hxxp://google[.]com

Resubmissions

10/09/2026, 00:11

260910-agsefat1az

10/09/2026, 00:05

260910-adnbbabp5s3

Analysis

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
269s
max time network
265s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260910-adnbbabp5s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3288	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334723981683943"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{E0751648-328E-4A0A-B694-935F05E54696}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4072	msedge.exe
4072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 26 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe
4880	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4880 wrote to memory of 1396	4880	msedge.exe	85
PID 4880 wrote to memory of 3288	4880	msedge.exe	87
PID 4880 wrote to memory of 372	4880	msedge.exe	89
PID 4880 wrote to memory of 372	4880	msedge.exe	89
PID 4880 wrote to memory of 4840	4880	msedge.exe	88
PID 4880 wrote to memory of 4840	4880	msedge.exe	88
PID 4880 wrote to memory of 4840	4880	msedge.exe	88
PID 4880 wrote to memory of 4236	4880	msedge.exe	91
PID 4880 wrote to memory of 4236	4880	msedge.exe	91
PID 4880 wrote to memory of 4236	4880	msedge.exe	91
PID 4880 wrote to memory of 3676	4880	msedge.exe	90
PID 4880 wrote to memory of 3676	4880	msedge.exe	90
PID 4880 wrote to memory of 3676	4880	msedge.exe	90
PID 4880 wrote to memory of 204	4880	msedge.exe	92
PID 4880 wrote to memory of 204	4880	msedge.exe	92
PID 4880 wrote to memory of 204	4880	msedge.exe	92
PID 4880 wrote to memory of 4308	4880	msedge.exe	93
PID 4880 wrote to memory of 4308	4880	msedge.exe	93
PID 4880 wrote to memory of 4308	4880	msedge.exe	93
PID 4880 wrote to memory of 4112	4880	msedge.exe	97
PID 4880 wrote to memory of 4112	4880	msedge.exe	97
PID 4880 wrote to memory of 4112	4880	msedge.exe	97
PID 4880 wrote to memory of 4912	4880	msedge.exe	98
PID 4880 wrote to memory of 4912	4880	msedge.exe	98
PID 4880 wrote to memory of 1624	4880	msedge.exe	99
PID 4880 wrote to memory of 1624	4880	msedge.exe	99
PID 4880 wrote to memory of 1196	4880	msedge.exe	102
PID 4880 wrote to memory of 3452	4880	msedge.exe	111
PID 4880 wrote to memory of 3452	4880	msedge.exe	111
PID 4880 wrote to memory of 3452	4880	msedge.exe	111
PID 4880 wrote to memory of 1436	4880	msedge.exe	112
PID 4880 wrote to memory of 1436	4880	msedge.exe	112
PID 4880 wrote to memory of 1436	4880	msedge.exe	112
PID 4880 wrote to memory of 2400	4880	msedge.exe	113
PID 4880 wrote to memory of 2400	4880	msedge.exe	113
PID 4880 wrote to memory of 2400	4880	msedge.exe	113
PID 4880 wrote to memory of 4004	4880	msedge.exe	114
PID 4880 wrote to memory of 4004	4880	msedge.exe	114
PID 4880 wrote to memory of 4004	4880	msedge.exe	114
PID 4880 wrote to memory of 712	4880	msedge.exe	116
PID 4880 wrote to memory of 4984	4880	msedge.exe	117
PID 4880 wrote to memory of 3796	4880	msedge.exe	118
PID 4880 wrote to memory of 4244	4880	msedge.exe	120
PID 4880 wrote to memory of 4244	4880	msedge.exe	120
PID 4880 wrote to memory of 1380	4880	msedge.exe	121
PID 4880 wrote to memory of 1380	4880	msedge.exe	121
PID 4880 wrote to memory of 3744	4880	msedge.exe	122
PID 4880 wrote to memory of 3744	4880	msedge.exe	122
PID 4880 wrote to memory of 2832	4880	msedge.exe	123
PID 4880 wrote to memory of 2832	4880	msedge.exe	123
PID 4880 wrote to memory of 2832	4880	msedge.exe	123
PID 4880 wrote to memory of 3596	4880	msedge.exe	125
PID 4880 wrote to memory of 3596	4880	msedge.exe	125
PID 4880 wrote to memory of 3596	4880	msedge.exe	125
PID 4880 wrote to memory of 2136	4880	msedge.exe	126
PID 4880 wrote to memory of 2136	4880	msedge.exe	126
PID 4880 wrote to memory of 2136	4880	msedge.exe	126
PID 4880 wrote to memory of 3380	4880	msedge.exe	127
PID 4880 wrote to memory of 3380	4880	msedge.exe	127
PID 4880 wrote to memory of 3380	4880	msedge.exe	127
PID 4880 wrote to memory of 3748	4880	msedge.exe	128
PID 4880 wrote to memory of 3748	4880	msedge.exe	128
PID 4880 wrote to memory of 3748	4880	msedge.exe	128
PID 4880 wrote to memory of 4780	4880	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7ff9b409c188,0x7ff9b409c194,0x7ff9b409c1a0
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,3981654205446983207,6769125187249315304,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,12351693816834729076,14141211928102229502,262144 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,13616036679170489474,10782393422702583641,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,8536309444036805584,18350027337577066837,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,13006787759168455411,12096759686304593890,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,8014714117560518511,5471140766694932585,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,6629554663796822265,11227650356846164139,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5000,i,7350494325234799614,8192687024134610642,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,5691938880052952213,6395360937665510055,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,2659017444279973906,9689435691849319392,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,1802119112010132605,9505726419896160845,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,1802119112010132605,9505726419896160845,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6320,i,1826585581055404982,10575645974878240991,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4296,i,15641073246142314369,6772817787712611645,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4896,i,14486481641355428144,14825078634104968423,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6508,i,15744782873632913597,11092431896632333373,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,6916893788617562444,5651201501603820653,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,9099107163279111463,12449545974783456268,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,3084536618909318309,6425005553135778329,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,18262080940002883843,12324259258952932859,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,3706670281786359968,8843332489281270387,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:8
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6840,i,18306708971224123428,3690639684046853841,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6752,i,2178153032200735796,10558958813344233853,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4940,i,10990299891973702816,7314135463307727003,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7092,i,8807854138597170578,11246207692496882113,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6952,i,6638407425806117670,655857874787479599,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7264,i,14855134064442556393,16832367662840122341,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6892,i,1437000627608310190,12884078511535180252,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7460,i,18260937050642818850,12640945806212197821,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7652,i,3215072039605993324,12103783928851269717,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6608,i,15380567715829917614,11317573338881161687,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=3904,i,3407707339923849964,9869858371232333814,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3436,i,10543516168285013777,10379655929736140576,262144 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6960,i,12407786441061684337,10069729256186781205,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5664,i,11333221614223199669,15279164501540073889,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5436,i,11730349863535352820,2241325249745632177,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6792,i,13476262303040927343,12420065967935281426,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7764,i,12159063832838812397,11404992575079205592,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,14311119132480248712,4830608760958935148,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,15907811408215077139,3116629749806552027,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8092,i,3222128013614044253,3461584846651389136,524288 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7176,i,9829504760378308645,16964747911880323483,2097152 --field-trial-handle=2332,i,17263192953908161648,13850317228741288308,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1
  2⤵
  PID:1880

