hxxp://barn[.]blinqueofficial[.]com

Analysis

user interaction
yes
max time kernel
898s
max time network
783s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 23:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://barn.blinqueofficial.com
Sample260924-269hssthpc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2120	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347651981674640"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{E30E1E4F-007A-4C02-BC29-ABC80C34ADD0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5032 wrote to memory of 884	5032	msedge.exe	86
PID 5032 wrote to memory of 2120	5032	msedge.exe	87
PID 5032 wrote to memory of 3968	5032	msedge.exe	88
PID 5032 wrote to memory of 3968	5032	msedge.exe	88
PID 5032 wrote to memory of 3968	5032	msedge.exe	88
PID 5032 wrote to memory of 4360	5032	msedge.exe	89
PID 5032 wrote to memory of 4360	5032	msedge.exe	89
PID 5032 wrote to memory of 4520	5032	msedge.exe	91
PID 5032 wrote to memory of 4520	5032	msedge.exe	91
PID 5032 wrote to memory of 4520	5032	msedge.exe	91
PID 5032 wrote to memory of 3300	5032	msedge.exe	90
PID 5032 wrote to memory of 3300	5032	msedge.exe	90
PID 5032 wrote to memory of 3300	5032	msedge.exe	90
PID 5032 wrote to memory of 4680	5032	msedge.exe	92
PID 5032 wrote to memory of 4680	5032	msedge.exe	92
PID 5032 wrote to memory of 4680	5032	msedge.exe	92
PID 5032 wrote to memory of 1572	5032	msedge.exe	93
PID 5032 wrote to memory of 1572	5032	msedge.exe	93
PID 5032 wrote to memory of 1572	5032	msedge.exe	93
PID 5032 wrote to memory of 2300	5032	msedge.exe	97
PID 5032 wrote to memory of 2300	5032	msedge.exe	97
PID 5032 wrote to memory of 2300	5032	msedge.exe	97
PID 5032 wrote to memory of 4368	5032	msedge.exe	105
PID 5032 wrote to memory of 4368	5032	msedge.exe	105
PID 5032 wrote to memory of 4528	5032	msedge.exe	106
PID 5032 wrote to memory of 4528	5032	msedge.exe	106
PID 5032 wrote to memory of 2192	5032	msedge.exe	108
PID 5032 wrote to memory of 3236	5032	msedge.exe	122
PID 5032 wrote to memory of 3616	5032	msedge.exe	123
PID 5032 wrote to memory of 4988	5032	msedge.exe	124
PID 5032 wrote to memory of 4992	5032	msedge.exe	126
PID 5032 wrote to memory of 4992	5032	msedge.exe	126
PID 5032 wrote to memory of 4992	5032	msedge.exe	126
PID 5032 wrote to memory of 4268	5032	msedge.exe	127
PID 5032 wrote to memory of 4268	5032	msedge.exe	127
PID 5032 wrote to memory of 4268	5032	msedge.exe	127
PID 5032 wrote to memory of 4200	5032	msedge.exe	128
PID 5032 wrote to memory of 4200	5032	msedge.exe	128
PID 5032 wrote to memory of 4200	5032	msedge.exe	128
PID 5032 wrote to memory of 5072	5032	msedge.exe	129
PID 5032 wrote to memory of 5072	5032	msedge.exe	129
PID 5032 wrote to memory of 5072	5032	msedge.exe	129
PID 5032 wrote to memory of 1572	5032	msedge.exe	130
PID 5032 wrote to memory of 1572	5032	msedge.exe	130
PID 5032 wrote to memory of 1572	5032	msedge.exe	130
PID 5032 wrote to memory of 5388	5032	msedge.exe	132
PID 5032 wrote to memory of 5388	5032	msedge.exe	132
PID 5032 wrote to memory of 5504	5032	msedge.exe	133
PID 5032 wrote to memory of 5504	5032	msedge.exe	133
PID 5032 wrote to memory of 6068	5032	msedge.exe	136
PID 5032 wrote to memory of 6068	5032	msedge.exe	136
PID 5032 wrote to memory of 2708	5032	msedge.exe	137
PID 5032 wrote to memory of 2708	5032	msedge.exe	137
PID 5032 wrote to memory of 2708	5032	msedge.exe	137
PID 5032 wrote to memory of 5084	5032	msedge.exe	138
PID 5032 wrote to memory of 5084	5032	msedge.exe	138
PID 5032 wrote to memory of 4256	5032	msedge.exe	139
PID 5032 wrote to memory of 4080	5032	msedge.exe	141
PID 5032 wrote to memory of 4080	5032	msedge.exe	141
PID 5032 wrote to memory of 4080	5032	msedge.exe	141
PID 5032 wrote to memory of 5264	5032	msedge.exe	143
PID 5032 wrote to memory of 5256	5032	msedge.exe	142
PID 5032 wrote to memory of 5264	5032	msedge.exe	143
PID 5032 wrote to memory of 5256	5032	msedge.exe	142

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://barn.blinqueofficial.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff84a39c188,0x7ff84a39c194,0x7ff84a39c1a0
