wrote to memory of 832	2324	msedge.exe	88
PID 2324 wrote to memory of 3980	2324	msedge.exe	89
PID 2324 wrote to memory of 1976	2324	msedge.exe	90
PID 2324 wrote to memory of 3456	2324	msedge.exe	91
PID 2324 wrote to memory of 1976	2324	msedge.exe	90
PID 2324 wrote to memory of 1976	2324	msedge.exe	90
PID 2324 wrote to memory of 3456	2324	msedge.exe	91
PID 2324 wrote to memory of 3456	2324	msedge.exe	91
PID 2324 wrote to memory of 2152	2324	msedge.exe	92
PID 2324 wrote to memory of 3080	2324	msedge.exe	93
PID 2324 wrote to memory of 2152	2324	msedge.exe	92
PID 2324 wrote to memory of 2152	2324	msedge.exe	92
PID 2324 wrote to memory of 3080	2324	msedge.exe	93
PID 2324 wrote to memory of 3080	2324	msedge.exe	93
PID 2324 wrote to memory of 4480	2324	msedge.exe	96
PID 2324 wrote to memory of 4480	2324	msedge.exe	96
PID 2324 wrote to memory of 4480	2324	msedge.exe	96
PID 2324 wrote to memory of 3928	2324	msedge.exe	98
PID 2324 wrote to memory of 3928	2324	msedge.exe	98
PID 2324 wrote to memory of 1116	2324	msedge.exe	99
PID 2324 wrote to memory of 1116	2324	msedge.exe	99
PID 2324 wrote to memory of 2644	2324	msedge.exe	102
PID 2324 wrote to memory of 816	2324	msedge.exe	108
PID 2324 wrote to memory of 4824	2324	msedge.exe	109
PID 2324 wrote to memory of 4824	2324	msedge.exe	109
PID 2324 wrote to memory of 5944	2324	msedge.exe	116
PID 2324 wrote to memory of 5952	2324	msedge.exe	117
PID 2324 wrote to memory of 5960	2324	msedge.exe	118
PID 2324 wrote to memory of 5488	2324	msedge.exe	120
PID 2324 wrote to memory of 5488	2324	msedge.exe	120
PID 2324 wrote to memory of 4680	2324	msedge.exe	122
PID 2324 wrote to memory of 5204	2324	msedge.exe	124
PID 2324 wrote to memory of 5368	2324	msedge.exe	123
PID 2324 wrote to memory of 5204	2324	msedge.exe	124
PID 2324 wrote to memory of 5368	2324	msedge.exe	123
PID 2324 wrote to memory of 1844	2324	msedge.exe	125
PID 2324 wrote to memory of 1844	2324	msedge.exe	125
PID 2324 wrote to memory of 772	2324	msedge.exe	126
PID 2324 wrote to memory of 772	2324	msedge.exe	126
PID 2324 wrote to memory of 5704	2324	msedge.exe	127
PID 2324 wrote to memory of 5704	2324	msedge.exe	127
PID 2324 wrote to memory of 4404	2324	msedge.exe	129
PID 2324 wrote to memory of 4404	2324	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.com/login
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe3183c188,0x7ffe3183c194,0x7ffe3183c1a0
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,13936689860809611391,16701789290161804294,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,13453591736708931022,14704239668550602908,262144 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:2
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,16003734204911705491,8022277724945318111,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,16556262535661044847,5830386292084299914,2097152 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,12688393876081269851,1292550943941061165,2097152 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,10154301479856900939,17871605727119799781,2097152 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,9075251113597012205,9520243551746436951,2097152 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5148,i,1414515970161577517,3898411693209646671,2097152 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3416,i,9920078776606740289,17394069952143697663,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,16902464576776200998,9768073309009466804,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,1984419856235440124,4905938074508227558,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,1984419856235440124,4905938074508227558,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,2880530778013954611,1270747100395229299,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:8