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3048

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 293B
SHA256 5d11a808ec2b54e8029c585085021806c062f426ce16f0d24d12c81517b841d5
MD5 17d05536b2a2d0605384985ea6f78ef3
SHA1 155fdcd7d5f2234b36048376a81250352f9ca764
SHA512 452c636c7482b2c9035092c064c5c10a33b8a9c45ce3f824dc4bfa162f11720512624aae53c56454f94bbec86179755b000ba26ecc6ff8946af2814d5500a6ef
TLSH
T18FE0CD5D45C4E36B5305A5C745184B8E81D8770B9ACCA70E1F04C4483547489E5E65B5
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 43KB
SHA256 14ef713f8c26bb48eb58aee7291d24bfec7fe04461af055f0c9ad63a298c5a93
MD5 e7f31b312430a58beebf02569971cecc
SHA1 6a36445d1f2bd9ded564f13fb047b896f1ada7db
SHA512 f069e3981fc381c27bb2f3c1a36251142fce8661d614f92058b9418def9a950323957fc9df7453bb671b7639869542656cce9df96e0b45e6e12a6637ebc6e1d8
SSDEEP 768:3CZ1Qapm3DP4Q8Ag1BGBa0p/PE+4dxquLkDOBFwQ4aUjnlxGR/Yy:SZ6a43DP4RbGBa0VPE+pWkDOBFwQAjne
TLSH
T154130200E0F0CE82941B5C8A0D78948A7B210AD49EB5737486E8DFF7C51BDB8C6DB05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 b261f8c42d99473c817fea243dccccaa2bc80088c5edcb59be3eec2ed8634f80
MD5 7d735316b8e6dec76c32aa8c49f80a9c
SHA1 ed45148e689c8c57eacd9d9fcad4f8e8b3cfc658
SHA512 c3ecc25da636df806d3999ca0c6d22ce13fc9230e07b079c505811204fddb3597d1c66f39a884671c1f50b6066a0d21c2a694a756d91381ded25c288d8d772be
SSDEEP 96:A4KNVNyo3TjTzLTYglkQEVULH7aVLLAUWo52s57C1StHOlzcxNehuncm9bh+qwpa:iVlvL8sk/VULqAzoR5ewhyGcqsqvgRC
TLSH
T1CCF1D8B634E14794EB21AA30C6D6A8B6B5B01DCDF107AF478380FA39090679ECF551B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 994993d515650dd937ffc3629fd289897b404dff487e2764967b51c2d2f2fcb9
MD5 b7f73d4cb2ae675712037692c41187b8
SHA1 2a3c0a54022d855469f7e580633e83edfa8e4993
SHA512 2eb0ae575644cdef3edfd34b25bb2e1a3a0646a1206d0ac0a480104592e19ca13a4e349503721efb5763594a6eca0390d77b85a6b2cf34a98f63a03eeb21ae8f
SSDEEP 96:ucNAEHz4QEVTy+/SozWCxadStF3cmohhKMdOzV8d0:LCW4/VTy9CYoYZd+2q
TLSH
T1C2C180B234E146C4EB60E67182D2A8BAB4F02EDCF117EE471380F5390A1279FCB155A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 6cee30f8b4305b27fb8e3fef5d8e8123eaab1f8399ac72a6675a2eb35f105dde
MD5 a24d8e9e763b63a97b838c04422edad4
SHA1 013f3a729be80c80f7ecfe9bf518d7170a5b0490
SHA512 ac12c947f60a85adb1f1e1a7d71736f976574282adf5dc56ce289b3351d7547bc8ea130e17368a7fe4db17ceb6ee3deced816828316826ec5abfe62191c8b241
SSDEEP 96:6N50tBEGf3RhkzQtAX/FH581SXW61HyzTq:6kJfEz6i/QT61+2
TLSH
T11791717128E14754EB61337143E2A8B9F4A02ED8F617EE861380F5791A167AFCF151E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 a0edabee8453cf4d0e4b431844fedb4f2ff647797ae39c947563754636736b52
MD5 41ece4ede66ba370eb9604cdfcb50496
SHA1 d5857c9f699cda6ce321262648321eb1463ce3d7
SHA512 05c714f5997db53d5e33eff126099abb81dc63f0449008d063f179637b0df75d0a720e6f712eb98f11ce60911492094fdbedc4ceb239b90f9f2863d3255074e8
