hxxp://discord[.]com/login

geolocation tags

cacanadananorth-americatoronto
user interaction
yes
max time kernel
699s
max time network
705s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/09/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://discord.com/login
Sample260911-vbabwsxdlb

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 12 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
17	discord.com
26	discord.com
31	discord.com
56	discord.com
659	discord.com
18	discord.com
43	discord.com
78	discord.com
660	discord.com
669	discord.com
11	discord.com
12	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134336189210417782"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{AA7CD57F-8BC6-4540-AE93-59806472E90B}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{ADC7D348-6A6F-4F59-80A9-73D31BC5225F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 23 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of FindShellTrayWindow 38 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 4404	4680	msedge.exe	85
PID 4680 wrote to memory of 2160	4680	msedge.exe	86
PID 4680 wrote to memory of 2004	4680	msedge.exe	87
PID 4680 wrote to memory of 2160	4680	msedge.exe	86
PID 4680 wrote to memory of 2160	4680	msedge.exe	86
PID 4680 wrote to memory of 4792	4680	msedge.exe	89
PID 4680 wrote to memory of 4792	4680	msedge.exe	89
PID 4680 wrote to memory of 1568	4680	msedge.exe	90
PID 4680 wrote to memory of 1568	4680	msedge.exe	90
PID 4680 wrote to memory of 1568	4680	msedge.exe	90
PID 4680 wrote to memory of 824	4680	msedge.exe	91
PID 4680 wrote to memory of 824	4680	msedge.exe	91
PID 4680 wrote to memory of 824	4680	msedge.exe	91
PID 4680 wrote to memory of 4360	4680	msedge.exe	92
PID 4680 wrote to memory of 4700	4680	msedge.exe	93
PID 4680 wrote to memory of 4360	4680	msedge.exe	92
PID 4680 wrote to memory of 4360	4680	msedge.exe	92
PID 4680 wrote to memory of 4700	4680	msedge.exe	93
PID 4680 wrote to memory of 4700	4680	msedge.exe	93
PID 4680 wrote to memory of 4744	4680	msedge.exe	97
PID 4680 wrote to memory of 4744	4680	msedge.exe	97
PID 4680 wrote to memory of 4744	4680	msedge.exe	97
PID 4680 wrote to memory of 3184	4680	msedge.exe	99
PID 4680 wrote to memory of 3184	4680	msedge.exe	99
PID 4680 wrote to memory of 2736	4680	msedge.exe	98
PID 4680 wrote to memory of 2736	4680	msedge.exe	98
PID 4680 wrote to memory of 636	4680	msedge.exe	101
PID 4680 wrote to memory of 1068	4680	msedge.exe	109
PID 4680 wrote to memory of 1068	4680	msedge.exe	109
PID 4680 wrote to memory of 1068	4680	msedge.exe	109
PID 4680 wrote to memory of 3320	4680	msedge.exe	110
PID 4680 wrote to memory of 3996	4680	msedge.exe	111
PID 4680 wrote to memory of 3996	4680	msedge.exe	111
PID 4680 wrote to memory of 4976	4680	msedge.exe	112
PID 4680 wrote to memory of 4976	4680	msedge.exe	112
PID 4680 wrote to memory of 4700	4680	msedge.exe	113
PID 4680 wrote to memory of 4700	4680	msedge.exe	113
PID 4680 wrote to memory of 4700	4680	msedge.exe	113
PID 4680 wrote to memory of 3004	4680	msedge.exe	114
PID 4680 wrote to memory of 3004	4680	msedge.exe	114
PID 4680 wrote to memory of 3004	4680	msedge.exe	114
PID 4680 wrote to memory of 5584	4680	msedge.exe	119
PID 4680 wrote to memory of 5592	4680	msedge.exe	120
PID 4680 wrote to memory of 5600	4680	msedge.exe	121
PID 4680 wrote to memory of 5984	4680	msedge.exe	122
PID 4680 wrote to memory of 5984	4680	msedge.exe	122
PID 4680 wrote to memory of 5984	4680	msedge.exe	122
PID 4680 wrote to memory of 5744	4680	msedge.exe	124
PID 4680 wrote to memory of 1740	4680	msedge.exe	125
PID 4680 wrote to memory of 5744	4680	msedge.exe	124
PID 4680 wrote to memory of 5744	4680	msedge.exe	124
PID 4680 wrote to memory of 1740	4680	msedge.exe	125
PID 4680 wrote to memory of 1740	4680	msedge.exe	125
PID 4680 wrote to memory of 2588	4680	msedge.exe	126
PID 4680 wrote to memory of 2588	4680	msedge.exe	126
PID 4680 wrote to memory of 2588	4680	msedge.exe	126
PID 4680 wrote to memory of 5764	4680	msedge.exe	127
PID 4680 wrote to memory of 5764	4680	msedge.exe	127
PID 4680 wrote to memory of 6120	4680	msedge.exe	129
PID 4680 wrote to memory of 6120	4680	msedge.exe	129
PID 4680 wrote to memory of 6120	4680	msedge.exe	129
PID 4680 wrote to memory of 5872	4680	msedge.exe	130
PID 4680 wrote to memory of 5872	4680	msedge.exe	130
PID 4680 wrote to memory of 5872	4680	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.com/login
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b0,0x7ffb8051c188,0x7ffb8051c194,0x7ffb8051c1a0