  2⤵
  - Modifies registry class
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,14408221327810697794,2885460552651156115,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,7210446870624409558,10367027266920473294,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:8
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,9650963442969100370,4032141299256786117,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,522352384379048149,13843999608267175218,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,3248712533909207774,3631712534821338779,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7004,i,499765626055320955,17659290941666330310,262144 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4004,i,6912683654102007097,3369256954570500441,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,17475011055198811986,14308986336147693252,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:8
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,9687517225863405321,3967036808425471424,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,13341365345323433291,13658221251796836958,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=1080 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,12709309258201998834,2642342974604003199,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=3988 /prefetch:8
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,1991926792791264061,5860617931444827223,524288 --field-trial-handle=2588,i,13572870064606026796,982735384708703261,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:4404

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f32c2695bc115e2ea1675e266521070fbc16a920009355873531fe899a2eaf86
MD5 db6d13ac87808f30a4c48b95097e8b8c
SHA1 a16d763433ae49ccdf117def67449c44291b8b91
SHA512 d27328db56db4eb59f79ebb85c4cbac81cf12e60154e2ae5ac217ca6565246070c54aa08d08f0a0e7c5a5a8cde62ac6cd4ee5393187632bc5d667906eaba531b
TLSH
T13AE020C604CFC61D935466CF4274970CE1D03B5B93CC6B172705945930C2094639B960
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d57a784422199f86826046f0899f5cef3628e028dce9af1b02aa36e9e38751fd
MD5 5fa9209f36cbb80ca87b18ae44cb3eee
SHA1 14b3472fb0106fc1c27875892833d0e8e4ee3093
SHA512 7d019f424fbe51793f32b9af486eea62264f88da952aef439f6c03c6f77e32b4d25a28b5811984b7f18e4df55e94a2407107b84f41a8360dc3cefeb7c28da483
TLSH
T137E026E409C8C2AE9288A687836C570DC2C03F4FD7CC7FBB170188883092844B3A3DE5
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 17KB
SHA256 31ad0482eee7770597b8aa723a80fd041ade0b076679b12293664f1f1777211b
MD5 dd920c06a01e5bb8b09678581e29d56f
SHA1 aaa4a71151f55534d815bebc937ff64915ad9974
SHA512 859fd3497e508c69d8298c8d365b97ab5d5da21cd2f471e69d4deb306ecf1f0c86347b2c2cfb4fd9fcd6db5b63f3da12d32043150c08ef7197a997379193dcbd
SSDEEP 384:xhiMn1170A0I/3S+rf6tP4sM9Sys/HIq3T:Tfn11YjI/CGsP4ThsPIqD
TLSH
T17382D046CE902230F6257FF4B63026AAEA89BD0427B904D5B404E76341FFDA47B21C57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
Size 17KB
SHA256 f389a29b1bc1ca713f362b42df0b7cdacc9f3a714be5a6852481e1a561318e2a
MD5 fc71297636fbdcc274735b590443df23
SHA1 aa1100e9f1e26fc020f004df587863ff243fba1d
SHA512 a5ab7fabbcd97e8009ea96800e08d66770cca383a75093ce88a95712e01e33dcff9382972c56a552458a50934a3e98a0262b581d0b05ce6d59822b5f4247a3df
SSDEEP 384:PCv+Rm1Ecql48qVedG6o2rAG1dQhjvD2GB+Qx1nqL8KPGk6HgQ:av77HVed7p1QhjvXB+YnaOk6HgQ
TLSH
T18172C042DBD3D2A5CDB44BA99E7BBF14CA0170B96D5506EE4F30AC6248210784C5E8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
Size 24KB
SHA256 bbc80b9d2b16566eba527d621cd03daa5c90055a6759e0ce48d0351a06385b4d
MD5 1b133b0c0fa2d8faf91559c0893290dd
SHA1 fda740f67408b7845ecc53bf01a809f291f28d36
SHA512 9a1603ef44bca560aff2d32001f0de98171acaf5b748f82f1612e414e549916fe648cb6f21504a13b2f397be33318f7dfb2d91e5d10b659b29e001cfec3e7e75