SSDEEP 192:WVu5vL8Tc/6ULJAz0XRZPPzk6cFNLngRB:WVwz8A/6Nz0XRFPY68NURB
TLSH
T10202C7B534E14694EB29AA30C6D5A8B6B5B01ECCF10B9F474380F63A090239FCB654A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe593426.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593426.TMP
Size 3KB
SHA256 1c200915264a9f135670b7adbcc60aa5daa42e6bc6e8821e92a3ef59664f0330
MD5 b450dd4f5232dbb1c9b6518ae8f06e2e
SHA1 6efa42c7b51099771730e8b4cd77b6e225068823
SHA512 ca8ba6cfc8dae4a608c8907cd9a6a3e2feb3222f591fd52123a471f14a0df211ff24813d39263dbd20df9a2c512690b17a790306fb289acaae8fdd66ec6a691c
TLSH
T1A261D73409E14B95E31133B083D2A5B0F5641ED8F957EE862390B87D4624B6FCF156E7
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 c7cccf1279b16bddf0ef75349bd231683e32fadaf746b4fd7b2ae8d3dd06d54b
MD5 c79661776c3bb4f08a1052cc6875dd20
SHA1 2b78d2c55e3f04d839ff5b4d5ea499887fb7d3f6
SHA512 8dda8e87e0f94342f715623ad79d57a84d1a49d2c06b0bb0f852a69d56f2c47d34f02c9e6857870baae857f30b2175a39228374df1d563c0a40c117b153f3d8d
SSDEEP 192:DcwnFgX9RaJreO9BeSRBjUd6kZRDGN31K+7SqS+iYvBw17iYy61H2eXilkFx:DcwnFgX9RyreO9BeSRBjUd6kZRDGN31S
TLSH
T18F229CF7C3D8836DD82192F49B153F1ECE2D0D2843283C26C5DAAE5B97E2972E14165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 64a7a40c26008b83b23bee5f0ea497bcc2564f7f0a008da9e82876d846ac9e76
MD5 a8e3b4786e8fd6a3c80d016f2139c81a
SHA1 158d708503d7d071dd1b381e431b0bae0730d772
SHA512 7c8aa2614622dd116d649b044a9637e188fb25a8341bcbb6743a47fdb42b3aaf02aa274d950be76036f288e3838e0961a8e458528ebb1e582f9f0b4d68a9b159
SSDEEP 192:DcwnFgX9RaJreO9BeSRBjdaD3ed6kZRDGN31K+7SqS+gvBw17iYy61H2eXilkkk/:DcwnFgX9RyreO9BeSRBjdaD3ed6kZRDC
TLSH
T14A428BF7C3E8836DD92192F49B153F1FCE2D092483283C2AC5D9AE5B97E2871E14165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 22KB
SHA256 b2e39936cf2952feec2de7cf92933547ffe47ccecb55381362c45b53decdda46
MD5 bdb4c5b9bcdf5f705443741533ebb821
SHA1 c944d6b7ae472419d88ff4ddfa19e5b52e4bbce6
SHA512 64b0bd1cf02f125a44b976965c1b29ae3a380bb1d59ec5546a9485eced55bfebc85c3c827a6c4d90a6466ab4f770bdcb47c6c722f5f43e6c2a03352ea3fec47a
SSDEEP 384:DcwnFgX9RyreO9BeSRBjdaD3rXVeAvPkBeMd8Uecg2lGwJZ4d6kZRDGN31t7SqSR:L9n3UTMJHTM
TLSH
T1CAA2CAF783E88A6DDC21A6F06A153F1ECE1D0919432C3D1A89D9AF4BD3E2871D14165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 db85ddf58f94e8deff1975ab0b1d885250964e41c4096db7e35fe3186cac8c46
MD5 e93949c69f19a9e9507192d51d3fabf7
SHA1 12d1fcb7bfa3b0c6c8754d076d0e4e417a668dc0
SHA512 b24af136742a49d9d135e8a7343a1f6c82732f351b9f83357a7eed9622d82fd665cde8b45c5d4de2870212f1a2081c0c98ced9299732bc0666f379bac4617491
TLSH
T190D02263120530B9A67C7EC664BAAC8EC7A630210852BDD8A0D05EA915334AC0917154
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 210B
SHA256 1dba072bf7ba2bef595fbf08ea3b9bd40026c6164d5e3638c74632f3a764b19c
MD5 5ecba5114c7fef163a44481f01f2988f
