hxxp://twitter[.]com

Resubmissions

20/09/2026, 19:08

260920-xtk78azzbw3

20/09/2026, 18:38

20/09/2026, 18:25

20/09/2026, 18:08

20/09/2026, 18:05

20/09/2026, 17:58

20/09/2026, 17:40

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
1048s
max time network
1045s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/09/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://twitter.com
Sample260920-xtk78azzbw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1004	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134344049448475978"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-681733028-2344970462-962213935-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{B2757AB0-21ED-4A0B-8F26-59C01B65654A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{CF44857A-7CE2-4746-9ECE-015EE094F2C5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
11260	msedge.exe
11260	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 3920 wrote to memory of 5624	3920	msedge.exe	88
PID 3920 wrote to memory of 1004	3920	msedge.exe	89
PID 3920 wrote to memory of 5164	3920	msedge.exe	90
PID 3920 wrote to memory of 3392	3920	msedge.exe	91
PID 3920 wrote to memory of 5164	3920	msedge.exe	90
PID 3920 wrote to memory of 5164	3920	msedge.exe	90
PID 3920 wrote to memory of 3392	3920	msedge.exe	91
PID 3920 wrote to memory of 2572	3920	msedge.exe	92
PID 3920 wrote to memory of 2572	3920	msedge.exe	92
PID 3920 wrote to memory of 2572	3920	msedge.exe	92
PID 3920 wrote to memory of 6136	3920	msedge.exe	93
PID 3920 wrote to memory of 6136	3920	msedge.exe	93
PID 3920 wrote to memory of 6136	3920	msedge.exe	93
PID 3920 wrote to memory of 1884	3920	msedge.exe	101
PID 3920 wrote to memory of 1884	3920	msedge.exe	101
PID 3920 wrote to memory of 1884	3920	msedge.exe	101
PID 3920 wrote to memory of 2176	3920	msedge.exe	102
PID 3920 wrote to memory of 2176	3920	msedge.exe	102
PID 3920 wrote to memory of 4944	3920	msedge.exe	103
PID 3920 wrote to memory of 1224	3920	msedge.exe	104
PID 3920 wrote to memory of 4944	3920	msedge.exe	103
PID 3920 wrote to memory of 1224	3920	msedge.exe	104
PID 3920 wrote to memory of 5960	3920	msedge.exe	108
PID 3920 wrote to memory of 5960	3920	msedge.exe	108
PID 3920 wrote to memory of 5960	3920	msedge.exe	108
PID 3920 wrote to memory of 2072	3920	msedge.exe	110
PID 3920 wrote to memory of 412	3920	msedge.exe	115
PID 3920 wrote to memory of 412	3920	msedge.exe	115
PID 3920 wrote to memory of 412	3920	msedge.exe	115
PID 3920 wrote to memory of 5932	3920	msedge.exe	118
PID 3920 wrote to memory of 2812	3920	msedge.exe	117
PID 3920 wrote to memory of 2812	3920	msedge.exe	117
PID 3920 wrote to memory of 3924	3920	msedge.exe	124
PID 3920 wrote to memory of 5300	3920	msedge.exe	125
PID 3920 wrote to memory of 3272	3920	msedge.exe	126
PID 3920 wrote to memory of 2076	3920	msedge.exe	135
PID 3920 wrote to memory of 2076	3920	msedge.exe	135
PID 3920 wrote to memory of 11260	3920	msedge.exe	139
PID 3920 wrote to memory of 5076	3920	msedge.exe	140
PID 3920 wrote to memory of 5076	3920	msedge.exe	140
PID 3920 wrote to memory of 1368	3920	msedge.exe	141
PID 3920 wrote to memory of 1368	3920	msedge.exe	141
PID 3920 wrote to memory of 3452	3920	msedge.exe	142
PID 3920 wrote to memory of 3452	3920	msedge.exe	142
PID 3920 wrote to memory of 7252	3920	msedge.exe	156
PID 3920 wrote to memory of 7252	3920	msedge.exe	156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://twitter.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff868a4c188,0x7ff868a4c194,0x7ff868a4c1a0
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,1239198613560928942,2299306529110483644,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,12401879919159314338,13035763210199971790,262144 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:2