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,15205167669665303949,15613237914191623333,262144 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2012,i,13925071314095662069,12614313889124588625,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,12051293594342622428,2928141679067210378,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,10550491794618641806,628257886286753702,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,892201247277861355,2260087285404173008,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,6158137425316259204,10625123862390111610,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,14027868910929512965,12537559678667257046,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5156,i,8004587372016338523,13818997905230356802,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3888,i,13469436765446091511,2156616179126537556,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,15508828013866821750,16161935934260067564,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,17772989161680693979,4282536546359996630,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,17772989161680693979,4282536546359996630,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3424,i,4175763671543232104,652969142674131928,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,10502665160723777545,10748712952383063610,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,4902952904945679142,11510340510605516287,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,12432675916036154916,16065812613612383231,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6828,i,12072269542662954684,14957811938340232167,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6952,i,15646941963944527010,12415778176892401708,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7112,i,9672910745487947359,1729787476725030388,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:8
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7116,i,4651754175407098607,18017692828856829135,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7216 /prefetch:8
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7040,i,5784533957453946257,15185984260406967623,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3616,i,12458713680678860846,12107548935646315554,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3552,i,132135512773740672,6022677037175226633,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7272,i,8018085933832219340,15457011264053352482,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5228,i,16605178176310273584,721286598911663138,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7764,i,14421192932752085697,15735490300241754284,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7772 /prefetch:8
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7908,i,12127106910307997754,9895169968513954572,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7512,i,158927469876565833,5923262911088337027,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7368,i,13460110319736265553,5792461303182981239,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7176 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7492,i,1492135043293056914,8830658913042122912,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7756,i,5519417269602968830,8067718986737758248,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7244,i,15415691383865861822,3363660073037593907,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7500,i,15475401087118638495,3061069656235941703,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8152,i,15851456837586628540,7601042682324324304,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=6972,i,4569688086850287567,6712221254973273216,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8016,i,17898152907495214756,1468293615022380270,2097152 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7300,i,14842148498175242199,1677939540280602741,262144 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,13355296539835256430,16358787386412635988,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,2161236630755430095,466050788143029877,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8024,i,5991081449744278050,7114763366561064404,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,244123707949569761,14443665387409970567,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7300,i,10075920900182795614,16917102113072390651,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,3018021642298979648,15862215717788366588,524288 --field-trial-handle=2280,i,18110247774394929945,2359076763587513211,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:8
  2⤵
  PID:2536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dceb8d17341e9497f94e9ed79f410eff6fae3d6a32f96f0e1e1d468b4580c40e