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1716,i,7612942757796912513,12370371230027280893,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,14523880667974969099,14065727543829641027,262144 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:2
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,9556245039674467349,4796733732379072153,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,11978422619056494009,1780570045113223192,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,16052991084207482176,11927305108721374153,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,15623148729803318219,10592794960796228809,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,6655788622394780923,8832954914634006425,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5076,i,17671950343044186223,10270594895790572677,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,1209766496704628833,10995734001659244933,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,379320575351121488,15096595691203774493,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,17295090926332546772,2191432751481307068,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,17295090926332546772,2191432751481307068,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,2156506399635775561,18123561198620871306,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,15196639750201303856,4618995813352963490,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,16829652453509466632,688698721551310327,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5376,i,15353672253822217659,14875549496510034305,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4484,i,4971802622923579471,12945860414012727406,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5428,i,8657815237856796325,5656891170463246943,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6476,i,11504845675804685481,4084857101148416507,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6528,i,8837354281195925407,16637293447927541744,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,7331052554527839612,7290235281109549915,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:8
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,12381368097275051501,16392273051859837422,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,1525134509204652350,17028617828257992859,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:8
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7100,i,1780258765717951468,7804015604367261533,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6916,i,1054348964634779781,13900636133614362812,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7492,i,12326233449652703854,3365674969596017450,262144 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6372,i,2136614547031143935,18222255684139496294,2097152 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6856,i,14175225548381351335,18043907907436510056,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:8
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,7261430801282979694,13007460843242595142,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:8
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7444,i,44308490253505291,14284768010500256465,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,5089902909111219045,13621118320059437993,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,17337378839764455755,7330862990788013999,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,7287316616683198933,8811208033792179506,524288 --field-trial-handle=2904,i,5580729874967795055,5879977463794799397,262144 --variations-seed-version --mojo-platform-channel-handle=7352 /prefetch:8
  2⤵
  PID:1548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4240

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 02a70ddeeeaaf1d52934c278198e1836255a06064a42c4dacd351c3acd32726c
MD5 20d674f73ef71d7e0fd912279f8c9f5f
SHA1 3baf36b957df98f4e8aab5ff4f433666ea4fe790