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,3972457917229251072,16058338500241233676,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,15139215363751038873,5515994433771863007,2097152 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,5358554969769179146,15898301186347955813,2097152 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4976,i,14116039424826408153,6349286466864605581,2097152 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,15717272235494394296,1279489472195336717,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,3510865281438087977,17684923152336536198,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,2465573583136261049,11916716747941817348,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5888,i,6331392312811271139,6160089579766047257,2097152 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7976572962169700347,12131528289020479371,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7976572962169700347,12131528289020479371,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6328,i,6271757284932430075,5940055661706888657,2097152 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6520,i,6534810570465982044,16591370505625503295,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,4408474397190955428,8900416161003868580,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  - Modifies registry class
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,1819124667058189620,17328284320875015202,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,13774932243151167581,3554157605102960859,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,10914095471353055367,15389415460857864816,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,15099965184428988314,6567083130012343533,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6928,i,2724341754219327976,10968044651621877582,262144 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:11260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3556,i,2323294967335808886,17428226032939961207,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,5658045260316742647,17720016768254805775,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,7330479718448262421,10392327506420831209,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,12463897489961174248,8425819291116318589,524288 --field-trial-handle=2540,i,8139675367926413465,7475294796956743219,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:8
  2⤵
  PID:7252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b1e13df85efcdd1372e6f5b4169a68bbd324123b1cc74f307edc9d46f0526f91
MD5 3b68891b4b4743c41814f3c47dff7d0c
SHA1 921b16b1ce770599c5de0f523a3700ebdfd5dafb
SHA512 45a184c6495489ed78b49477b743e9658073a513bdf68dd004e79fa1286be7ab4e7e656717e1a5d2b9b3ad426ed49a3d403d270bcab317ca52b3bca7db4322bf
TLSH
T1C8E0869D16DBC2BFF2067847416D678DC2A07F0FD7CC6B4A2B04C4D67142A48A2EA696
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 be8b4f94d708febe120c7f114c3fffd4cb148dfefe612b02bf182c21186a2ec7
MD5 027eb739ac8214389b495063ce671f99
SHA1 65076ff602cbacee12a49a0a8f8ab98c30dfa717
SHA512 57232271bce5946513e72dd6fda79988b11d368f2c75c0ac48daff7e56d73f5eba277372f3b8fdbde1f5026a8a76094e3c9c2f1320d4d2c81433d9e5fcdcbe5e
TLSH
T187E0268D0AC8C2AFE2C0645B82AC5B4C83A03B4F92CE6A1E2B0888987005040F3C36D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 2f668b83680624569e71f5d43afab6cb28271f19dae38254e866b66a2cf1420a
MD5 7ba38e449e9289dc1ba47cb21f4d954b
SHA1 d50a8ca31052f397db5d75776be039946d2a5c5a
SHA512 0e1fc790c78c9e006609de4a43d7527f876fc72a2dc1c53aaa85bbe34f937b002fd693c5fedc356173fd4f05d7fc918ddf25f5fe7edf316a083cc34b3192f6a0
TLSH
T163F02DB5CD25BC3B08FC5B2D60544B4AFB5113572B80888F3B3D811D8FB1637854685C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
Size 27KB
SHA256 247c4874cc775aad822d5e90ef36b1547d1848ea50254e980a7b02add940132f
MD5 164d351b97c000823d5eb559664f4838
SHA1 c88864dbf995a3e1e0687888b6f296e10f8803c6
SHA512 6bd691a158925140a6301438e4fa1a4b9fdb70103948802162a9d2915335662b8988557c556eabb9912a842b3f78c9efa5924ef431eb377f90a81267fb5a6a22
SSDEEP 768:+yU0HJ6ro0JrWJcj2po/A0wR4Y+/oJschqS7:wqs0JIf/WlDscv7
TLSH
T110C2F1033F4A9903A563ABEF5907ACCCB4594609819CE98FDDE7AA943D162BF3701718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 27KB