MD5 313074e7496713b4967ef85e003367e0
SHA1 d36906170e18034f86495bcea1b22e1e816a9cce
SHA512 5aaae588565e5561fb0ca56f0fcb7565e21a20db3b27fcbcb9deef10295d62da07999b2a1baaabd21be6094d13174d1e421703bc4fd0f3ad96814e2f5cc6e325
TLSH
T187D02370359DF486E70401B161179F507F1A44C130A7D107D1699D5F6E551A053D63C1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 885e3109bd75c9e65dd1e1230f09821a18a7d2e1657497bef92040cffacd1ba0
MD5 befc5f37c5add342c4d0aeda91a031e2
SHA1 f834f66121aa037f04a7f4f0644168ec0ae517e9
SHA512 7934ef51a22e2b972027b8cfb6af2ad6d82b2f30ffc10f2699cbf36d34564217591888352818add03e0da8205db0180a0074d832661b8f7275d8c146bd4df48d
TLSH
T113E026C545C8C22FE340BA874174A74CC2803B0F92CC6A4F6758C4853883250F2A2590
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 98f01ef2fd4db638a10c6e02fb1f8cf58442585c2ca7606b6a05ed08109681cc
MD5 a4f97bf0c011a30152d8d39d216cdc34
SHA1 20f2a042a3a309c742bf9c6b277882726f065765
SHA512 ae49382d3eb42b120b330b89370a6ff40bbb37fe1acc013c169b4be45c7484d4f06bbe5bd6da925dcee0a203dd66caec547459b28f64a2fc59d92e758dc5d263
TLSH
T1E2E026C445CCCA2EE2C4BA8B5564570CC288374F92CEBA0B7F94C4CD7182440A3E76A1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000d3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
Size 21KB
SHA256 8aa7220cc27978bc8f34b757a5a34ac9610e50341c93f3f3320487ad4697118f
MD5 725a25f9ee71797d3d784a22ab899b7a
SHA1 194f825633b309c6db0faf5cf1a46e90c9815a38
SHA512 cec764750c7cfcbd07caab849cdb6d2f377468f5de6dafb15c386e66e88bb5de1e82f08068bfbd41b8315902985a91650db06c51ac6275ecb56757a61b913bd3
SSDEEP 384:rvLyFTfaQ346rRJQh+8781y6Y0vZz5As62mxy4OJ2hSeDk/KmFS+NNL:CFTfa+46Mc8X6YwrYJwlMSew/KkHL
TLSH
T1EEA2E1730888233D852E7BF450A5E3EF20ED1E7A848718655E6DC6807E45B8D7D9AC72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000120

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000120
Size 455KB
SHA256 8ecfca52858c4325e3bf779f5f4d1e1da8c424d47f7f35b86c95fd2ca94879a2
MD5 68896ee50e3f971253daaf6a4da941ca
SHA1 ff7ae1b88d773b677654f0d42ca3a44cfa0dcefe
SHA512 660e244e8fd0b304cbbe1469e7ca5bed996da76896d6f5a7e75371329b35330efc856578d91ea576415d1dd729777d91a5923d1632908581670e34768243b137
SSDEEP 12288:37H8T1VeTCowJhjh1gUPL56MbbNfksPhIW+lmbyxM8mkowlRg:LifwGJhjh1Nbn2W+0yxM8vo4g
TLSH
T107A42317FBA7BF4FC30A30F2218DC6EC2696F5B0D481454389D602B5EE859986FABD50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 16KB
SHA256 ef62e3b6e6dbb7e68102c998ba4818dfc6cc7f9e34ef8e03505bed357d9dc49c
MD5 a90d64c94e9087447776e14eebe58ccc
SHA1 24339c6b6688136ce3c56a15fa144377e87ecff9
SHA512 aea2b547afc817c6cfb05731de7bdef52d6a42800cb5e1c26554bfcc29292f493839a7588f2932d4ad06cebff7a9ae0211f7dbc2abc73c843de7638f1a437aa3
SSDEEP 384:3IXI5iwJLEPfTf5n3HxyDDmXsqz4MqfHMYb:aIHYPfTRn4HmvEMe
TLSH
T1777282C2A8E42856FFB92374E2D65A83323CC1B96C476F5306C0D13CA397BF6B955990
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 17KB
SHA256 9207f087bd7b2801e64a71ef068e0e1364bb4a7003119538abc31cc363c717de
MD5 905bbb440c22a2ec758a294d1cd2551d
SHA1 3158825e8121dbd045c652a52afd0cf9b115e44c
SHA512 15a0b622b39d9304d2465b7e55172dae0bca7b11fe817e58fafaebf6f8dee783aea162b3714eb49e084f5a22bd7a3cc1f1e76184b4105909ba9934c4509a1888
SSDEEP 384:X9PI8EtA1EPfT0jn3ZxcMDQXfqy4McuVMYm:5Iw2PfTAnAgQS1My
TLSH
T14582A3C2A8E42852FFB96374E2D65A83323CC1B96C476F5306C0D13CA387BB27965D94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 d5777c87c505c2c49fdc986c37f3158a38013bf3ae10cef96dbd86b239a33e05
MD5 29a0e4916563f23a65d678253ca6be42
SHA1 7b685fb5a286f655fa4736c3cc460cc1d93d68be
SHA512 1af45fafeb688fbbfb2deffaca6ffede7969f777e6fbb78e9a21038d543c2a14151d66d7969161b3ac9d3bb06f72c4ea1c5345f675546e665da2635a7c73afa9
SSDEEP 384:29PI8EtA1EPfT0jn3ZxcMDQXfqy4McQVMYB:aIw2PfTAnAgQS1M/
TLSH
T16282A3C2A8E42852FFB96374E2D65A83323CC1B96C476F5306C0D13CA387BB27965D94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 24KB
SHA256 174d36f2ab83b3145b95d4c39fe16edf25e80651f21cee9920adcbeae95010ce
MD5 239c5e25fe30bcc39483a5a9ebeeb9d8
SHA1 6e5d28c4e6a828baba043d8d1cab47646a97ca1d
SHA512 80c82b52638c910d4554a8b5b7585e19dab427c536165378a697e35d14395452727a1828872aea6204ea5b3bb07c7f7e58b2fd753c879a5a19a461cc7b344606
SSDEEP 384:WZ9O7YOinDRWx4FiYfB5jaLI7RQv/W6T6EIMaalCIg7Y97DCyWzs5MF:6IYOintpFNTGPL+QjtKqHCyU
TLSH
T191B23DB2BAE02842FB695370D2CD4A837D3881B82C072F5346C3D13D6796FA269D7975
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 25KB
SHA256 8edcc4e6d39b5119f82ea97cd503f995667ceef9ea78dcef3e1d026e4e252044
MD5 e143a8f2aada2ba394f0e9689f967a0b
SHA1 3ad7912203244c0550abdcb7e3b52ef6f661cb00
SHA512 8420846a7a404762d5f03c6131d87bb30819cc39f4ce5273a373d6d753c45ca8b4f4ebdd966661a3fb7777db3c22e5a7a463c45032bcda0e03549089a5ed4137