SHA1 161b156f2b2ff2a772cf69014bdb2ba9db5e807e
SHA512 3e8920053275e3d38d4346d6ef334fa5fe7725f717d7ae8d6d5be3e9d467de920d61d857d29e428781b04635c4661877575ee9c05fa73e5219705dbb542c3e8e
TLSH
T195D022A3120130B5A77C3E8684AAEC8ED3B620768862BDE4A0E09A9805334AC0927144
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 77407156cc63a2d8d739aa99842dafffb43386493fc8745aa28c0a8cc2a117bf
MD5 5d9b91e9f245ca7c9ffabf5fe79b3d0b
SHA1 8b7f2d263e3008475dd30a9cb8b56e6a0cecb9e0
SHA512 20cb5b73a196c47bc94ee59bab634278fe841e1a4f186183a6828fc1f0c2e45e6909238470eac9ad005493c29803a41d0050d8135b5d4eacf42254375af00771
TLSH
T102D02263120470BAA67C7E8664AAAC8FC3FA20214852FDD4A0D09E9C05334AC8507260
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59cc5e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59cc5e.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 94273185fb8139c1bb2c3778cac01e26eed353f826cc40f2a1817c5c8770df6c
MD5 7cf34d0f731d5a62400610c96b5566b9
SHA1 4fd23459876de5b2d36b4ff4d77a17446ac4c64c
SHA512 8d1ed9c51df4712ed4a39bf59e401d4baa893ab06a28247b8450485089d46f0186f742dce03888f82952b76b07a5587038ef1220a0786a85d97215663c7878cb
SSDEEP 192:sxZWIRmWB/fysS4TIdpqH1HW6+WNrzv/YCvers1IgrJ:sxZWIDB/fysJMAHbH/YU9
TLSH
T1AF22C9526E38A97B4CC7D21DBA25BF13E6F9503295D51D48E6FC861C04E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 44213b066e73cfaddd3ea62cb2133d151d4d74e9f32626b7201ab4cb20ac06f3
MD5 1070d5d606da3914486b011b654ee210
SHA1 31ae526eb7ed448d7ebea4733d6c586f5faaa743
SHA512 5862ead4512865bc2fee2abef5d0c47403ae612d306585ff9ae016247a993de7523cba6088d66b848c7aa6328672f8d7cee8fdceb645b72d51e5a938d2a3652c
SSDEEP 192:sxZWIRmucBzB/fysU47mmdp9GSm5KLHW6+WNOAyesNH2N+zv/YC6Trs1Ig5aJ:sxZWI/mzB/fys3dNHbwYu/oUk
TLSH
T10E42E653A934A9778CD7E319BA15BF13E2F9513285D11E88ABFD8A1C04E7BDD2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 cf957da56d07c6b2ee635ef187c5fd876e5d64cb4b6bc3a24d48e9e22b419e5b
MD5 445d8426032f5dd975ca5291ef4fd7d7
SHA1 1b79f2913143492087dc346485e8037823686e2b
SHA512 29880bca9bb53b4408f9ff2a0a1eb75bea496dfe4ebbc4c7d439e17c99c248c33cefbd3000596c5700a45514f38f0caf1fc0aed429be6b7827a9e5be3b12d7d7
SSDEEP 192:sxZWIRmucBzB/fysU47mmzSXvdp9GSm5KLHW6+WNOAyesNH2N+zv/YC6Trs1Ig5E:sxZWI/mzB/fys3HOXLNHbwYu/oUK6oz
TLSH
T19A72D8926530D5778CC7DA19BD357F15D6E854328C922E8DAEFCCA1D00DA6FE220B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1c1a0aca48276cb28fba7977ff45057df975edbc640eb069e69a35fe33199f08
MD5 cc708ab66973c9d003fffa7695920749
SHA1 d3e84f3201284b6962d6ae89575be87c99cc975d
SHA512 837b22ed24acc19259baad74820872bfd7b6a4c9bec2e27c0ebb77924bce2273f2b648177ee7e566e67fd225ed6da725ae8c93a86a0067c3c016f491faaade0d
SSDEEP 192:sxZWIRmWB/fyso4/Idpqc5KLHW6+WNTyesN+zv/YCoers1Ig54J:sxZWIDB/fysLwAHb6u/jUm
TLSH