SSDEEP 384:DjH585tLBVllOT8zt8Qdoaf2kttqp0YEQsj384BU+xF8zd0KYxNgtLUKBWNuupyI:f585N38QbVOOva0KrtUKWIGqAJTbAnM
TLSH
T11AB2E08364E3F653EA304DA88148EA2E21E6A7C74ECFBE25CF57519FE091445ED501A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 32KB
SHA256 7e253e6710605b3145b2adfb205abb7dcb03594467a0a138f043cffc8db8541e
MD5 62a870f91ed1bd8b5eb38d83906772c5
SHA1 6f370c244dfd7cabb50355182613b371c662713c
SHA512 e04e1b0284897b560d359bfaa89bf6b8e3a156d4cc41cd19e6900686e741d52fdb0c906024556aee192fb466b1d5001e399fdd08e4b30d7614d607a440c8d474
SSDEEP 768:2thBrlIkdL2EpO/q54jY6RM4KGEz75YdVs564Ndk9wJseFy:2rBhIkpFIqCM6yrz9S2RVzy
TLSH
T163E2F1BED1F91444D99EC93898B7B8D3CF9A6A49C455130E239373580CE0D16FA09BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
Size 1.1MB
SHA256 080c1ef09d5cd00f30887685feb71f0c0f193de342b12c4222190e330d1c1552
MD5 e82a00d94bc529f8acbcf9aebbeec16c
SHA1 97832e615769541088e1e79582fe118613c45791
SHA512 9d860e86de345426ffb51039a13507a5780163fcea7a37f98ff8e343ab8bb4619c9e4b7fd300378bcdc3461af7dc5f1fe147b17bf6df9f7964eb073241a5a7dd
SSDEEP 24576:LPYMi8Ml5NhULl3WdnhSWsig96AarAb2yvYf6n8w/jONsQLRXAHrXZfyL:LPri885TURAAXig9rl6i9/ipwVk
TLSH
T1FE352353AD1C5C0DCC35A839BA751ED290EC61B9B06700C9ECBF598D1D28DF149AFA8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 6e953203b4ee08c64fb417ddb09e0194ce14b52c38be11a1b452178353eb4c9d
MD5 9f859ccce7f5b24750789a77e4bac773
SHA1 aa048b6e7c6261ae680f0ab784e704c145fc0b35
SHA512 d651d7e4ee74a567c0b93a7eb9eb9847cac9105406b252d9b5d01f625caeefbc1ceabfd72da82da8b63901d84edf4d66952aaa1f30273d54e25ef2f51cfb4031
SSDEEP 192:TfkQx3hYHgXsil3wSXYgP4SXOGgAT8UDbMSKrjePwlhm6PEKjTspbdRH2Ft1q:jFx3OAXRg5AZg8DbtK4wnaKjYQC
TLSH
T1B1820C398871A071CB4D4DB400E25E4F317642EAE3A70F91D3F4D5367E2D76252BA6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 98e4f24629bbbf09f15627a6149e837f0bbc981d0ed163ac8a0c3891b80f0719
MD5 9921c9a01ec7722fcb5e661e75272944
SHA1 c26cb956738a971105f9212d543fb96234b46680
SHA512 9fa2dc9f0ffdbc40560bba7ee0c0dcfa7ce3cd773dbafcb4d44d9bfc20a30febf7c1864a0e90b3ea6b3ce601a343e46e7f41778fa6d75aded88fa307512c36f3
SSDEEP 192:4kQx3h8Hgksis3wSX0gP4SXOGgAT8UDbMSKrjePwlhm6KEKjTspbdRH2Ft1N:4Fx3GAkwgBAZg8DbtK4wnbKjYQl
TLSH
T115820C798871A071CB4D4DB400E25E4F317642EAE3A30F81D7F4D5367E2D76252BA6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 19KB
SHA256 d510e8c3966c900148d41272a5c8a6883eb7288fb914c1abf8b4336aec4777b6
MD5 3729c6c6e2f5184498f6ba1d92d23318
SHA1 cd504215e06e93c5989e775a287bc6e52f1cd6e6
SHA512 60de1672137a64b4c32f3e49d4bef0bf05399082369f841c718f7b3b935c85dcb477358ac8d88dfd25c4e003bfc74db86d4076afbfb2a1021347826c73272aec
SSDEEP 192:YkQx3hYHgzlpilSdSX7gzEbSXOGgAT8UDbyez5wgjpaKlhiRCEtrET8pbdj62FtR:YFx3OAzWMCOZgUDbym6rKnOtgoxL
TLSH
T13E921D39A971A171CB5D4CB400E25E4F317642EEE3A30F84D3F4D1357A2A76252BA6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 19KB
SHA256 36cc159d84e85717e8b03310e42fa267e6adaf6d0d4c2e3b0577a4fe2c8e3241
MD5 a1c6d3e2e1a505866ecd85f66776597a
SHA1 8c66e1dcc17cc501f87c602046f9538518d78090
SHA512 27f42cbb42b9c8a407dbf0ad0772a3c8afdfd17a9feb0c7a99d45e4495b9d002104dae8e4799be8639bd88aabe8805444440eaccf384e341a6710a85795df8c3
SSDEEP 192:rkQx3hUHgzlpilSdSX7gzEbSXOGgAT8UDbyez5wgjpaKlhiRCEtrET8pbdj62Ftn:rFx3SAzWMCOZgUDbym6rKnOtgoxJ
TLSH
T1F0922D39A871A171CB5D4CB400E25E4F317642EEE3930F84D3F4D1367A2E76252BA6AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 10KB
SHA256 8406a3e6fcf90944339df7634ea1721e8e72d96331d548809bbb37a504eb6bd1
MD5 f366fec76f385b930e5222f8b284993c
SHA1 b24502491da5325464e77aef2a27d3826fbb181c
SHA512 4789e9689f850e5e1c2cb2394f86d04011eb3e23eb4e05d62da429c2e2712a511a7e9e76a14a1552ece6337614b873b878e424799da333e595aaeb3d4d1241d2
SSDEEP 192:cYBYedf+p0SjtgthS40zZEjXj0EFZofHQ86zRQ:cQRdW0sK2ZqT0CZmZ
TLSH