SSDEEP 384:jE/OhYOLnqRWx4FiqqT5jqLl74Dv/QvF9EiMwalMIg7Y9FDSyWzsTMe:goYOLngpFTOGe03epLKq5SyB
TLSH
T1D9C25DA2BAE02842FF695370D2DD4A837D3881B82D032F4356C3D1396796FA268D3975
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 fae3959c5f7cd490eda3b8b578e2b1581e10c80076a6f11cf48fc34fda61838e
MD5 7a8542dbdb81ccf8a7d66c483ce928b1
SHA1 e9754de202acd04b705d42a36b4b9c6d141da16d
SHA512 47cc96e7b45f3807c636ac221c78764e8c38eeae593537c8efdf6a14c65a84df3869cda5d2d659c80ccad0e5383783c87b1e316c824c6b9008428f29b39f1e1e
SSDEEP 384:WYPI8EtA1EPfT0jn3ZxcMDsXfqy4McsVMYm:RIw2PfTAnAgsS1Ms
TLSH
T1EC8292C2A8E42852FFB96374E2D65A83323CC1B96C476F5306C0D13CA387BB67965D94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 0915f5a0909f6f6b08c5b41dee94b2abcf7b1799d6521016973df46322e8db01
MD5 cd5d5fee10e0116c84ad9dd2efed9177
SHA1 99cbf0d3d8bc4117aaf17951b03c23d1e029deaa
SHA512 6c3347c3be7a36b5fc060f98277e61807addd92376b46deedaf7cb7b28e363b7081d22fdc7bd6d066eda0937239b0986d8f2eedd2184ce28cc83c9137c439395
SSDEEP 384:Dx1Y+MdVYveqaiC2fJIjeiJHdGJjJZN2Cf9Ojx45Z7g5f85VYaiHcI3aEGLoWjlj:ImX7e8iAz
TLSH
T1DC728CF7C7E4865D991157F89B243E2BCE6A0914531C3C6E8DE5BE4AA3F1870E201A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 24KB
SHA256 788f0a6dfccc3fe88ef0f52ce76c11103692bc0fb5e22a9d89c81c47872b9a11
MD5 dd4d7fefe7b76ba9f483af7861ec8b3f
SHA1 bba6ddcdaf79ce31b5cc5b8282cb865f8775638f
SHA512 75edac51fcfa03427c0d1e072b6ad8885ffff1f691356bca5316e41ad9855bf53712e614e201b76248eb0189ff416aac43cc65006e69805d9de93bb19380a0e0
SSDEEP 384:DWMjlISx5wecJ2JdfZKOqQ8zYBeROxRWqU0eyDPu7txWf65mP+ZevFU4hY5EOOjj:qcZl97qhdh99kKW
TLSH
T14DB29CF783E4866D981157F89B287E2FCE6A1924071C3C7A8DD57E06A3F1871E241A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 a2157de87d7a3bc8a004725583a9f7c8b36e8129ea943c07e4256deddb558118
MD5 de30dc0ec7bf43b132295d7c52ea942b
SHA1 b9642386e5ff03e6bd9832dc085fa678db51c5b8
SHA512 e1e70f268b3e9fb98d3764dec5b4f64e79f8598c21d6dac1cb71a3f88826985b9c66c3e6cee8c946507241561c2d6b61968b1abf145d3e2f505b8cba24758a8e
SSDEEP 384:DWRyMjlIPeSx5wecJcu2JdfZKOqQ8zYBeROxRWT5qU0eyDP3Y7txWDOOjx7g5W5T:YKZt9dqhcyzm
TLSH
T19D928DF783A48AAD991157F89B286E2FCE6A1924071C3C7D8DD57E0693F1871E201B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 25KB
SHA256 680bf7c740fff69de6865728d06e65c60c03bde81d7379724a5fb9526a369979
MD5 1f8aa1c5a01ad9ae589ed9184b98cff6
SHA1 87efbc924603cadcbf744219a2f3051fda3c995c
SHA512 a526d1b4a5ecc542d13ebe9c8c0641bd2a70ebc990c4c463d6eb3a8bd2967f5f1184b57cab0bd304e2863676cc452ea32afabf97e181e69c75bbcccfc59e6c44
SSDEEP 384:DWRyMjVYveqaiC2fJIjeiJHdGJjJZNg50Q0uBeb8k5iJ56DzegJ83kOOjx7g5W5b:qm6ynM3218Y3
TLSH
T10DC29DF7C7E48A6D981157F89B683E2BCD6A0914571C3C3A8DD5BF4A63F1870E201A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 33KB
SHA256 040245c8278d445fb0d1f2f507f152b08c7e86374325458fa2858e749c237f5b
MD5 98eb250d51160291dcbabba8a7d53728
SHA1 7d404927a9e901bc2c7406898470677d7d638d71
SHA512 997d4dbe8edfe13c61b603d5e08990d58d69ecbc91bfbf89d153a7cca1552e5c4636d16d5e53fb5b7f170cbf1d8844fdec3995952c4a711231e0c1d38db21709
SSDEEP 384:sxZvAqQ7/fSsY66s8qMpRiYnazAW8pZS15posJWeT+9EUu6hMrbycZQDYhjg:sHnQ7/fG4Mnc7WeT+9EU7Mrbycvk
TLSH
T113E2F946A820C87BDAD39D19743D7E33E9AC105256C4CEDA5AECCD1C00AD6FDAB07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7bf047242d6ad2378b201aa8c5fe734c15dfe0edad2b2065a8d7df09a2c724ff
MD5 074b63d484e11d4e8fe8b33a92fb40b0
SHA1 6507013a33512554ac94af5c7455962523c2be3e
SHA512 963e329b256dbb8fbae6e202c91e67d818bdf24d0636e38ae5f41649a22d02fbaa46eb6e6c74cac989b4330cfa45c92618090d884fb9e58fd425f55d36869491
SSDEEP 192:sxZDR/yM/jK1Ml8MW7/fSsjEIdpEyHW6+WNzVD/YLRypj7IgrJ:sxZDtu7/fSsjdLHb5/yg9
TLSH
T17C42F911AA34597BCCDBD20DB955BF53D6F90473A2940E84A9FCDA1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 15db9533a80dd99dc0d34e9bdeb1187013605e8c2ae7d22fccab4bcc0fe95505
MD5 c607dbf516583664e608c9856a2625f0
SHA1 640e955c5216e69c82005d974dc34e4b94efa50f
SHA512 035279b98789db306a2526f83f40acafcc08cc53e5e85f1c2de88a1afd80b20811b8859d9b7b60865d9b43089c44f48a70f92dc7c20cc6c73d25289f1dd4f8ce
SSDEEP 192:sxZjR/yM/jK1Ml8MD7/fSsdT+sCGrdp2aMbE9dhHW6+WN2mftCS43mCBXYLsgj7g:sxZjtb7/fSsdTu6DHbb0lFXUg
TLSH
T19472F956B934197BCCE7C219B942BB53E6F80463D6944E84AAFDD91C04F2BED6203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 b38d32e2734dff432b48c4935351906f9aa6d35ac4b05e9e7c9e7636b6f495f7
MD5 dd6a8271ee66e2f483b44caeb1fb1f45
SHA1 f5cc1538b4e0760fcb3f7fca7a7419653ccdda3e
SHA512 5e1e548fcbbed821442991febe0da48a3b700a13080f5281e8ee965f09e6ead39794ca49b30a908f64be5f908f95b555652df73cc60e24e5a079bd6003155aca
SSDEEP 192:sxZ1R/yM/jK1Ml8MD7/fSsdjes+sCGrdp4a2rTnEsudSVwCW6+WNbNqZwmZyRHIJ:sxZ1tb7/fSsdSsu6OrbiZWLlEZog