T11632E8526A34A97B8CC7D319FA15BB13E2F9513295D41E48EAFD8A1C04E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 73e75b68cc2653ec7e47caca1c1e4d3a6b9cc4afcbf4700833489277c6ad3db3
MD5 be7d750eb20ac3fcf88d48dcbd797f36
SHA1 85186c56ee46146367305f6fc42732fa93d565e2
SHA512 c00f15f8a604854e048490b2ba31d082bf074c16d5e503ea75ecce89ae8d5347e5623cd1c4602910d4191b03686498d5e22c4ce1b31b756dfe8e92b3a3d00627
SSDEEP 384:sxZWI/mzB/fys32OXLzHa8UIPsV/sU4oz:s//mzB/fNJXHHa8U9s/oz
TLSH
T17582D7936530C5B78CC7DA19BD35BF25D6E954228CD15E8CAAFCCA1D00DA6FE260B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6c6afe56ebfe69e890b7e088d5d20cd13ed83e4df8e5ba39ab9001028c7f0157
MD5 26a93941dbf757d34c23576421fe495d
SHA1 0399572bd020e8c09754ddf6337e36f166b4bedf
SHA512 b846c9749de25f45c91c42699ec7dd54c05d278d7762cfcc4d6381cfd93ac24c3a8bb7da4de6a985b7c1ecc439b12dfdcb763e02ceb7b25c580c801026d9d09e
SSDEEP 192:sxZWIRmWB/fysU4/Idpqc5KLHW6+WNTyesN+zv/YCfArs1Ig5aJ:sxZWIDB/fys3wAHb6u/uUk
TLSH
T1E832E8526A34697B8CC7E319BA15BF13E2F9513295D51E48EBFD8A1C04E7BCD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 d26702c91c233ef8ebe06a83a1352cd3a60a163be1dac882b34f7787bfee8836
MD5 9143662701a88ffdfdce9ba69019c668
SHA1 707dfc75e13fb48cf1423bddbdad6ea60575e397
SHA512 6c5ca09965f2ef5286e7f997ffccfccdb3f5158c4255453c5eceece6547951f341ccac97bdd22dac5d770b5b0c08e1b95f783f385ab6affea139f77ae2f13dd8
SSDEEP 384:sxZWI/mzB/fys3sOXLsHa8UI7OV/AU4oz:s//mzB/fNjXoHa8UpA/oz
TLSH
T14282D7926530D5B78CC7DA19BD35BF25D6F954228CD15E8CAAFCCA1D00DA6FE220B807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 65a0fbb65350ab142f855f63e6fae70ffa9742f54235bae4a20e02c5ab2de0a9
MD5 3d49132369faaf71c3efb51388e369e2
SHA1 57e4e2c8d2d98921641160993eac39e4a889b4f8
SHA512 d27c5d47b70ffd411a3a6f3cfb902f68bb259ef43c44c90ac021cddfb40c654224c3b1f8f5e13f3d3bed1f02424bb9803f3d715a22135ce8fa66b47c2824e2e4
SSDEEP 768:T1qbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrgroHt:T1qbUj+WvSCs6u1jaaZLbWrrHt
TLSH
T1E9C2E93B340CCA7E4FC01E9DDD5A6F972E9802C7A7588D4447FA994C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 5636c8f2e277cbca344bf125dcfec650aa46c497ce3557dcb8e550accf097931
MD5 bea6690b479536d94dad5866383c24ca
SHA1 d7e445371477ab2048dc3965bc6b04ad74042750
SHA512 fda7ef4c984ab4b3d67a3d23cbafaaea31b568bf10701ae712d82f1d51c873e61412a8bbdcae72eba49630dec2e3a61c42c438a5ad7f6d014656914330f53cc1
TLSH
T1F6A0029615E78053E5455FB4D841028823B54C1006155E1184F861948C542906612405
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591822.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591822.TMP
Size 48B
SHA256 4c000b7d117b673710e7afe0ca2f419ea18dd6b2fa7933ec1acd305138fa574e
MD5 50a02d5d3cf097287636c6c76694453c
SHA1 e632458c5a547575aba8f202d6c8b2a0dcb6c1c3
SHA512 c6d7ee9018e2f8243ffdeab34d1926ef35a3a20bff66b3ff520129bcfa1d8a04ac375838e85e7fd10176234d954ba7afd5e1eab9718b56cfcdd4e4644ba0e271
MD5 SHA1 SHA512