T13D32C53188B180B6CB410C7850F11D0F757546EEF3A30E91E778E539BB6E72216B666C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58dcfd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dcfd.TMP
Size 3KB
SHA256 545fa57a87fc34cfe1e7745ee02c65583031adf2f55f9f1a6d2c689122813e67
MD5 86bb5890035299b3cec3f6f756dccf66
SHA1 1fe5c902595a4a5192565bfd49cab8ffdfc9ef8e
SHA512 b4198464cd1513ec33dc27752768d8c47c65d87a94c15cc72ab3911fa76804d72d3ed6fb09a20d6d4291dc2caff0fa108e0cb60a293570cc268d2e3029454df7
TLSH
T1F7714E348A56C4B2D7461DB050C12D0D727A8AEBFAF31ED6239C4239237277497E99B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 97cb948e09da6eb630c2d31e8801c12b6158fd349137fded44b56aaccc063bc9
MD5 07f3c4bb7c935ed93cf3f013402eccc9
SHA1 a0b84dfc26c43e2082663518d04ac2f3ad2e7dd9
SHA512 0e3b7000666d3c9abd2ac970f0f13537544ea5a567e7fe00d1724f3837654e0a517db4f33ed41533ee15cec71847a6e5572d873fb161710c7173c2cf7d8004f8
TLSH
T1F3B00172522524A7E24646F464EAC99236B89E2A02530BA391E4D0B8A8363779941958
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 bcbf6f5dcbd8757c63e32b012f349f571076f424f84b0b4d2f127e87d9a39d6d
MD5 205436b4c7bb3d64d3f06f054d90e3bc
SHA1 88034f5658dfe1bcf72d691a201a4107bd2c06b1
SHA512 f35cbc5111beccd8e5518a3d9e359c80bad58d0867e720cc751cac9348da0969a932885ed7c534d854ce97cde714d2aa5cf6965ce2bec2ab8bd01c9098225258
SSDEEP 96:D/OuAueu5qXuquIut1zBqu+mwBj4/QuEuqueiBu9uKu+1u6B5yAulO:DWz3EebTg11qrmkj44HTriBIlr1r5bGO
TLSH
T175819AB787E5831DDA1552F49A086E2FCE2C0864432C3C3AC9D1AE5BA7E3171F181B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9fab6cb3ecbbba5bbbb5703a63a097a9265594da98d8b9d784f8306730662169
MD5 91523f42c31c8be10ae1d3097cfedae9
SHA1 946a10db3c7af66d030b2eb2e553ddabd3e8bca6
SHA512 162d1424a043808eb8599fc9c246d3fb4f06537b03da0de10b726aa256f9a9a128f48888e965bdbd17c4bb521e4de16f35d746037fa3edeed48eab0cadfb00b2
TLSH
T1DC519CF3C3E8866DCA1116F09A146E2BCE2C0955432C3C3AC8E5AF5B97E25B1F14198F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 cdd3b4734214ef474434d547afd0efde9a43958ade15c8f0a5d72393336407e6
MD5 8801678c598018becb88a8807aee468c
SHA1 cae7703eb3c3173f329f61e8c97ece7d549dfa4c
SHA512 1172e8c93d849e96f9bb30dfa9a752bbd5130240adac19c61586470474baadd654fa5653846be133e693870d2b83180edc439fa900ce51d2accaaf885f9805d4
SSDEEP 96:D/OuAqXuquIuttusufzBqu+mwBj4/mueBu9uKu+1u6B5yB4ueN/umuM:DWzebTgtRy1qrmkj4evBIlr1r5y4rN/3
TLSH
T14C91ACB783E5831DDA1552F49A187E2FCE2C0964432C3C3AC8D5AE5BA7E3171F181A4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e9f2c3dfc99c07437ec0f5213e550cb81a80695ed6715bdca18a3456b280a342
MD5 04bc7a3cd44ee492a3766eefddab8060
SHA1 b1bf89e6263db12260d95346b47b6ee97058f213
SHA512 b333a8fea7ea4ead8b588752fd6819eea5ac9798b51862c8902fa45d550d7ab5169476035a946b5b03513551fa07a9f0ed31b801bc61809c3d72ea8e4dc9b32a
TLSH
T1C3519CF3C3E8866DCA1116F09A146E2BCE2C0955432C3C3AC8E5AF5B97E25B1F14198F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 f525d372ff1ae01887dbe42988a541f0c6680060c1d5dc60729b29650c78efca
MD5 60e206d189cfcfd098d58d33725ed75d
SHA1 e84d0743e10e7352fdf098ef9b5dfeac1e6fa4a1
SHA512 6ca4cf6cdff06ba2b1c35fe3d44dde6fd1f102303e3ba82581542080344630a11cde501465d4b554768698b30b1dc3a836b4622641431e040af0b47555aa33ad
TLSH
T16581BCB3C7E9831DD91516F49A147E2BCE2D095443283C3AC8E5AE5B97E31B1F181A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 9cb2ded527799f20a4da7efe699cf6c0a1251d45e4234774cd690ef5809c8502
MD5 269a8f183fe83fdb1cc50b4eec1c2f26
SHA1 6baae286ba3478ba378d5122675c98fd5c009ccc
SHA512 c4ca5243a6caf2619b63a170a8305cb7a4fe826533f4b3194edf92f3e00936a407d434c9a54ccadb03afed6d04949b1701d22fe0b805b851b095240271935493
TLSH
T1C7719AB783E5831DDA1556F49A086E2FCE2C0864432C3C39C9D1AE5BA7E3171F181B4B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 16a4296b2e35f92a35db1de19e6412d9b83ca8808029d0d6e4da4a8f1b49710c
MD5 83e597785ed153d4ea307c8eba5ff15e