TLSH
T11C82E747B930097BCDF7C259B901BB57E6F8146296844E88AAFDDD1C04E2BED6203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 62c8d1954e1c8922e5509d7d3ac1d21f9cba5de0647993a3704f80acc636f520
MD5 ae54e080028b632274bab51e88930d45
SHA1 e420cb9b25e8cb0af08ae6cf8163433d5a2da362
SHA512 3c7ee0282ab3bfe18e725f925705c6228a791dd8f50e5e16980833e90779dfd16b646334ac5c1ea26f8ece10f41e5aa03bad854d762476e35ffebe0ad3ee4579
SSDEEP 192:sxZiR/yM/jK1Ml8MD7/fSsdSs+sCGrdp4aFrTnEsudSVwCW6+WNbNqZwmKRHItCt:sxZitb7/fSsdSsu6RrbiZILlFXcg
TLSH
T11882E747B934097BCDF7C219B901BB57E6F8146296944E88AAFDDD1C04E2BED6203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 461b7b03884841f743c8ac7f7d3f728c705ca6d32442d6b6291c40754d1f10fd
MD5 d7a0e26fc92239d18d9222257f2d4b2d
SHA1 0082f063725ad56218e32d372aa87894b7a88f4e
SHA512 5ab83c707de3afae149dfbec4ac83e75bdcf940af7cc457ddb4b6326ada101a620e9639bf8c17fbd88fcd4207daa9cb2c5713468219ba5a37b0349f3e7d045ab
SSDEEP 192:sxZcR/yM/jK1Ml8MY7/fSsdEU+sCGrdpQqjMrxnEsuSfVwCW6+WNbz6ZmSaRHIth:sxZctg7/fSsdEUu6hMrbycZLlEZyg
TLSH
T12A82D747A930097BCDF7C219B901BB57E6F8146396844E88AAFDDD1C04E6BED6203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 779a1695343a44acf75acee1063385cfd3d1ad415f26080db06511d983a76743
MD5 4dd5f93b7978f4007daa05e8ebc1fd17
SHA1 8209e9fce2f52cc557c0f02f0a94de81c9579e07
SHA512 141c8b1ea9be043a22f9f42e77ae7f48d82fd934ba6a3409a8e11d4c61fd88168c4aad31019ffe03e66fce0d8a300d0debf272ca6399af6a3fb2ebf6c7346ed9
SSDEEP 192:sxZjR/yM/jK1Ml8MW7/fSsds+sCGrdpGXEshHW6+WN2mftCS43mCk/YLMCj7Ig5l:sxZjtu7/fSsdsu6KHbb0lg/Ov
TLSH
T18F72E856B934197BCCE7C219B901BB53E6F80463D6940E88AAFDDA1C04F27ED6213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 3e63f321e74a2e3423d177bc4e3c5fb1c0c9beab1c098533f0342d9edf9db3ac
MD5 ff20ee3775b121262794750be1da39f9
SHA1 7951320fe1acb1c974ee349dc63dc14b92ce3a51
SHA512 868e681ac2e29f19d822125f0cc2995228391ffe6d4812b9677da741639cbb1a0c170f45f39dc3f23b4015a99559a4452d20e90c56137e9b79188731a9ac7bd6
SSDEEP 192:sxZcR/yMojK1Ml8UQPY7/fSsdEU+sCGrdpQqjMrxnEsuSfVwCW6+WNbz6ZmSaRH2:sxZcAqQ7/fSsdEUu6hMrbycZLllNvg
TLSH
T11782D747A934097BCDF7C219B901BB57E6F8146396844E88AAFDDD1C04E6BED6203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 6a1d5a01d39c7c8b4f64af3beeb7a8ea126cbaf399c7a09cfb8654895b3a7f80
MD5 d1f611e435bbe2f16d182889da0613c0
SHA1 da20a0684e2fbdb216687475a53029467c633e40
SHA512 20a57ffc1756c7f0260bfcd2055cb2f359d8fbaa86292bd2202a93c0b80172db321224762e837eeda26471e1ed81736c7c340f50028e25495c20d135d37047e1
SSDEEP 192:sxZcR/yM/jK1Ml8UQPY7/fSsdEU+sCGrdpQqjMrxnEsuSfVwCW6+WNbz6ZmSaRH3:sxZctqQ7/fSsdEUu6hMrbycZLlpdcg
TLSH
T1D682D757A930097BCDF7C219B901BB57E6F8146396844E88AAFDDD1C04E6BED6203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e878003376af9e315cbd968a2a354b882f46a99ff5e654a923c0662f13c35d83
MD5 e20baf2f105d1e33ab6bc81eb3b95eba
SHA1 781769bdf04a04e59c7605d1e1490fa2c3a30d64
SHA512 d0b1bb166ffc59dfbc04695d371bd3d3c0a46ad022a14f23df7c51f3ddd2be45a20ecbd5c14f6a0a7ca84a3f3edabcc70dbf334ef9b55386a47da081d0771b73
SSDEEP 768:gGs6pD1WvxzUj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNnroHk:gGs6pD1WvxzUju1jahILIsN0Hk
TLSH
T1F3E2FB3B680CCB7E4F841E5CEC2AAF967DD801CBAB54899447FA484C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 3KB
SHA256 baa0ec5a64a09529ba05e06e730f8d1d3afb3740b7c0aa37bc5ea98a55382978
MD5 a46e4317b618315c7a91f69bd9fea3ad
SHA1 378cb3ae2bd6b6924abd458a094d689c091d2e36
SHA512 66f3814d90273deb269eae7306fbbd8b0bbb9c8ff43ed21097525abc27c3f1fb2d75a428d20ce210c66f9c2ee62512c0df3b46d65bc93aeb763c05feb6cdd410
TLSH
T16E51F88F4D071B66DDAC237118B9089A337856CC07981D1BE5FC9235BCC73286D68F98
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 6157c19833081a6677d33d501e1d84cefd92bac6d03531bb9dfc5bbd41e47f3a
MD5 af3a610a5c7bc3061992cdcadd84f870
SHA1 9200bc7a426049d3f81e4f15b132b5b6084469d0
SHA512 c976159a8540c73bdcf3640b822c43a1a6b03d7dfd5203851437970474d50f1576f0473f3d93a6b5ea249ac962a0756153bc0fca27223425d9f8af239d87270c
TLSH
T1AFE0DFBB6EE76820EDABE3E72870A4B60641782C8805BC4F686A96C360B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\773779c2-30ed-4621-ad44-499741ef9880\index-dir\the-real-index
Size 72B
SHA256 97c788bbaf74b689017c50d8545945714e3840eda96b18ba56fd48e06c025eb0
MD5 c1527dcd56b7dcdb763fb14351c3d988
SHA1 60b2bd9c1af502bf28174e769648bdff464b3344
SHA512 90b22edce65a0ce51a1d4e954de472bc905788eb48bc2306c40ff3544b86901aabd20bb8399f2a0126ea699bdf66e850dcb3c1d533a2798c1563e838c960dead
TLSH
T1F3A0021592500506C1181A72157341503B719AA185411372A1A040C9AF503D44502104