SHA256 e613719b041dc5e6be85aab3b82488bb196883a4c0dbe1666f31f3ea99f654ed
MD5 e7a07ba6ba9e7480c0739ffb6fe98f4e
SHA1 ca6d679afa97998bd0f3fd7e73045767619d293d
SHA512 47518f9e01521f96016229e38a21188d3597f6d284d314404ea0cd43612eeb95cb15f882720b8e5e5a393acb8a4a83561b4ddbf49333bcee89c5682fe41ef594
SSDEEP 768:jX64Suzalqer9LjfEuLM3DxBswJabNxXFCFNHSOQA:zDPzalqeljfbLMTxzaBxXFONh
TLSH
T17DD2E14B1D67F900D53E6BE852C4BA4603D6FA22E49C1C906EB01F5B142BC8CFD6199A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 27KB
SHA256 d07b651c0fe4feaa46ea16d44de11ff0c9e19c892ccab1101507446188d7c501
MD5 9d3a653a3ec07d82645ace1e4d622f57
SHA1 d8ac01b287f8f84984c05f90e6e9dbe8e260c847
SHA512 5a90cb4794e894df06c60669b0045bfacdfb87eeb02b4cd0675b3df66a07fb59d529f5ef0ff892ce68f1a0d7a98c1303764541dc0fd5cf72a1b8098ddea08a2c
SSDEEP 768:+rVs3UYYJo7u9qVBL7/NIq5wPsBBidIT6ECZQFUKTr7:+rWPu9qVBP/NTwPsGdcGZQFUC7
TLSH
T152D2F111B1C16DDCE981224DFBB7769C1B3435C7AECDCA4AA92EFD62DF495844C81C28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 26KB
SHA256 6f9cf9c3fe7941d72141da82f5c288e37ba429973b8407a364600102ca8cdcd2
MD5 0195ccd60e21ac7200543bc602fb22cb
SHA1 2836dec825d996c4ca40fbb64cd311fde34df53a
SHA512 77d70fe3a4b7c953e41d4ef0325d1a24564555552a8134b24ce94f225b7d4f5c88f2000ffe6ae98b97edb251855beb3f0121622ef2da4f7963b447889847b31d
SSDEEP 768:ZLIW2ulhUWYQCvWcMtcpK6OPu5hukTHf9ZHTWzNqoXLp:SroyBQEWzIBO2BrVpWT
TLSH
T190C2E0998248E5657D04AA7B917ED4AC2836DFC470B8B94FBEE02B8353BD76900A1760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 214KB
SHA256 57758423cc5a576cb16f30a5beef2785360e49852b7f14f21d30e6cb55c802da
MD5 1f1792ced387942179c2bdc69f98c088
SHA1 996547bf9174a1ea77f70d2c94dc178133bc3762
SHA512 b7c7f18a50b5502d02992886c819541cc6eb56fbe9332a35e41428c2c2aa90816bed2a228b7ba4b76429e76f9f1989c0238cc979ba605c8f192317376fbcb416
SSDEEP 3072:P+vTV2CXZddca0UE0ZIwWrjvPTgdKRRqPe6EUXOV66OPxCgwxSI9uId6SJm:mLVxVcaNz2DPTQKWe61Lx/ILcr
TLSH
T18A2412FA57F6C8103503ACA13F2ED6E7940AEEA562279CDF79BD1C15523FC94B200896
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 21KB
SHA256 41ae920e853cf8a49c0901fa630635323f7c2330c89db8cd79da940eb4fe181e
MD5 5d660962c8ad0d223e540f8288a216ad
SHA1 d64923ce0cf81d4ff99dd956c949a4ae0ddca003
SHA512 f549de9ad624a7634841d553e7d0d3f6a52f563d1118987fb57a4eb1a4fae438f5a9b4d5809f19bcb176965f12a887d578d5a22a6a7757fb0baaa247471d20aa
SSDEEP 384:pnvWtBxzrVubdsMuaPmq/jJk4SWNnkqr94LftQFSEjMz1s4Qe7ZolEfF/Z:0xzoxsMh20tk44LfQhjMgea+fH
TLSH
T165A2E0E68D8A8CF50A9414DB9020F2CBF9997CED38510A07E61419858E824F21DFD5FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 20KB
SHA256 2039852489b937947216812485a533f0d2c24eff234746acd9e0c854bc6bbeea
MD5 f205c90eaee1d15c674a5e9c26eb1542
SHA1 1eb13f2be44c3d664e9b1afa66c7273a07fbd544
SHA512 201555e20324b38012088823658ac75c88e65897245f0e44e5bf523d3c0bc3105c8046a54e5d321dbe7c4c9a2507e1e14d8ca780b91216147d7710bf74c17fd8
SSDEEP 384:g5+flx33yIJZnwW6agp+XH0Gytr1pQuyq6/9ncZ4/4Irpb1ZgtJ1xDc98ROp9+z:hNxy4hwLagMEG0lyqGnd1aQBL8
TLSH
T1D392D0DF329590C98A44DE60481362D8E78F4069BC4F9B0C5DCD2A6D65F80DB768F0FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 db03af4d8485dcf6a04248045d5406efe4a19894f19d178d53dd4c19a4e8979b
MD5 a0838c1b0a142836b7fc85506cec8f24
SHA1 aae7909692edf7d9b30a73880271af168d90bef3
SHA512 463d2e305430d945840823d8d22f3ac3200fffe3c34521af088bca3ae6f30a0c95c50cd5eb13e7914c58fcff91bea60146dc5a21d2ca817f8c17f50e66981d39
SSDEEP 192:6CnvBOOFWmfwU5a2EFmBvV4XJgxZ82ahr:6CvBfwOa2EFmBvV+Szahr
TLSH
T1AD02D984F5D69AD0FFE431F4D596088B697008ED084E5B837735CD25269BB87F9908C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5aa01a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5aa01a.TMP
Size 3KB
SHA256 afce4e079c7befc0bc0eed73cf37b630d07fdda55c48da7dfb24590b4a45ed71
MD5 7e8d590462907c7a964c4bb4794ca42c
SHA1 f161db6935a6c23b7c3a2b80110dee585e5eefd7
SHA512 616b865fdb7fc25a9f557465687d94a7d950e9b5bfb6c8c1b868af3544b52338738b99d0c49719f67916e373f65e4d6f91d88ccaa814fca51a527e9c3c7e056c
TLSH