SHA1 64b7abfac750c3e07fae05d9873dee2f90a32c57
SHA512 55c75dd9c09b047b306a644633fe41c5d16b00fe65228c093eeb95561917790b3075c70866df50cc4f078152e4730ce817104733367d0ca74c0266b8b3acab65
SSDEEP 96:D/OuA5uquIuttusu7uszBqu+mj4/Qwyu6u+4FuSfuWu6Bj5ymueru0uqx:DWz5bTgtRKt1qrmj44rNr4FVfrj55rrN
TLSH
T1769188B383E5835DDA1552F49A186E2FCE2C0864432C3C3EC8D1AE5BA7E3171F181A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 6703f9e73cb7449fdc970d85afeb43990c5a28e7b2eddf483befa2cd5f687675
MD5 504dd6fafe327f0f40bbce90bf243010
SHA1 5228cac786ad59abfc7106578883699635e1a0fb
SHA512 a1433fd9b5ce1b6084f9ea9fac007c219e7816958ac7c01ff579ade8867fde0034995284f4581c8819b820f460f9eec004e1a91818bfe050e6d1d2bf40476dd9
TLSH
T1E881ABB783E5831DDA1552F49A046E2BCE2C0864432C3C3AC9D5AE5BA7E31B1F181A4B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 936e8a089a9f5f126f8c51220328a97b4ff52e1475f84c2e813fe8fac206c46e
MD5 27f02fdc43a8e0a574695a933c3ab79b
SHA1 2fe5cbb8bb813b184e103bb83194cdd4f9b7f11e
SHA512 8657970763deb8a55f580de6ab0c23bb7bbd58d565124d0dc8eee32bde64079e524da24d7603a6f1f3c5cd08390dec6b05c716a1f407bcc5bba38e636db38c9a
SSDEEP 192:sxZoa8ARplCyM/jK1Ml8Mk58D/fZ8jsGaRoi8dIdpEofHW6+WNzoi8I/YI4Ko5j+:sxZVFiMY/fysGaRpxHbf/Z9
TLSH
T10252E9126A346A77CCDBD20DFA557B53DAF91472A2900E44A9FCCA1C04E7AEC2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 28ad33be1e2331b666873778e232b7df1998e20cf7f6a054fc267f0f7343b839
MD5 fa267ced4e4f126aa963ad25ab5bc9f1
SHA1 32f5f6fb16ed5013290f6ec5505470924fcfa109
SHA512 527ca18413cc0fd125f345873e1be546c009282a169cf90384f80b92076807089aa64ff3c0ede74282cec26b29cb984e39fe59a492f8c387bf76a5de2f8cc3cb
SSDEEP 192:sxZoR8ARplCyM/jK1Ml8Mk58D/fZ8js4zRoi8dIdp+FHW6+WNzAhcyZYIQEo/5Uj:sxZIFiMY/fys4zRpiHbkyyZy4n
TLSH
T17452E712AA345A77CCDBD20DF945BB53D6F91472A2910E44AAFC8A1C04E7BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 06836f8516a54ab0bfa4a7d3a27853726fed47ef9eb9efe4552a58671ac86a18
MD5 4500ef2523b265d771d2c92e4f2e1284
SHA1 fe875e100fb5d34b20750a939b515bbe810cc2ca
SHA512 15d5385aa351a57dd8a21d807b6bfd06e64a5e7a78065b99ca47deb7f865ec065939980d4cb749c7ea390d73ef098f1c23d5de6025dca70daf751d58109fd6d3
SSDEEP 192:sxZoR8ARplCyMojK1Ml8UQnk58D/fZ8js4zRoi8dIdp+FHW6+WNzNCnYIQo/5UDn:sxZIFxqkY/fys4zRpiHbInWn
TLSH
T15752D712AA345A77CCDBD21DF9557B53E6F90472A2910E44AAFC8A1C00E7BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2c97816cbf2c76a2124a057b01d7e521601dea34fdb3e6d02529a26beaf29af7
MD5 f12e57fbf1fe1974786bdceb5f71d1b0
SHA1 43446e80985fbe9205665c69297acfeaba9ad64d
SHA512 f0f809e85be95b6e29377654efa71cb5943bb10088de480d4f1c80e59eb7d8f00ee39f0951b2a0d03deb99a8abd50d2ac5a61c1c4fb0eb5e5241c4dbc1881ece
SSDEEP 192:sxZoR8ARplCyMojK1Ml8Mk58D/fZ8js4zRoi8dIdp+FHW6+WNzipFYIPo/5UDIgn:sxZIFxMY/fys4zRpiHb0Fbn
TLSH
T17D52D612AA345A77CCDBD20DF9557B53D6F90472A2910E44AAFC9A1C00E7BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5fcccd3e8666d72cac4acb48639d05ed963a9868b6eb0ea95163990802212a22
MD5 8418b45610a8203324e58705364b3e4b
SHA1 e8b958d32e78968b61bc2649fee523b4f6175f12
SHA512 bef3c08287a53dcd16fd17d687ac8ac4e150e39ee31ce846c61991d3d3be2089b8dd69c3ccb58d32966932fb1fa9a38cd7c0dad01d37c48e55ab86bab298cf99
SSDEEP 768:pVsqxXlWvJD0T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9+ropuW:pVsqxXlWvJD0Tu1ja54LAs9VpN
TLSH
T120E21B3B694CC77E4F840E5DEC26AED76ED801CBA6988D4447FA880C03CB3EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 2KB
SHA256 77be6ec25f334383b5fdbe74d89db465d190813c836a72b5a2169e559c811d2d
MD5 3a4cc87488fcc2427d65565fcc8e33ec
SHA1 d0ec4c6faec61382137f165f3c88aaf7b16d7581
SHA512 811dfbcecf2f4a68a02d7611adb44fb399afb53b12daec3118fa50caee0708a17b6438a3f8caf0f443e3fa68e2ef96d6d0fbb47f6df47c9d165d825125433fdc
TLSH
T1F441868C4D958B6FEC58857304B2A8A433B0A8CC6B5597177C7C26367D1335E365B2EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ce268.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5ce268.TMP