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe617fde.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\773779c2-30ed-4621-ad44-499741ef9880\index-dir\the-real-index~RFe617fde.TMP
Size 48B
SHA256 4f13f30a183b0cc18ac70ed79c3145ecdab0de0ab5ee64f961b57fa86b2f839f
MD5 0a825b33f23a14ccc5ac3e2db19e8fda
SHA1 7fe2e200d8c6d85949e341f8dcbfdbdd6bf2d6d1
SHA512 14cbcfc428bb2068ae10c681423259e80c0dd50c70fc347bfed9d5bf6fc1fb2046f203aa7798f0baadf8f5b926bc2dbeff02d0dafeab08d2b36785c5c34f6631
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\dd41f016-438f-4692-8e5a-84544fcc83e1\index-dir\the-real-index
Size 72B
SHA256 a0bf31ab406fa7b0f48ad6ea87ac5ee296ad17b18ac66adffb15fabba1af93dc
MD5 c0dad001b90d6e7d578cae87fac0bddb
SHA1 4882df037e85c5cf84158eef3d97d61ff3385b0f
SHA512 fdea33c03a219a8e72a42b8e473f87dec5235fd0aa41d6fd8bd7b9fe93a56243a5546b874a882b4a0acc087900b859d35d2b9d5ea6fa0c1bad03d26b2acb00f0
TLSH
T1E1A00223BD509405E00117F0D56101446B30CDFA0D92A2074199C549CE9EE95CD85092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe61a9fb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\dd41f016-438f-4692-8e5a-84544fcc83e1\index-dir\the-real-index~RFe61a9fb.TMP
Size 48B
SHA256 82f2fc4cacd3b3c946de63f05e27cfe0b91817b4f7bd046216241ab1bdc43651
MD5 b443f7568969b81fce28acb1c892d2ae
SHA1 2a75c476dd2c7a81a488a90a61ee113cd6972373
SHA512 2b4115c47ab877c55018cbc0950d92dd0c4e8280a47f8527433c4fa5e63d71699d4c5eed0108d99514cb6c1d04252136092da53dc5077ba1a9e31cc67e27ef6f
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 02a8fb0902ec32c8debf18a42559e2e5eb2d3c3b5bdc2b9f666b6e035115be1c
MD5 8335430915874e31d0df03e0eea81c3a
SHA1 534e5f3031961b5b3cf068dd3d9c3e013fd243f7
SHA512 43090a2dfddb5c091d1ef1de726babdab01bcd76c7172f9e4bfc4b0d5bd4a986f98ab3fb3a98f1cd33764d17792321d35bf35d8d6e71758ccf45905fc2d1cdee
TLSH
T1E1D0A75BF4A94C90DB6F4FE35A612CDDA7242D8C54958088F503243D14BDA8BA322FA3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 c7c5c3bff6d57f69cecae919e801977cb4a869148a303cdd935f0c1b9f067af9
MD5 0cef6efa902c4035797d1d38e3decde1
SHA1 afad69c9cd51ecfb55d03ea4db5d1f8b79f9820e
SHA512 f51dd0b25046351903a19a04e2aff6c8a6791f83c440db4cba7541ba9a5a420638c1423c534c1a895c7f2c051e74e98bb478237ce3d0a720168d2d537744b331
TLSH
T1E2D0A75BF0994D90DAAF8FE25A512C9DAB14298C54A99088F5030439049DB9BA322FA3
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 229B
SHA256 f01a7db118c65206e6e9e5101e71812547f4f584c0504a798163f4c790475198
MD5 defefc3253d12eb503bb3270da998ab5
SHA1 cc0bbecb1fa7bf4ea0f9adfc37988fcb9833804b
SHA512 5f96863a2dcc1391f5e1150249bddcde522b43f812a6dd993c2de762af51e72d05d023107fd525b75482299273aa75ea46f2f64126d0347f1d6f2c30cc6f30e7
TLSH
T18CD0A75BF4990990DA6B8FE25A51289DAB282A9C54E59088E513443A008DB8B7222FE7
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe586155.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe586155.TMP
Size 138B
SHA256 77b7e4622f8d700500e5a5cc98068d45462a1038461cc11c59186ad8cdef7802
MD5 4551515b2f2fb5357641b486295b94d7
SHA1 885202bb5a1b0c9f2b780c885a91c7701d7b7e57
SHA512 e79b6d1798d26458c79054b9f16e5b845f93d2edaab2dc8ab9855cacb3815e86f765ac7762a9a8a33d46e9ca998065959fe905ffc281e4b6e77073145d26f264
TLSH
T1C5C08C67E0940D60862107E20232A84C97082DCC4886C08CA40334281078A232202EE2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 af1f1646b941142ff21af6518e1a4692fa8dab58e7cd3daaec1c439937e69078
MD5 6af657f1cac3d58de675d13def89bb0b
SHA1 5cd0bcd155ebad60338830f2ec76e26f986c0e92
SHA512 9a3ef157f9959883226bb3c334afd07479ab6a9d0b3df555315165fba55708a1a0405eabb6e8fa84c36b253ec67d78aca432c1d0d9941e7efbf932e79207c3ad
TLSH
T133A002648B4BD08DC808C67051AD6D80736068FA01453302D4ECD098DD91A8852D5515
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58df7e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58df7e.TMP
Size 48B
SHA256 f96844500e356bbff869d3de536d344879eb966b7b4cb57b13d94b700f5da0e2
MD5 5ab4a575bd26ed3fea6ff4f9ec027a07
SHA1 036f69aa3e0bb6449e684fd554cc8f06824c2232
SHA512 be181ea3a8f524311bd6263294d82042f36cf33a4eb9b6c8209e89094cf2a5bdc15a857e6c9c71ebcd008db24497ce105252354848f1bee9ee48678519d4cd4c
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 d7ececac487eff131037a7a39807b20ab00557ead9f4f216dfe619c7a171e654
MD5 9da86f454504fae68b4e403d22fad5a7
SHA1 b59a4a86bd0081f3746531a2f5a30228d7bd73a3
SHA512 aa1cadfbfd75891f3274560972e956ef213b910171a1a2cf1386e09ed72f8b56c7cb8309799ab76a048e32892e5ef76e12db2a345a78d7a362479a1350e96733
SSDEEP 96:KUAAKtePCcAKp26OhOKiApKIKbq66aMKrK7:ii7r9tX3g
TLSH
T14DE1141231B747122C7E794DA35487674B42B7633014E82B7BA920B11EA7E780DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58fcf9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58fcf9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f5c038c16eecbad37bbc7778579af27bd27a29cbf817911a95305d05580ef3dd