T14061B54CE89940A0FFB894F4C6DA15C73E351EFE498F2E5186A4DAB8680B797CD110C7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 ca23b68a60df60dac9698677d6a00dd68cff416abfc99419672042535830430f
MD5 9611b069f0a1f15e868689b00b60df95
SHA1 6290ad6a4cbcf04d75a5ab0feceb1c3378accf2e
SHA512 6b78dbb298218908fb81e0eb227b9ec40cc4df09d395456b5aa8ee338f499fc8e9d39dcf3060c1fe8863c1ce2c60cd5ea7172eb3cd91449829946a846ca6ec36
TLSH
T1D1B02400305104F5D50373703470040330140CFC0F010331F0F74010F511355703174C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\00\00000000
Size 1.7MB
SHA256 23ac78d8d700d3125fa80f87f29aa62fcdc21ba8e167b79d5760c96884af183d
MD5 b43d58fbc123671761dd7a6b8f9c3ef7
SHA1 77a4ef726b7e67573f36e3197b4cf75b04be6850
SHA512 e908235494c2d25c61e88fc1781987d491c644b165b11c4eb0ab9bccad8fd2382083a8c8b5fe3d8d6d5dba2469dc6b0bbb197c04dccee90fc0e990672fe949bd
SSDEEP 12288:DJj5jjjtnsCJTevrL4j5jjcjW0RICN2FUabDQZnKSE26:Fj5jjjMH4j5jjf0RDNTnk26
TLSH
T1DC85522F064ACE7AFB55FA35F07320E7FF75785B53ED9A111D8809AA0136241D2E128B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\00\00000000
Size 1.7MB
SHA256 f1a9992ffbac5780cda24833d745393ab70faea5ba7c1488685cb5c11e726661
MD5 f8643ea618b2120e67ac75ec971e8df1
SHA1 f34c0cf636d391947e8ece7c5f39235e71333286
SHA512 8db27809f43ae56f6152c5d2a6d48f483cc8c672b1b99356fa7f6f6057ae80ce34c00e7c4cb9f6705d72be0b1a63299f4c13d67d9805de66759d3db9d21ed90b
SSDEEP 12288:IJj5jjjZn5CJpevrDBj5jjcjW0kBCN2CUaLDQZ9jCg2d:+j5jjj/PBj5jjf0kgNw9D2d
TLSH
T13E85522F064ACE7AFB55FA35F07320E7FF75785B53ED9A111D8809AA0136241D2E128B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\000003.log
Size 7KB
SHA256 c5be58acfc73d022217cd2cff59bbaf4325efc2197e822dc139928e9a5d3dded
MD5 26d884c8d5a35776bf0b77d6fa08d99c
SHA1 c094a265463e0d884f531d7cb2100dcd39add24b
SHA512 0066e245b95719fd210947de45545034de136de4537f1695f43ade32c2b42d2f1d143b0c111d706c1cabd3fbbb1544eb6299eef1a8bbcbc1c33c0ad4ba60122e
SSDEEP 96:e5EFLKgr7wu+syApADl14DL7GQXhxQOsxrXpNBh:CEFzEVsRel2DL7GYhxQf7pNBh
TLSH
T12FF16C7B67C44A22E0F95A325DB21B99CB337D42EC44814EE082F77DCA726848FB159D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\LOG
Size 331B
SHA256 65a57aea82829b4dab91d1687cb0b11a8862b4da62347f48e61822909306530a
MD5 aa6dfbcbe6a461094147610b3596d45a
SHA1 a20ce5c31dcc7cd781cbfa69dd0cef3624418161
SHA512 d5618e540a7e103d1565befbcb334255dd50d25a101c942b3b62638945c6d92d9756dc76a20ff336a83de1ce125b6ad2894394a069125e935aec5553f2a74175
TLSH
T176E0D82C86C9C55F6214609605287B0EA5B32E0FD7CC6F455F06C854B047084B0AE151
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_x.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d950844f54600fc3c0275b994cd6aec3c8af125ffca75f7994959e96d10199b2
MD5 d5024f3dc4d3e9ed8db2d8d23c383a92
SHA1 7b379837b3808ff5233ccf6fdbfd66e5fd48f849
SHA512 b6620d163fda27f57a3099397571e0e8d7fd9ca6adf1142c6819f8e3227d99d9739d52360890ca7f3710c668b517ae633656f3b074b47968417293d97d2b65ca
TLSH
T13E31D1F7C3E4C66E890096F0A718AE2BCE2D0914432C7D9AC5E4AF2B93E3471D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e22ae013100da8735da9157d98b547cfd7d1ce74fe5faabbdea84b726a8d2246
MD5 cc362f160ffef6e066dcedc55013510e
SHA1 69e492efe2eb4a27f6b664261858debb4713f8c1
SHA512 376c5f51dca1a3a07837cb5d619c3806b68f642f1476a049d90fe5d322464ad7ee4ca97d71d7df95a8f9a322330819074cc831045c6f9c502d31f011dcccb809
TLSH
T11431D1F7C3E4C66E890096F0A718AE2BCE2D0914432C7D9AC5E4AF2B93E3471D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 416335d048e8baed126cbc8b40f32095d0438779d3746617c6af936e3ed681d2
MD5 88663fc285656d76c970b9bbd7d00b19
SHA1 f703f3e38dac7107f0ebebe9911a8b4a60aa00ea
SHA512 92dfc29d55e7b7d82ec9852b3705c0bf25299913372671f5511d721901d38549940bcbca593f6a3f0811cb1e8940c357506283252c83d6d34c54748b178888b2
SSDEEP 96:D1IONnpYBOVwaiufKzB4+6r3Eh5BRBOewB4BoblQ38:D1zJpYBowail14+6r3Eh5BRcekcoblQM
TLSH
T1E7A1CEF7C3F4426EC91166F0AA146E17CE6D092603AC3C9A85D4BE1793F2471E2C1A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 23f5f5039904b83a5ab3ec3844507377b83c5342f03b65a4ff2001315fc6bfc8
MD5 fa9f0077922267706451e61c5f042593
SHA1 34d33a89506d14ac42c23035614f0712c603df6b