Size 2KB
SHA256 001d9da0670a923471021af04badc2eedd52621e06f42cdf6cdb889a41e8c1be
MD5 5718e08f8e4bb3a8ca7c93fc5a60106e
SHA1 cd8b0094ddc5f6bf9a72ee45081a3f1a1c64bb46
SHA512 0ba7cb2cec47c00414a13902d3fa240fea08c54b56b4a293badab31290e3d9cde891712f7f11cec1c11eb24d94fd2b7c90561c76f030e84bcf14e930412a9661
TLSH
T1F241DC854E81C61FE88040730DD3A4B47335990087167F4774BC5536A8A27ED3E4E1D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 6225b596b3c55a15c0f76df83c467497f09beec0465fc5cb3b7c9f62fae95fc0
MD5 7179d5977043dff0639e5a9c8ad89a48
SHA1 e978297125250034950b419a95ce7bc61499a7cf
SHA512 74842eeb5d9f33df96467be2725189b9fc9629ecf57267e977820b7446044ee25717289ffc84a76f964559265bee5015d6540d9099acf4193aeaf6832dd182da
TLSH
T14BE06FBA2AE70C00A8FBC3EB08B344A60410F828C891EC8F1029928310622A02826C26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\5491950c-ee56-4e7a-82a5-c780ac6368ce\index-dir\the-real-index
Size 72B
SHA256 01218d1bb7b810d28d1e7587e3db445e7631dc16431a1c79785d0760277d970e
MD5 e650996c6fc2c738de02279ff61786d6
SHA1 91c6348b7c0ebaf270cceebacafa4537e3d17663
SHA512 78fa4ebf775091ad7a0e4d9b4e9076ddb0ba63e26fce50af4b631355dd05cdf36359ba7551cfb7f92609d2c80b2d9c92411739d1c5eed849a9a227ea8ad1ab33
TLSH
T184A002248281424AC2181E771C7361503A115815C9411A9691E0505DBC612884612D44
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597e6d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\5491950c-ee56-4e7a-82a5-c780ac6368ce\index-dir\the-real-index~RFe597e6d.TMP
Size 48B
SHA256 6ce8283cf1ee8fa187b5157c089a2c80bbb6d570137057feb0c03d6d9cc76c16
MD5 512a5ac857c2d178fc1f95578fe9a96b
SHA1 2d6cda81f4cdb0db38a104989c420716f2c52181
SHA512 27742b892de820330ae7352d8d96e92a531d5c03766d5473609b4d0a53353d0895d308107640ffc13dd1f39f0f8c9cb220252fe0322a5f31d939b4423238bf4a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\54c05660-76b5-44f3-8964-7f10bb1bef44\index-dir\the-real-index
Size 72B
SHA256 3a83cddea426fc9d44b136ff789a033ddcdcf02974276b44f5c0337606b690a3
MD5 9e87f04ca6f9100e3dec63f276a7b09c
SHA1 e5acdf92dcbbf979cb705182283faef15733b970
SHA512 6265fc03ebe68b99f9cdf149a733d41cbca05a3607206bf7cc2bf7ed97a33516cbe3722f1989e498ccb341f68cbb564585c42a33bc437b12f745d45a4554d6cc
TLSH
T13BA002359D609413F1020BF1186111C52370CDED49520642529D454DEA5A6F25986148
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a723.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\54c05660-76b5-44f3-8964-7f10bb1bef44\index-dir\the-real-index~RFe59a723.TMP
Size 48B
SHA256 64a6ea59e20f02405f5ff0a4c0fcf67c141a7955d86788a03c9a6e11da4bc25e
MD5 8f4a2f685ee9be492ce459fd7c78e9ce
SHA1 bc096f2441e3ebb3d61706b5e800ff83f7f07ec8
SHA512 3c79a90e34f7d6b1496d4bf7e2f351c971d2b95e32bfe7d43fff550748147ef0f53a2b74969c1103ddb8364868287db088b2f990ff12c2b7eb7836575d3d6faf
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 1d75c28a8cbf6e3cccdb1a06dc62696e61de3d836e2b996b96e6136f9304917c
MD5 a40073833952a58d33d40220d0399825
SHA1 9beb23fa0b09d4f74706e193fcb97a9cc890da69
SHA512 d2e44dc79ba10ffd8dd97b31fa708bc5cb81d13bea82160bdce22e832c3dcb1ae407c6673529b42b7c27128b360108f26576361f197d5850925eaa73ec8add11
TLSH
T17BD09767E2680148CDAA4B8006160429432024CCA0CEE24DA402C6690710B036203FA3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 5493bfabe31945de835520d7d9b70a847b53841b13dd468147cdfb5a0cc28b32
MD5 41d57ab095397ed5b49023a52ba6a6c5
SHA1 56d253267465b16f8e71ba1b3e081f3c6d7a0fea
SHA512 d4c4d5022c52daf0ec705df1da938180577c09ff64eb68a6cc1b04222b2e3d9e2932ce4ecc42f897cd05827f89eededca74d989b156a7affbf84bd87b5401f6c
TLSH
T194D09767E1740048CE6E0B810226045A43102CCCA489D14CA442762C0B30B439312FA3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 6feef680c0d804460ff489c6cb87f9dc80d4023bb4744470817b2321602b50d9