MD5 ae5ac25f327a0a767b2438dae5baa072
SHA1 246b0f25bd704123e495eb9d2c041dd2961b7406
SHA512 0ddfe31ac4cde16df572043d3c2f5edae2415b79aa3c6636c36b8d37defcab5eab8f850607a0ee4245aca6fed26839e3e218d0243156d368c9c7dbb118d29aa7
SSDEEP 384:h3yFaeO8WsNW5cXpnIia9DO5MzYzJr3ZhTMyP6Nlt:h3IzhW8XKjhOs8hJhTMyCR
TLSH
T1C7827C72BC749C7B99B2A541F9873913AFB440A7DA8A2FC4C1EE9F1D01CB59C134A905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c963aae2c24da0724a133f7e8179a3016c80bca266f2887c149a78d58efd0171
MD5 2312777c422ad1e6474e7b7b5d724c72
SHA1 364a5d0c82af671f7f0259534dbf652f6877d959
SHA512 955505120aa465a1c83c372e1d1fc3e520f532c56bdb7771742b4d73f9129f79ed9536f7c30122dbc0f18d9dfc39448ab98c4be700f52f9cea8ec3e3bfe7ecfc
SSDEEP 384:G3yFaeO8bsNWwTTXpV/D+a9DO5MzYzJr3MhTMyP6Nlt:G3IzhbuXDDfhOs8h8hTMyCR
TLSH
T139826C72BC749C7B99B2A041F9873517AFB44057DA8A2FC4C1EE9F1D01CB59C134A805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 deab58ddb2e1bcef4ba18c8c76ddff622c53a3d3a108b68049b42467b27dcae3
MD5 7e497e5d78594a12544a7da9d3af0159
SHA1 f19d91ec99e615325f2ad655f32bf53b80f625b6
SHA512 3a32ff0365867f5b020aeb02cd224adfacd9b3bf4d231124f136b9c267c74835ca78a1d88b032477b542a9d5bf798c86a4a8005b98038417a5212fb882332908
SSDEEP 384:LiF63yFaeO8KsNW8TUNTUlIlwTTXpA/D+a9DO5MzYzJr3XhTMyP6Nlt:mF63IzhKHwgGXMDfhOs8hHhTMyCR
TLSH
T1C0A25C73ACA49C7BADB6AA85F94B3613DFB400A7D9866F94D2DD9E0D01CB1DC134AC01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 853befb9c60ebc1dd18aa6eff5a8a0c7ac3329cbc78abc198eff912aa8ceee8d
MD5 6ea56458761a6f0c6f6ea15b769b02dc
SHA1 b47139d45f4c025684ed168119cdb7af2933d578
SHA512 7c6590a7b1dae9e2541a3b3a5004f66e9c43fff10e9699c81495e2881ac390b01ac7590904916109a47ee602573ec60ee0e29da2f93840671d61c5175b83e626
SSDEEP 384:LiFp3yFaeO8LysN58TUNTUlIlqTTXprGlD+a9DO5MzYzJr3QhTMyP6Nlt:mFp3Izhe+wg0XdaDfhOs8hAhTMyCR
TLSH
T1F6A25B73ACA49C7BADB6AA81F94B3613DFB440A7D9866F90D2DD9E0D01CB1DC134AD01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 57d2099d453262b680f08d9832c9c3b0608240822f203ee40598f7af23dac51b
MD5 4e9404178044806ddc35755ef405ea6d
SHA1 f5f556bade1ab7bc935775b2b7bd770a541c1a78
SHA512 bb6cf336543e1cf5b6c025f72767b1663359f87ed5d7b390fa2e95ccc495d7bd6e34a738af7a3bf1d707e5638c45bf535451b3f660791288b77b6c937062c0d3
SSDEEP 192:qONx6O7+3hQmiUyyWGttb0CO2b6h2SUgGhZZU6:qONx614Gt9DO5MSahfU6
TLSH
T1B602F9346D686CB74EF2AE45BA873B235FA5103BE9952F80D6EC1F0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a9fa3294dbb953f9e247915ace29f7fa5e4a3d5597b9da574d0f8448e9e6764
MD5 9a11aa9102304473cbfb4069be8352af
SHA1 f024fd9b297b5902a51c0bac9a4efbcbb350c0d6
SHA512 ba3f6817106ea78a8a79244857d44c6afb2ed227b77eacc1c5009e3f152e424207cf1a71d5795fd339c9427cf7f1af892910d15422eb3f512d9613fd8f62d1cd
SSDEEP 192:IONP6O7+3YQmiUyaW+ttb0CO2b6h2zcF0SJr34cNhUqAUU6:IONP6Su+t9DO5MzYzJr3phTU6
TLSH
T169120935A868AC775DF3A545F98736139FB50167EA8A2F80D1DC2E1C01EF6AC234AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 87f8d4b2918a131d6411e5019471ae72a4b18ae9bb5fd4cc270f76eb86e8cfec
MD5 5769c9060df5ec5564b216e71df4043e
SHA1 a26d5866e703cb4fd064ded04335af024814b394
SHA512 c91b0bd8403bf9f27d6c76958bf25457bc35de95be520f51a06e6b74a2b333977ade5c6edd259f833372e0a501d7e8d1da67858337a8e29f7b9155893c74d1ff
SSDEEP 384:j3yFaeO8wsNWSTTXphkD2a9DO5MzYzJr3ZhTMyP6Nlt:j3IzhwwXYD3hOs8hJhTMyCR
TLSH
T1C5826C76BCB49C7B99F2A441F9873617AFB44057DA8A2FC4C1EE9F1D01CB59C234A806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5895345a8a73781395639466dd4e35c2455453e1c23dd91b127b5c821bf7e70e
MD5 dc9210414b56cce99e3683d657b37670
SHA1 2384cce632c15794052fba1eb1b018c901689d29
SHA512 992dcbb6f5ebcc618c1337dcf55887ad939665c39c18b5d9aebca8b9a54858c9361064db010ceab9393fcde7ff30cb0e522032903e46389d6e000e1508a257d6
TLSH
T170E00242920014BCD028033004431F204AE2902241F003456B20494C1C273042E30F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 91fb66edd652168f4bd318162c7c95293e43111c744da176920babaabb74a98f
MD5 bc8940f54398594e672d4b90744c9ef8
SHA1 59e69d00d4864b59cfd1024d9d9a8089639ae72e
SHA512 37fcc5ac04ce9b3959638995cf708a452913fcd6eac4f9a5d703b34af45db371ccf6a86e3082a279e996b915883e11d15e4988ee1d84bc8f3db4a50ee19ffbaf
TLSH
T14EE00142920014BED028033004C31A206AF2902243F203456A2049682C273042A30F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 111e1beff383f9eeb99040deff1ad1dec4f05a9f7eab9728ff8ab8baaa22d19e
MD5 e7500baec5e8c8cd8ad9754653eb100c
SHA1 6ee55a7e617df76383bd0987d6569ed927aa6803
SHA512 71e3563a3bbe43221b3654d0825ae0369a521304fa56b2337dfd325f42d2f10b849118ab5973e6d29d78ed62628cd0da9961de65e039087fb47fba5e245850c5
TLSH