SHA512 a7e733ff8df4001a5caeb044d1237ba9b95774a59dd16775d6f15adcc4da58bde6a1aeab16c35829f47a797ceaab59b5f4b2d25bf53adac19b9e1027bf4f1049
SSDEEP 96:D1IONnpYBOVwaiufKzBy6r3Eh5BRBOewB94BozG3VbQ5yBO:D1zJpYBowail1y6r3Eh5BRcek9cozGlU
TLSH
T1C5B1CEF7C3B4426DCA1166F0AA146E1BCE6D0526036C3C9A85D4BE1793F3471E2C1A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 233c3e9b428a779c00caabfd45871e5c73e6d78093cc325eecf8d8be55894108
MD5 aa99a589f0def076f59a7f54f0a5ad2d
SHA1 cdfa15c623acce9616efe5b44e80081773583d94
SHA512 46194cba35c6ed3e5483a875c70f75bde3b9323978c2d7e24fcbd53eb5ca0b06b4214d8f855986c148472b2845fe651e3f4ed158403f76514ea7f6c629cab9ec
SSDEEP 96:D1IOh+WBeeVwaiufKzBy6ZfE05BRBOewB94BoldGj4/Q5yBQ3VW:D1zh+WBe4wail1y6ZfE05BRcek9coldf
TLSH
T1F8A1BEF793B0426ECE11A2F0AA046E1B8E6D052643AC7CE985D4BE1793F3471E1D1A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 987a1a939dbe53510f7bdf462a6df6886e6fa995839df3a7114dd41d8ad7fc7f
MD5 3ffdf8d7e3e3af223ec6fd1b5a4f41ba
SHA1 fdd6d65acbc9d36b4373651d9b641ebe618f313c
SHA512 96f539727730a71edb0fe021b8bee4bfb09c5511d920306b1bf66579e0cc957bb3b246b76e79966173997b83b8fe73884200d19caed771fdc9e8f5facf87c6ce
SSDEEP 192:sxZIRGk+/fDsaQZZ/3zodpusIHW6+WNj///YbIdFYG+luIgjoJ:sxZI7+/fDsaOZ/cSHbT/FTYG+GjM
TLSH
T18942C816AD28A93B8CC7D219FA15BF53E7F91033A1951E45AAFC8A2C15E76DD230340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 73f55c71a07d25bd51f7c594a055ed8ebcf4ba2b88a7fa858082c75a334689f5
MD5 60b4a10220371b2e384ee7d27a309813
SHA1 4dc089b4a4ff4a41ec0a6e00e4d42ca6643022b6
SHA512 231a105354e8b4f63e9e787d90fa7f09068b673bf58180e7e31b1bf8fa84e17fdb3c1e4c3b073db4c3da4ccfa4003173189d5448f871f89ef208864bbb316d9f
SSDEEP 192:sxZIRGk+/fDsgQZZ/3zodpusIHW6+WNjkFXYbIaFYG+luIg5AoJ:sxZI7+/fDsgOZ/cSHbkXFwYG+GKM
TLSH
T11C42D756AE28A93B8CC7D219FA15BF53E3F9103391911E49AAFC8A1C15E76DD230340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b2f3c15a87711080151f7046cd36e2c6f376d4876ecd37023a6a4b99a6fd09fb
MD5 d2974d2d2f0dfc93624587a2ab1ad056
SHA1 62a6bd2709571bd7fb7a2ac71670cb808d0e7bc7
SHA512 f267e8b3458a9f4e2c5acf6f61ebbac8a2488f9a997baa4392f707555a73b6c51b7b911001ae87b38c1e7fa112de8965d0dc013b429f18cbf3e267998c6cf8b7
SSDEEP 192:sxZGRGk+/fDsgQZZ63zodpus3HW6+WNjkFXYbI8FYG+luIg5AzJ:sxZG7+/fDsgOZ6c9HbkXFKYG+GKl
TLSH
T17D42C656AE28693B9CC7D219BA55BF53E3F9103390911E49AAFC8A2C15E76DD230340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 79e3b90b655184ce187acb71929796d6c34b9d24c04dc9fb985b33660b7f1e67
MD5 5a1fcea8cede93d1d4eca412c8c61f06
SHA1 a23895ea85313a07b88b75d32a6229c148194dda
SHA512 3a00eab895be4b0371d483af615cbced91adb4b2bc72eb4e124a8883b2d9cd329ca01e024aaa77211948785f28a312e2304623cf20a809d62cb04c043d4627d5
SSDEEP 192:sxZlRGk+/fDsgQZZ63zodpus3HW6+WNjYexYbIAFYG+luIg5AzJ:sxZl7+/fDsgOZ6c9HbFxFOYG+GKl
TLSH
T16842C6556E28693B8CC7D21DBA55BF53E3F91032A1911E49EAFC8A2C15E76DD230340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7e8c24a22a146af7b266308972fc67c7bac1534b40ba2d59898a42dd7411c6da
MD5 939631a756a0523148612032373cad84
SHA1 b0787f788cbc084b416ab45385fc4482f05e3288
SHA512 e9e0873f9b6f299b9eb38e4c005992a9bd0542d4aa2b71e92dd15c23aa35101f6f38d361bb3925f838f874541260cf8a1fc8bc9a00b13c27e8792f0f89843158
SSDEEP 192:sxZlRNk+/fDsgQZZ63zodpus3HW6+WNj5/9YbIdFYG+luIg5AzJ:sxZlE+/fDsgOZ6c9HbV9FTYG+GKl
TLSH
T17542D555AE28693B9CC7D21DBA55BF53E3F91032A1911E49EAFC8A2C11E76DD230340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 27KB
SHA256 316af35df7a27a6dd392908e17f0629260f716d7c5f941d846908e93085ef691
MD5 db8d2ddc3ec61eb20c67ab0d5262d22b
SHA1 ae935f09db49ae8993665a4c8f46ff9a16e8eb44
SHA512 744adb9d40705bb9fc04a94fd2f52f7755822b284b2984d6bd1bb073d03f64130c7c146f335400a8290a77b61e94dd96617541443f347d724d7dfd65707ead84
SSDEEP 384:sxZlE+/fDsd66s8qMpRiYnazAW8pZS15posJWeT+uOZ6c9HbAhF5YG+8Kl:s9E+/fk4Mnc7WeT+u5oHbMF5f+t
TLSH
T1F2C208059924C83B9FC39D29653C7E33DAAC106221C5DEDA5AECCA2C01DE1FDAB47417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9c96c636b82d86bbdb2a11cc00577c970a5d4a847b819cff6a4e50e7334429c3
MD5 b8af9ee24882a62aa26f99aa952807b5