MD5 9a87bc6e32143fbf60b678562d0834d1
SHA1 41eec94c138777f939c76b131342b632915897d9
SHA512 162b78e31b6d9b34cfd20357467a40d75ce281fa9bb079ff5b868064ed8496257bd2c609af4f0a07fe6fb5c9115c9627e61a7e82a91f81fe1ba32200a1e7e373
TLSH
T152D09767A0684148CDBE8B810616042A430028CCA08DD04C744246780B10B535303F93
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe588400.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe588400.TMP
Size 138B
SHA256 00c7c6707f268cd7f91fa873db0620dbbff8eb9a68030522c38ca4dffb39cd55
MD5 c3053f51f7efbeab416a2a974c7bdadd
SHA1 5c378c7a05c66ef69577e8f34b221f3c5c0969be
SHA512 207a489daf542b04a3905ebf18e6a578fa7be5a79de4a0863fe5690e9102b957a8573484c29425d0397d282b1be983b564368bca34abd755f5c41e549efd36dc
TLSH
T1FCC08CA7A2A401188A1903810327010883062CCC99C9A04C74037A242130B132206EA2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 fb718b3b3ea70ec38d55c818738d8fe3f44a1dfd18a457fd857b8bbd391ebfb7
MD5 5b1b952d1f24bfd44d09685aa7064d9f
SHA1 f521f93a6c72c9517948e5dd12ad0c95d54b9316
SHA512 2ff1b1cc3ad238386bfe79c63385cf73e562d1adc398cd52259dd763f92a0cccfa022b2ae0716577c621c0a824046ffacc430f8f3ba01243273a147e40de76ef
SSDEEP 96:KYbaKYIKS0QKJ2ihan2K0Isk8I5PWCkK+BWMkyqKZ0L/WKE0K6GMK7S7vO1Rf4:Ex7jVjd/0
TLSH
T19AE11216713F024338BD3818E36686369E4272A73818A5BF7BB840A55B67E121CFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5937b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5937b0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7eca9058efdc6d89328a5f000f8dc1e2c980179f9dd6658c5ed3ec9f24943732
MD5 f7e1f3ab95c13877bd743e5c57ada0d0
SHA1 af501cce9116fbf9fad31ab66e935ea210e4f2a4
SHA512 80f84b0e2f3f82547d2f940892d985e53065fafb724355def6002eddc27b1464730a5511e1723b5c4db3c90d82dfb000092a5a704ce33cd74629ddb1edff8a1a
SSDEEP 384:FZcIhsNK/6qkbF2OPNrVRNMOKx9l9G0X1puLrxo2:9hBh+NpHMOKx9l9GsyLtB
TLSH
T169827D725D745CBB69F6E145F58B32174EBC9037E6C92A80E0DCAB1C01EB599031AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 7a2d87dfedd6fe0b1027eb45eb1a749d59176f3b47401f139f5946c59e795378
MD5 0bac891bddeb812f6c5867519ae0ce1d
SHA1 8e2c61a273697dfd15204d1d374bd02d75d87213
SHA512 1fb1a7eedc41b7e1b0b8a35bdd9e27128e75a0b7d50ef6af4723f452cb698b9636648dad07e875a31d6338e2a24e0bd7a971a5b13e4d3a74893970a492589a1e
SSDEEP 384:5iFPZcI7sNS8TUNTUlIlO6qkbS2OrNrVRNMOKx9b9G0X1puLrxo2:QFH7DwgmUCNpHMOKx9b9GsyLtB
TLSH
T17EC23BF248E7497AD9AD9743E77E2D074EBCC063B5856980B3985A0CCC9A1BFC30AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4db6493ae2324d9d2579ccf73ba8bb1aa1d3bd6f9a547f0be4ebb92d1a12a2c7
MD5 e0a8384fd9f5c69d203414a2a5bb423d
SHA1 b6b5da157cab91ace7ab256aa2c56ba83c0bed40
SHA512 9cf418ba2ba33cc57a9ce8fed9c22ac91bc97ccffab99ef8c3ae1e26830f0b475e564ac57fc0b5ea2ed07fa9d58ea77cd901deaa62179cdd02e00f3db4ccf2ec
SSDEEP 192:tONI6JkRtQmiUyo1lo1zW+RNMOmEoIh3rKRCU6:tONI6UrJuzW+RNMOKYTU6
TLSH
T1A202FA356D786CB79EF36E09F98737175FA8106BE9852F80E6E81B0C01D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ff7f35d2472b9d7f17af369be9147ece553553581096f847cd11606a441a7bbf
MD5 0415fe76b5ccf0d4925e42ef31afd829
SHA1 4af41b0a6a61761d8f9074a9c47fe5e1e25a0a79
SHA512 1466e5334c9abb09a7ea4616cc27c794ae6e93468aa14b810f6f16c3ade0c8a8d3f43ed7e29b17d6d48aab17e933fbaee1204ca8282029077d3b735ad681c2de
SSDEEP 384:5iFoZcI+sNq8TUNTUlIRO6/kbF2OrNrVRNMOKx9KUAG0X1puLrxo2:QFW+vwg/RCNpHMOKx9KfGsyLtB
TLSH
T1F0C22BF248E7497AE9AD9747E77E2D074EBCC063B5856980B3985A0CCC961BFC30AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5be18a917b75b3f7c9598ae49aec5022bc9785410150512579e7ed958f0d66d2
MD5 a01b70981e01a84eb91a987e96a66829
SHA1 9e3e96923acab7d85c85f73ba0dcd9465f7333a3
SHA512 997b7e2b3fb283df5bdea36acaaec52b78801e281eee41b120fec824022a73a89b5c32c7cbe4fa8068da7843e5ecaf0db4f15652e2b81fd57a766f8cd5958220
SSDEEP 192:aIONGU6JkRVMQmiUyo1goo1zaY+RNMOmEo9X9jQVcrxqnoGU6:FONT6UeJg3zp+RNMOKx9r9GU6