Submit Download

d9da9aeef5594805_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\d9da9aeef5594805_0
Size 193KB
SHA256 0c6a2212e7a095de337b4ae5629e24c85d1c611900e44d61a7958f2a2fc71af6
MD5 fe456a483b9f42e38d40a1c925e736fc
SHA1 1d806210760ca2df23564ffdf8266cf6cc376e49
SHA512 bd53b86cc9b21c26ca3dea9412d19f3d8b25d1bf7dc26e1d197b3a50deb961490286cb81f4d926685a803e735f75db00c6914486df2f57928fa53b69c09b8b97
SSDEEP 1536:NoWVFWcK8jE3VIyj/OznBCj1O8/vrbIvUB/wIULnqSZEn7zCo5VeJUuBHvIKcb89:MrFWzBlGbIvlpYPIbPIf8XFjvyuVb
TLSH
T1CD145B755300E43FB923DE61A27E7F4E3C25A167DD0686FCA5A4E430AAD3DF20526B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 849b8452a969afcb237e4ebacb1fd8f829e0794546bc251470d387656f36b8d0
MD5 5324defa5a36c399b7b846a81750d402
SHA1 db9688df28be4614e1fb1e93be1f2da2141e43dc
SHA512 33c92990fb8a96cf6958d8007a2d8bcc4b3c1c9deb18bcc06003150960cc6736536e894b51789db3a3f2ec1d6bb051511c74bd44fdb64e5e79542e080dc570ca
TLSH
T1A0A0022C25C10826DC60467F55810566327248106E41CE1BE990F0D58C62246421156C
MD5 SHA1 SHA512 TLSH