SHA1 40fb5f7bb1991cb5064598df778f6eb57f29216a
SHA512 eee71f56a430d2f0d594b3d7775d8f51c347bd4c94e7a06915af9698228f8e2c9c0727c58f062b6e80508328710468dc3df1a65a32eaef95009b8ae01fcb7a97
SSDEEP 768:0RyktrnWvDBtt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroG1K:0RyktrnWvDBttu1jaLWLywf0G0
TLSH
T19DC20A3F640CCB7E5FC01E9D9C6A6F872DE802CBA6548D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 69b12fb149249f5259ae288c8178562355234ebd37eacf13ac4c9aacf1145294
MD5 3f317d424cd3d1c30134ab1efd6c0917
SHA1 b4a24488a569db002d235d6713e2d31968b168df
SHA512 83cccaab3bb86ebd3e293a954fcb5b32302b09d3b40e03d5b115a29fc2414b861eef06685554dac2d734f1d48485dcc1253c64e7f975adb45314231e975e81eb
TLSH
T12BE0C0F63EF73810DCFFD3D9543154614001B918C545FD9F21ABA98790717153407C52
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\782abad3-e264-450c-bc78-6f83b0d0c3dd\index-dir\the-real-index
Size 18KB
SHA256 5f39d72af1eeca43d87af198b4fec690c65a03eceab78b1894bb877cec09a33a
MD5 c1e24a71c4f96878d4d15865f154f088
SHA1 59b00bb4e9cfd8aa6a40c33af3a16c5619ac8d12
SHA512 a817fd27da1fa7a956d4a93acfd00b843dd4bb49665805c2b0be3f491734131318d57f7e659a35e59d48ba878080d63a98ccf155bc093ad6c3c6800469c48e22
SSDEEP 384:ilKBriv2BRWVcfR6LO5ZGGGJ+UU4sZwv4J7ynsGEiaWNCnhphzyIC2:yK1ivTVTO8EoUDGEihKQ2
TLSH
T1CD927DCDDE978B0FC80090B85A7A61D4B360D6CD6B887773328C90763DC96AD0DDAB58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5b2027.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\782abad3-e264-450c-bc78-6f83b0d0c3dd\index-dir\the-real-index~RFe5b2027.TMP
Size 48B
SHA256 2a6cfca2d648bfb9b864adbbb0005c29de69e048c64299a91e49d5ba5f249068
MD5 eea78497c199f0164a800547299b0376
SHA1 27aabd1f8c122d8ca6e61f75406693c182b09493
SHA512 1cac9eb66aec481c7580d533a8cb9be6ffdd93148cc5204717fc988d3d16c6b7bc65c77c0926bf382671ec03349538aaef57ccfdc91d725bc56ecfc4a5679fa5
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\e154de9c-4159-4d40-bcfa-eff4d7d7cd7c\index-dir\the-real-index
Size 72B
SHA256 ecb3d6ad0739aa56f216206e7d08f241f2bad95a35fbf0d5544e439b7b2589e3
MD5 003e8e852b88391b4b8526bd1756e611
SHA1 59acca5d54d05dd12be520f1cc07afa6585ef6e3
SHA512 96ea68be92f99e38d4037c71f55127e103ce1d93b2052c47539f2aa0cfb3e7bb07d7129e33c8f34a07ce728a7955ee7f5e70c8c5163c4d2ca1715f40ff41a492
TLSH
T178A00220D1561842E32A8BBC1462EFD67A18AA5441037202D1F32245AC979575501101
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b25e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\e154de9c-4159-4d40-bcfa-eff4d7d7cd7c\index-dir\the-real-index~RFe59b25e.TMP
Size 48B
SHA256 5b87fb42fb419854a351e5ca57b9d11bc97dc877ccffe7782884eec50884a5ca
MD5 daed65859e376aff75f8fb5fcace0172
SHA1 dee2b350dec29f4df071e2ba8377c24743873bcf
SHA512 e7f1787a1918bd11bf7ef4c8990a784932a4404c85e7915f4eafb33c28bfa9891606d6c945203505cd36fe0be5b30717d8c11eb7c3dc738c8aff8adf5184de64
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\index.txt
Size 705B
SHA256 c33f802cf09b9ce54d304792b941dd90987cd3bcd07ff540fa97cc170fb653d5
MD5 93fe4b295c8573b69f4a7366cb3f21a8
SHA1 115bcea6c5719bdef8cd01580a2bdf2ddeea768c
SHA512 b1b9b36adff8aea4f8e6823ba52b6ec46a0a3495c87b83a175496c6553186b9697de108708a9910dfd032014be69c48b55f5a838a70e4cdb3e16d848dc9f9811
TLSH
T1C60149395DC1753366735AA6D0F454DFF95075833E864E8D1803A3C12C227A75ED180D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\index.txt
Size 703B
SHA256 7adf6e697aace8524a760df8686106a915ce9cc4147e6ee662a89d184cc1e308
MD5 21ccb54f524ea0a2783b42d926c64935
SHA1 3d265f2cd98c9fb5512036e5336a0dae93c1d386
SHA512 72964bc3d0804abc5b7cfdb499df392b49c2dcaa63ae6e77347c08940f5a5223296dc9e883fc9974fbc4f1f4e1913e71b7fe7df058efdae4353ca0682e951e11
TLSH
T16E01783A6DC6757365B396A6D0F414EFF95071833E964EDD080393C22C227A75ED184D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5962c7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\bd1c4d03a881bd4b56183475e9bd7806830c983b\index.txt~RFe5962c7.TMP
Size 308B
SHA256 a7e00c5fd08f46064bde014bc25ad77b17f89320eef4f1e77d8826412c8fa44a
MD5 23d9e46d0e1c794d8d786243166b4ce3