TLSH
T16C120C316C386C775EE26545F48731535EA95127EA893F80E5DC2E1C01EF69C134FC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2db2b52b557510c1695e4000f49e374568449a0cc8372be1c59812092980c146
MD5 ea1919cb53e8fbf77dc8c5e5289ad34a
SHA1 1989fdca7a1fb6022c32c8681e20002dc9e21650
SHA512 bc354152a30f2cd0a1a8ad4bca839580d3730d94aa6648131568b40eac85f69ed2eedf251974a4c83ec3684573be6e515c560349cb28bd5c35452f76d299c7d0
SSDEEP 384:OZcIgsNKO6qkbF2OPNrVRNMOKx9l9G0X1puLrxo2:sgqh+NpHMOKx9l9GsyLtB
TLSH
T131828D725D745DBB59F6E145F58B32174FB89027E6CD2E80E1ECAB1C01DB699030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6ae5966e9dff805556177d493e61a31a78407021cf3e69096a7df2e8f1310186
MD5 4202d3ff38941537457862a2737ec66f
SHA1 d63373d2a771b4f6ea010aac25c8ce38fe5b6e43
SHA512 2468c87cad34e708bba996e20e1299810b92ab097fc480bf162401a8bbd468d2cd7b16a491392716eaee805ad68fdf5c8335053b729db9fd3702344223aee9db
SSDEEP 384:AZcIgsNKO6qkbF2OPNrVRNMOKx9G9G0X1puLrxo2:+gqp+NpHMOKx9G9GsyLtB
TLSH
T118827D725C745D7B59F6E145F58B32174FB89027E6CD2E80E1ECAB1C01DB698031BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d97ff074ce147fa9240e7b66f8ffddcaa872789fc44069de34dacce201e8d379
MD5 45bf01e8f3d48ed55a214f04ff3d3437
SHA1 97c1980826607392bf77e968371a795994f5d7b9
SHA512 879b0c3d01837866cc5407da1eacc2f29c65d4af47a924406800e2b7ef7ef8e34b111059a44378826ae90a2003aaec1790f626a64f96ed95a62b0a703283a7e0
SSDEEP 384:aZcIgsNKT6qkbF2OPNrVRNMOKx9l9G0X1puLrxo2:YgBh+NpHMOKx9l9GsyLtB
TLSH
T114828D725D745DBB59F6E145F58B32174FBC9027E6C92E80E0DCAB1C01DB699031BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a7d17716ec56d75462d21db85e6706702b7f3e226c7967d6fb9251d82c1bdfa0
MD5 ad971799c410bb57e926cfeda47c0ad2
SHA1 b821a5b57e04de057b8685f4ff5dc55121c192ff
SHA512 fa6c61eaf72b709466cfaf93eedbb969ed814047fb37032eb932857cdc482e87043457f57c2e771947a4e2eab4af17479d626d96953145f8bdc5071e03f1038b
SSDEEP 384:5iF1ZcIOXsNq8TUNTUlIRO6/kbB2OrNrVRNMOKx969G0X1puLrxo2:QFNOXvwg/JCNpHMOKx969GsyLtB
TLSH
T131C23AF248E7497AE9AD9747E77E2D074EBCC023B5856980B3985A0CCC961BFC30AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 97c7a481cbb4633dd0585decd8b567406e14ffcb50097d53ffe732b77545ed4f
MD5 1d50769de4dc4e07433447c7363626fb
SHA1 e88797b92f3dadca277118c979bef0668aed2a77
SHA512 8267fccf79a8c26e014b5ada2f0499dcc2d562e0c5ff19fa46f2c390153487362511e3c51ef86e6d6cc43aa92b4943b4f39360767132d09502be94faa9270a40
TLSH
T1B2E00207570100D9C028013040871A202F5340B401990A459E2001585C213542E50880
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e24b0bc0802a186efa389abb183a84f3d2dc29cb2b3867f414b305757f671321
MD5 fe571bebf42a7cf2ec8f00d124b72561
SHA1 a37a60cd43df0c5067f4c4d6e9726ec83459b8d9
SHA512 1aca952e5deda4b6d7544e32f8040f27e086d0d5589c6fee3fe3a7ffd3e6f1f7013beebd93763dbdc86fc978f65cf04717ac0b986f004d97b1bd25d639737913
TLSH
T146E0020BD70140DFC038033050C71B303F7380B4039B0B469E2001797C213542F508D0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe595700.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe595700.TMP
Size 392B
SHA256 f09aad542c4084f568334eca04c2fc8cb48a16af77349abd96edec484ea0a659
MD5 b53969d3823201d9c9e66d3f538cef6c
SHA1 1543a28251fdaa407f0c585e74c0bf6af9400703
SHA512 f5f037f76f9b4b79cec68db1024ddf1f2921b6cbf913b5f4d2ffb4162f7ed9171a77eb7bb1fa0ebc755dbd72b2af18253c8d370c769e96a539577a024bdd62ea
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ea8c6cfa94fd2de16012f8b26d13f3218bfe89d311ee3b4a76b4222eb3142fda
MD5 a731c4d808682557c81a40274c0263e0
SHA1 bc1ad7e5cc476ff319c6b15d91f8be27bc1d5ad7
SHA512 ffcde48faeb457159de92c410fa68497c55a32a0f04bf1c54e1850a2cf48883b99c28bc3231858809c18fab098c292578cebf3b99f1166589f7cb074e5a39c06
TLSH
T1B141EB48E9FA1148B3B76F599BF6A8AD497A78772F4BD45D00010D8E4A23F41C871737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download