Submit Download

728fbb4f-3045-4ab0-8e67-01e78e285403.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\728fbb4f-3045-4ab0-8e67-01e78e285403.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 78eb26f527ba7896dcdadfa930ab15213a392bb6b7508e0bf544d0cca3cfd983
MD5 471ba58487b25e29b65aa72f053beab9
SHA1 55c41380191b9a660710e187443e0618e06197d0
SHA512 f8174284ee80c771e65499871095c37b455f8645e60eaa74fd03b771bc946034725d9d5c01ede21eb1071058cb0efea944039c9faa6f5a3d2bd6b93c5ad33cc6
SSDEEP 384:o3yFaeO8WsNgFyxM7xhEa+fd4aqWMyP6IV6:o3IzhWfKa6vqWMyCI8
TLSH
T15E828E7668B86C7B99A26541F84736139FF4916BDACA3F94C2EEDF0D01CA1DC130B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ff2f8e9eda04d09dfa33a2695e3183c8511073d43be670febfcd0d31a025d8bd
MD5 bd61ca47ff5ff068777404fc03316b42
SHA1 b7a4fced1a6d3bd72592f1f2fc9d943e4ef8efe8
SHA512 25443a50a5a2a210b322a92ca21ebc2e41fde04db4dd93cd0cdeaea8c6285e94b760c248f3127f4dd465edb8676a051235fddcc7b10416958e48a9acf1ca6d95
SSDEEP 384:WiFZ3yFaeO8xsNg8TUNTUlIlyyxM8IhEa+fd4arWMyP6IV6:9FZ3Izhx9wgCKa6vrWMyCI8
TLSH
T19CC2F8F258D7583AD9AD5B43A77E2D039EBCC067B5856A50B3D98E0DCC861BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 77493a18086665330f27b292d25080cd8984edd98aa54a4dfd456e747426b5dd
MD5 1820c1d02073fa1e46a63d5a9ffed1f2
SHA1 ad56284fe6432ea18e32aa02670f6b006679fc9a
SHA512 bdc1dd857c8877dd2e42e82710450bf9744dae84c802f80569aaba395b776303c007e3608bb74424910d43c75e72ae605b38c6f4ab870b8a29a6c6d4f7b55917
SSDEEP 192:vONL6Db6QmiUyAQHBa+j4+FdCXmR2RgYiU6:vONL6uCHBa+fdFnU6
TLSH
T1EF02D73568786CBB9AF26E49F88737275FD4107B9A962B94D6D84F0C00D765C230783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 013a04418991eb7dc4720fb0be35b065b08838f514897c8ccac67ab884700ce4
MD5 d8b44025da450a6be6260146fa10d77a
SHA1 a05be12f1b91c3549d2b983d91bc8801682046d6
SHA512 9d266634c3861301d3a5db36957469de4a97ab74bf107c739fbc1c7442c7a7875e56235ed6eb315f8da2e8b5b6e66a0e3c9b74c0c405b1b654987cab1421d8aa
SSDEEP 384:d3yFaeO8WsNgyyxM7DhEa+fd4aqWMyP6IV6:d3IzhWqKa6vqWMyCI8
TLSH
T128828E7668B86C7B99A2A541F84736139FF4906BDACA7F94C2EEDF0D01CA1DC130B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9228d067f1fe228b581779a2a2a5977d85a0294128ffdae43a9c0d272ac2f753
MD5 4a5c7229daed91c3ba2d870a56ee8707
SHA1 f9ca8423ba18c17e8371f4d1acd0f42f9369b1ac
SHA512 e2ab7cc3cfcd0091e35522ea488435a138b5715d4b113fc790eb7bffb07693dea5968c3d238de7052c3bd78c1319809326085c4dbfd889d6b4ae34e2907c4191
SSDEEP 192:rONx6Db8QmiUyYQTBa+j4+FdCXmRy/Fa6NzIqAU6:rONx6EUTBa+fd4auWU6
TLSH
T15B121A3268686C7B5DE2A954F88736135FD45177DE8A7F90D6DC9F0C00EB6AC130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b090326dc16b498646b7766bf620a75ef5badc6f9656e25f5dd5023901223837
MD5 8ad90a3172586517190c67969a198a24
SHA1 c0b2df2967e2c643eb105805925b4096f5ac7593
SHA512 a4bd937057cbd4318ed486713de678c475bf2a36826d5b579c31c3ccd5ca424d629b05bde93879bb26cf93bf0d60d51fd3e3a325a1851d3c948aea1ae78f4a7e