SHA1 a58f428c13b986fc5e3cc26aaac5002e95503f45
SHA512 18346a43f4f24af74f858fd56e4331c79fa4b44c061b2be3fb10f5c51446c9679ade4c4ce8c4fc01e0b4635ab485b51f021fbbbfe5108e9252202ff2adc770ca
TLSH
T145E07D3A0CC03021067384A1C0B0144EB45079463D42898C0402B3D62C317631DD551E
MD5 SHA1 SHA512 TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 86KB
SHA256 3704e63eedd9cec87d4c574ab3b8640cacb1c2c60a46f6d4eab15aca9785e132
MD5 2c9387d3777ef7e882e4cf52488a6561
SHA1 734bb5b68b3a302359a828547dc00f8b4ef8ce8e
SHA512 761fdae989f968f8fdcc3079cf6082037f792f7d853220f110ac97f88f1843bad88bae3f005d5e8e94cf570a7db6bd98a3c3ca035d325bca6ba46e6225cad6c3
SSDEEP 1536:mka657wj2vrs1xqVK1uDPrfAIs11N6xe1bwTSw3bhu0fJLyx1xdg2a:mka651VK1uHAIs3N6uchu0LU1vna
TLSH
T1A4930A8A7EA6F4B607E345D0C02F4406F02B6F28B00E94E5D7E2C9D6647698E9177F39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1cdccba37924bda_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
Size 84KB
SHA256 1af88a345a39f00bb8934fd6915c36f9b81c5be51e046825946a689184e00a7e
MD5 ac25bfba439e65e434073674195b40da
SHA1 a7b7f7280c05a7847b7cc64dc5bfc3cce4440fb6
SHA512 b49f8ac55c217ba0a2f7b07931ca677c49c7c8ef5fd9fab1d867cae191519b6306a2a772180815f578d1b2c6eff3b9a86810b07d7b8765e028f13fcaf4ad0b8e
SSDEEP 768:OWC8xiY4Moi3ElkxxAvT/sK4heLnJfvjsydcBtyw1aAT47ng3iR:N9iYx3389Lvn7Vdc/yw0Rg3iR
TLSH
T125839DE3C8530736CB0867D5DC16ACD9C3532417AA93E3A5A219C519CB46ABF824F7CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 0f75501fcfc60b05ccdd8e677997eaa90f67ca01ad08c6a45b0bfb733ca148eb
MD5 a6b42505ee0d88a40a022d0f51e51b34
SHA1 b64edc67183404080df8fac2f4c2f0ff0f0f7791
SHA512 08b01a310cb23636bd92bf24d9e56264d5b97fee47b6d219f7dc240fd67bed6506c18332b6793265291f976657eb13fb962928334b8c5c0c4648638368c7fd0c
TLSH
T1ECB0228A0B3C220BCC00C3B088E2202032F00C380303200B8AF880F8BB82300E3A3308
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 4a06fa7e36105dbf05ad9ca9861052b7d2249e91d24a59f2c4753e053cb87bcc
MD5 aeb7074285b45e6a27018524c8724af8
SHA1 4d2086afb8f97dd9d33e918488d3309767ef9023
SHA512 8ea5e474c3b24ce3822c3549d27573e6464c67031a6712a23b1439f7869ac1f70129c3be346dfb36c6adef289dd6dab11cf7cb9618563c3ca4c2e3cfc43d0074
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvX+A1P:OtfFvpopPxrB4Rhf+EP
TLSH
T10DB2241571BB021138FE690881B6972F064232B33159E63B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 e1be89682f9314c8ef1cd8b8c8285f2102b7d1b6d1393978e48b727a1e62754d
MD5 61f72a74a671d974ef30baa5189a84a6
SHA1 89bce51db4b25736a47ce79623c760b7c353e883
SHA512 f5704f7d1aa40e512da172d194611d5b14cb32d7ea78998ea75f1f7dacbbad0ca09cbc9a82aa41c5262a9d49647a4a73cf69881e33f77887668d0189ffe2e346
SSDEEP 384:niiFiZcI4sNH8TUNTUlI4c5mgVlp4zf8BWFAnLtt7EXlU6gL/7Izsiou:pFQ46wgiUfBWFi5tQXltV
TLSH
T1D9C23B36ECA4DABBACEA8AD5B74A3A07DEF04163C6CC5AC4D5D95D1D00D719D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 237f51515846372d0ad835f59221ecb403acb5fbd3e16017b7ecec368f6036e0
MD5 f1215c4cf92fd93e66d0e123164eaa54
SHA1 abe3523aeaeeb407fb47227bbf403a274b733cb8
SHA512 ef3e47b7d50b1b1e76eb2491e0963013d4811f6fbdf0bcf34df51862241178a783bc9df9f1c7f273fb8ae7783bee85738f5188d8f0a57c8d3d664a785774f72e
SSDEEP 384:npiFiZcI1sNH8TUNTUlI4c5mg+lp4zf8BWFAnLtt70Xv4EW1XoU1eQgL/7IzsKoQ:AFQ16wgibfBWFi5tAXIoUXn
TLSH
T1DAC24A36ECA4C9BBECEA8A95B74A3A07DEF04163C6DC99C4D9D85D1D00D759D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f4677096c8904a0ecb677f7fe1de3b87ec5611817d2638728ae41d0b41fb96e4
MD5 a21b21d80e1c136a7eab973b05e8734c
SHA1 48783a33ca218a2557fa0ebf6d4110aa6804b187
SHA512 bbef461b18b4be8899e307630ff0d1d54f8db8ca1db45ef0e5f310ee3fd5e1733ed4f6d25abb65cba07ea4f86954cbab99a3d5c0c9d01a7c476556b2d7e7000c
SSDEEP 384:nGiFiZcIkXsNH8TUNTUlI4c5mgKlp4zf8BWFAnLtt7IXv4EW1XoU1eQgL/7IzsKn:tFQY6wgiPfBWFi5t0XIoUXn
TLSH
T13BC24A36E8A4C9BBECEA8A95B74A3A07DEF04163C6DC99C4D9D85D1D00D719D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 ecb64c0a87cb01be84e89202a97b34925555193b59d714fee587bf5604bda59c
MD5 10367fe9868fbe81ef6a475c4e243422
SHA1 f6f0fb75b7fde1e527c17dd014daf39534ad66ba