T109E00153930014BEE078033008C31B31ABF2D06283F20347AE2089697C673042F34FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9dbeb2ea690a9b407704c07f8ffc1aef14897b3fb14ef2b37b70f180b8688d8c
MD5 df63f5f2555a5b2cb6ca12dca0f88389
SHA1 2c3c41be56fc11cb51f14f66f1f9a7952f335c1f
SHA512 3b7fca3ef2bffebea5a7d27ede155a548c59019fe2c32963306778c969e5a02e24e88ff3af5b4281dd297e09599e404a938b070e83203635135dfaf8c474491c
TLSH
T19CE00442A31014AAE468033118C35B71AAF2D06287B20747AA2489696C673046F66B90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 92f6ba886c3124ed491b34abe87ceaa9563ff22fa822e8dbf8963c83cf77056a
MD5 87df428df9580f0b0ff6f2da8aa5541f
SHA1 7d302e77dae305ffe2ff89aac6d44b1915456557
SHA512 31aa584f189821791a4f9acea007333e4837a2057cec78c8949f1868868a5d7525bc3305f6b10d2e097c82cd76861616ca2c1d80bb867dda1186261cade922f9
TLSH
T107E04402A30020AEE8A8033008C30B30BBF2C02283B20302AA2088282C2B3002F22BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6bb5219c6290bb1b55a2a04cfdc33ce572d05f5d9e2d7a4eac846e372fb51b02
MD5 32abe9b5eb6763e3d027ac722b4f8248
SHA1 c10fe2c55d62982a6b8ebe37646563650a7e06c1
SHA512 2261a305d0dffd954ebdcaa80fa85837e40178cd15e8ea69cb76f788ff4c39e4646501a43113e222865c1a6eee4d19abba45ab20617934edd1ab9212b2ba2930
TLSH
T122E04403E30020EEC8A8033008C30B30BBF3C02283B20302AF20A8383CAB3002F22BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7e39c884617b58e2060002fe64996d461e048aacbbab891820a5217e199d1379
MD5 0ae9bd1ef7d002dbbc0b031989e61ebc
SHA1 f8f0701c2b2df739eae3374e424180f910e9ac8d
SHA512 44870d9cf801ff8545d3d53fe63e67c6a75a699cfd3ca1123533b4bb68e8ca67511529ae681148595037354f4f7c408c29f1d3dd7a80388c23e01dae58145693
TLSH
T19DE00102A30410DEC868033014D34A30BBF2806107B20B46AB2058686C577002F22BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 b0508253f5b11d618edbbd97d88a43ce5e5ea96798beb64d764722f6f8084c82
MD5 d8bd17e9b0dd96ccd8bef2ecc2a1a062
SHA1 b13a9571d15a69e62d31b5aee1592e052e0aa082
SHA512 621bbc7d18a6f67b9288bcadf2b5837c76cd3840cdd93e0fcf8907259b1e6a340deb2a1175622ea26b7f7be0602cac79cc6c8cb88459a1df2ff4e93c3d859645
TLSH
T1EAE00102A30450CEC93803B024C39A30BBF2806247B20B57AB206CA86C277003F22B90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 76d41d986641f44c5d35b42af057b40666f5b37d43776d33fe281c32a1189680
MD5 db61b4f8156b865305d940be99a112d4
SHA1 526da6503c47b4c7d978d06ab6c0849d5975896d
SHA512 0a75ced441c27813270a257da8d5f7a88ab1faf2f8b5ae3d752a0fd4799f69899babf2c6af633c116d9b76047143992c4d43a1e7c1584b8e6a89c35004bb0691
TLSH
T1E4E00102A34950CEC938037014C31B30BBF2C0A247B20B57AA20ACA86C677003F22BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 739e0374720528b792e0cac657e4bd880c56f672fe31b590e597c5e92fdc6c0e
MD5 76e1e6dee99b3cb9ca65cf60307474b0
SHA1 0d15db60779f005e91db82f9f10fe7d1167fefbe
SHA512 ababeb7d2adba8a4a581a08b09a63a002c832812a2fb14acd9a8bd50d9ff1d51c659a87e44a476bf1e84a8bd18fbfc34876830ee48ac2d4135dd39c143c81e3f
TLSH
T11AE00153930014BEE068033008C31B2167F2D03283F203466E2049687C573041E34F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d8ab9dc213530b2ef755357c3c881d09f9fe7cd959c4180498688971d67af713
MD5 09b756acb12cc6423815db6e196e334e
SHA1 56006be2ad037deac8c6804c8f4ca8c546b17951
SHA512 096b49afb4c0a6834ca9dae6ddafec6795c426f6185993d7dc0611e08c58705c2a33d2550e4308007143dcf12b4f1f2b52fd4e4f1d24b1cbfc3168e4e33669d6
TLSH
T10DE00252A345548EC578037014C71B30BBF6C15147B217575B215CB86C677103F22BD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ae9600b05e7bb6588f799d789028dbd590411d039e767d114445e8d9172e9d79
MD5 e18dd43c9a8786261fea05067e6de492
SHA1 a11fe211f8d5d8244f51f4bc0dc48bef1ebbf3a4
SHA512 915d3cedf93fbf51d6d79c6dfb073ee3827c9e23d572c4c6b46d8852af5d5acbf17be4efd572badd3c431659ab4652cd05abc5ff87fdbfc361ed676da6a1c222
TLSH
T1ABE00952A30014AAE468033008C31B21ABF2D06287F20347AA2089697C673046E75F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe588aa7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe588aa7.TMP
Size 392B
SHA256 0a285705dbd1fd64556b2dc9c67b0c258e8af3df0c6cafffe96210bb430e6fd5
MD5 eec3ddc964b7f136f3f81f690b5b7064
SHA1 c87b42c1cd69170db1eb7b3bd44669e6fdcdaf76
SHA512 06425ec9a3bab9ed9a7f136e4761fd5da748e56c6fee049e900c385c11be77134e6a1c90e2ad6cc87e72616e36a1700ef78774c4de06dbfe6579d596ae04e8ca
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 72ca2bcfad32e36533e15964de337fa5d097e9aa7c7a8280cbfbdc20b69aa94b
MD5 2ef7f256ca92149f66bc3f67c5de23ef
SHA1 57fb9a5ddec7498f5661507478b8f0088021715f
SHA512 370bfe4d55bef4359cdba279da16a7c42a63acdfe17b646cd960fb0b71e649972b6bf0a7760e1c2c79a660e1bffff5a59fad0e15e15f35a45c5f5f1d38ffca9c
TLSH
T19F41185CB6FA1148B377AE56ABF6A86D487EB8372E06945D10010D8F0A67F40DD72B33
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download