TLSH
T1A9E00223A32001EDC435023091831F311FD7C2320865035B5F30015C3C323603F28BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5a51890151e0a74d44e097b7791f3df79d45202800b8263f85973d02dedbeda0
MD5 7e3e88a2fc3bb6c2912130603b556d1b
SHA1 27630ea89af82ac3888ce8dc90891d82e4988e90
SHA512 98f30faae9561d44c27c7976d4512331269a968c8724fef8a24281b26acbffac65eb0a3441589a5489d7fbbac2fb15b40feb0af50b9ae9237222e397cd7a93cd
TLSH
T1C4E00223631000EDC435023051431F311FD7C13004A503565F30015C1C333403F24BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c2d461141a4a6c747b3873bd28d38e5e2393922cacbbb2eca1575ebb20574015
MD5 7c1fb1e2c8d53767964913785868f65e
SHA1 d655227fc77e8b190b81534cb29843561deb95d3
SHA512 01c665f3afd3f98228d9c36d52c57037196a801d42e25a3a0a29b8573632ab00ee93088c37a03886ce750d0ebc8f7f853438bbe718b4d72528ab1ea29500d1e2
TLSH
T12AE00122A32001EDC439033091932F312FE6C22208A4075B5B71515C3C323A03F24BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7af9dab0e184a3c6082c7e0771580460f3a69ced6e57a4e2a52bb42e3f41fea3
MD5 e605ed7bc7746dec882e817375705439
SHA1 e7d942d808627fa9f09031f88776f956ebedea92
SHA512 9f49ec8274f615dd20ef120f2c1a61e1cf779ef1bedfa30616571f5d7dc0586a05995541816daba101119f8ecbbfc769f1a7c79b9f701c59faf0e8aebbc75031
TLSH
T1C6E00222231000EDC435013051431F311F96C120049503565A30015C0C323003F24A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cb9b91fbcae5ee71eeaea6b00073068178ba0f550ea4b2f04e679e8de505e01d
MD5 8da39c13c583116a6131d47013dbbed1
SHA1 98b5c99ab893792056f65c2e1d7fecd45468dbbc
SHA512 3ebfecb9b70217c1479e3d284f5ebde7b09570a35ed6d0f9aab7e8afee09d6bcabf203f8c928c7de420f7dd6a24652ed0465edc3b8b712df3550b6e87b46254c
TLSH
T113E00912A36006FEC83D077091972F312FA6C22609E5075B5B71815C3D363A03F34EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59981f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59981f.TMP
Size 392B
SHA256 f52ee4a9f63eee010b591e0b007687fb346441e48943c0bf135ef627e21604a9
MD5 dea6acdff305ebae1dfe80b5eaf33eea
SHA1 37a93d003e83decadbc60f37625cb161dde97149
SHA512 a7ae6d135d902fc845c54488bec5da97c05ad96ff0cd05e318070b20e90dbd59a9f48d40ec3275402524e4ec6c8fb223c895101a941c1652ba3c7ee4309c78b3
MD5 SHA1 SHA512

Submit Download

76e73f10-ed34-4b16-9918-b47bc502d97f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\76e73f10-ed34-4b16-9918-b47bc502d97f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e3f3aff887402c55f97d7fbbc4da9b3c0b82411fef5c04d71e584ae58e0f51fc
MD5 e60cc24157a89b89ef59a096accf88dd
SHA1 097706779c7863c99f00825ab28a108ce5c95977
SHA512 e053f4dbb1de49135a83427b2d7472415a9808713a7c228033cadd347304fee258a69b31235446a7b42a393372e46ebc594facc519627758d0005567ad45796b
TLSH
T1E541185CB6EA115CB3B37F5AABF2A8AD487EBD762E06D05D00110E4F0666A44C971733
MD5 SHA1 SHA512 TLSH

Submit Download