SHA512 d01e70210a3700e6469d3dc887e26bbf8a30d1289ac3623deed445b3f827400ff2a7195db500db2be903649d08c4a2adf66ad4a4107cc3231836350067637e61
SSDEEP 384:noiFiZcI63sNT8TUNTUlIm25mg5wn4zf8BWFAnLtt48sa+VYqgL/7IzNo5:zFQ632wgSDJBWFi5t48hgVO
TLSH
T1E3C24936EC98CABBECEB8FD5AB4A7A47DEF00163959C59C4DAD85D1D008719D0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 777226e0886859d605fc76a55a36f19d9a2552c868277b3f9349cfa9ccc86469
MD5 753cedba05e54ca715a2a8b79fad2695
SHA1 68575a4d35340951e7fb8c167825124f845e821b
SHA512 da68abbb5e0f69dbe2897f853bcac8c7c530d665d85e49ad5a76dde1b1f731213e135c6c774a448283b78efde0f659ff1109bb256a60722c7b4f4884987edae0
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e61a4a84a1289961922dd864a39b7b24d3a06260c60488bdd5eb6dde804b74bf
MD5 d663f9851e807fa1680164044601a5ab
SHA1 7d6198581b4c66b29a46b0654d28827e521d9729
SHA512 7b5604326652cfeba72b6507cbaa9a03989c58e020801c63cb9a5349c1229e8b89bf14d9651b62072034fd21f1c557b4dcfe126ee5c9e4c42714435f6cb9eacd
TLSH
T152E002059310117EC03C07340097173013D5C15412F6435B5200A3B52D067100F31ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 52e2c61d30006e60c6d422be53b1026294a8d734bdcf65afedd1a91e295f83cb
MD5 ba24595897d13b16e6491825af328dac
SHA1 3f8a7601c2edba9d084d50b2722b356a3539d6fd
SHA512 1f47c90c35a82dd324f090c0d7edcb7d8a121e531727794b89f0b4805d307ad3c1e02f97ba99b08bcfe3ef40615e9d761b7d6742f34fa90259be63b7dce334a0
TLSH
T122E00105E31016BEC03D0738009B1B3427D5C25922F6436A625062A53D067000E31EE0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 02f76be1ae2fe52d204bc15655d9bd914c9d8eb50188822bd695332c221f625a
MD5 60755be03fff8ec92e353159aa378d8f
SHA1 8091346043d3bfdae6d9fab340d2c1b4f842bdf9
SHA512 96a2bf0ac0bad31f69cb726be66ea1cff1a104c6265fba343182a410fab2f601ed53d1b60d17190410bbea9cf59fd6e57b7b00832df10d3f10d10a5c908441bc
TLSH
T1A4E00105E31015BFC47D077900AB1B342BD6C26A22F6435A675062A93D167000E71FE0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 40fcee8752e8936eb364733da005804bf7b397e1f8a586977373e218d29e31f7
MD5 0c58edb838fa2c1d52e0b7ca7a03f4a9
SHA1 7ff426a46c80dbd30e909ceb9514cee3b4eaa2e2
SHA512 9217bbf52dfef7d3dc194c33b211d788d7d6b3c964ea11b43f6559fffc370e4a6dc32af98cb69c20a88ea31b8c9a1a01dba01abe7fa312d84919579d6051652d
TLSH
T150E00107E35015BFC47D077D00EB2B342BE6C16A22F6435BA75162B93D267001E75FA1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bee5d57387c6091bb55c994cdf40e5c83d54297014a5c95f098f0155628cfa0d
MD5 de98a8ad3e0fa465ed2c542def07a6d9
SHA1 fb5e8aa6f348235ecdec4418765fd6b1e37e1f61
SHA512 aa58c489df3cb074ebc21770ebb64dcb4511c0ed6327196fe3142bbba77c3fd9ff70caa4a9bc79cf97f3e5a12582140542539d9717913b680172df7303f9107d
TLSH
T1B6E09203E30000BFC03C073800D727302BD6C06512FA030B560012A13C123000E20FA0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6317445482d36725368c39650af3cf533b24b5555c2e4a000ecbb07e69046aa6
MD5 f09f3444ef7fd7be764bec11dc31406e
SHA1 95e34aebda3d99bb7e4305e78e522a54ab12e107
SHA512 6520dc2da02e8ada37542c057b3a5891bac39f6d97a96ebad493329987e12e8a6622ad789231c75949cb1ed3630032c8616459de09a327bbdf79fe33a6db5f95
TLSH
T12BE0040513101177C03C073400D7131013D1C15413F743575300D3F40D077000D31F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5956c1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5956c1.TMP
Size 392B
SHA256 96b1e4e4ca2671808e5f469aa1b4a7864b1c4bf5682454667b29ebfdda21b8e4
MD5 fd1ef44c179f76d648c85b316833161a
SHA1 61f8d3c0b544065a7e1047ac5548b35c243913a8
SHA512 c5cfbb9ea3fe5f78d973d78f4469b74c1dc2ee9ee5fd6288662c620415df7feb00468bbc7a982c85191825343275d6227724bbf4ffa2edd17922d6229629e457
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 722c508d2c0c4dba52a230882bd088d8ea24f03f70171bce5abdf360029ebb4d
MD5 059cbfafab41e5454941cd368e8cf18a
SHA1 af88cce963338ee4f1db04ab5ba8dd019e043888
SHA512 cea9d70d45b94323ecf2f89b68295e0ee5c6601ea40a2f9685c1b7fe99c2a8226cebd1c3afecc86cab7b3d09a7ac8479c05fc0bca9875fa1b3897601825e2231
TLSH
T1E9411658B6EE1148B3B72E1A9BF2B46E487BBD772F0AD48D10110E4F4663A40CC61733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download