SHA512 ac8add4e33155c90d35703a6162b4eb7571f09bf382c440337b15de6022516dab60c5cc0764468963855b6f3dbec46b0b193def6d1835f639ca03c929f74a07d
TLSH
T1B7E026E845CAC26EA3107447457C9B0D82D1378F93CC6E1A6B00A88C7002840A382AD2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d5b02e04e2d6ef5b822d15fad5fb60c0f01f5b2bd804181a3fb02cdf4b9fe31f
MD5 a847e2717847422b4a187c08d3d20878
SHA1 7575cecadaf6e2bb078667728e7615a7704ed372
SHA512 1f9cbb7a0ca04bbd01fc39f9af4b6f962ec3ca8d38b603a51b78ecd9f74e6da8fca8a120a80a13aebc4a48f50ef4b5e0d52432471ddb9ab4ffb5f131b2a3c751
TLSH
T1CBE026B814CCC22EB310648B41B89B0DC380378F92CC6E8E5B0488CD7209448A7C2A92
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 798c4920276092a5e660f49290bca53da740da182e0fafdc702b2659526c43b5
MD5 06eb5a6ac65c9aa0de526428a7d3d186
SHA1 ec52a3aa74c6b05e24090c3665857a8d5156d64a
SHA512 678edd572c726f310c82e77ffce2249e2235c5154797a7cfbbf6d69296e2e407a8ec754a01a6cd136be2d4b4fcfd123f07c5967f2e284232bb253d6dd4e3b35c
TLSH
T14BE026A804CAE26EA712644B41BC8F4D8280374BD2CCBB4F6B0088CC72060C0A3C3A91
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 05aeb704c8c8cf58248b4e22b22450354f3dccddb0307b7dc5c5b7bc4a795fa2
MD5 d4353c8d9a867dd69f5ee00d5ae4d723
SHA1 76c953586dc6e872bc032fb35f6e84396208048a
SHA512 dfecdd7d1a67b21999eda8a06ddbed0da06bafa54215c62d73ad893998e4a4c7ed613b12aca1f0aee3b52f2739d60ba96555b2b9b954598b39a391518cb9062f
TLSH
T167E026EC04EAC3AEFB1064D7817C8B0E8280370B92CCAE1A17008CCCB007440A7AABD1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a6add24262c82baaac8accc292086ca51af8fc10623b6ea6097f8526f7671c6f
MD5 a22b1d74b238bb7eba06d69254c5987e
SHA1 8647c47c19a94fb47d7267416be3d87f5ddae817
SHA512 d69a0c59ffb78611d239e53debd952294439b4a236b60759d57fabf991dad0e08e94841300b1d776106578fb0bf39a837260e141edb5c7bae7f3f33ee6a03940
TLSH
T1FDE026A806C8C22FA300654B45B8AF0D92A03B9B92CC6B0A274484CCB081084F7A6A96
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 59KB
SHA256 ef1113039392e7098919b6da68d1bcaf69106b6035defee747563f221d652985
MD5 fbfc50c1cb187d6c7c98a4646ccf61c6
SHA1 49208d24b5c9797d1ea14ebfb13421497614f557
SHA512 c7c4c3227cd338f6710471956aa82fa3b5bc8497eb06f991302e662442ad780af2a548e7c36e3fa2e6a6ea530e8864b020c68aa9b92a20c6e41f9e8175a4f4d6
SSDEEP 1536:g+DkEn0DA7Qlp+JB3RwcjyeMAt/mQ6yTIh+D6o2q9t:gAn0DFQDK0oZy0h26op3
TLSH
T1C953021818D024895F233655F63A053F92683D4EB5D785C9C1BB4ACCABDB0DCF2B62E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 72KB
SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
MD5 ad73f65eda8a34d2f8f21c33f560ccd2
SHA1 d54283f91a8b77db68924690e3b3b4a671b9be54
SHA512 6b692c70740a2c7f6af891db9a5f67cc8fbfac964695eb8aee5d924c6842746804f4f336c1c64be1a45e4be9872d08354b7ada9c1f4da3d1e80383bba4446f3b
SSDEEP 1536:iQvpNhY10/XXNi+6RlpG7BYJcu/Ijw6Q3vOZ4iN4Vlyb7IVr:iANhlvNP6RzKuhFOZR4VlyPWr
TLSH
T10B73029194F85BA3D3AD3B7CE1AACF1107D88E877EA346E6B2CEC81141B140586E391D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 909b1c1fe943bb261163b6bf2a193373dacdec447e838ae4dc0fbf4c412e9db1
MD5 1177a0e284c10fc06b8583e3a2013c40
SHA1 4baebbd558aebf40bc15a738587e6c12a74b776a
SHA512 2f27bf183e6156e9fc7c1831aa5d7cf62045926e53c13785e4b3918bae92fcebaba185b36c6460aff6eebbf77290cfbd22605ca0455a3c6677a3a1bce983b318
SSDEEP 96:WpbRoIGSL8xun8Bq37vzsm2vjOFsGdJBzzDuPjVUPuUvxccPCR+M7thX+6pHZNb0:Qb9rRFPxayckCFhRnzte
TLSH
T138A15288A2716A30CB9D38F362D01582B53A657D1E531F5371F3E9B99B463BBA01843F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b7f0d794f5c46155f2f9529930bf09fce695ba537ef9d22427aab60768aac741
MD5 39143510ae2826c225d1af69d8aa78e3
SHA1 fe6ef631538dfc84f3dfc0fb406bd5a2a23dcf0b
SHA512 7f1e13084601337eabb271982509358a621958e5ab5449576ec7a79b470d2b5d5d8cb209c5a39888e8eed2fe4a8d4a67010557319628c4d06aa98f3d0a747cc5
TLSH
T16E51E78D92702360D7AD7033B6E11183FA7AA9B167935F523095C9B88B4A374B10803F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 9d2c9ea19c33ae1954f5532303f0c1a716cddc8428ea73cdaa1e0f2e978132ce
MD5 a09efb58c247d008dfabc6cf87b60b2e
SHA1 8fa259115249756d405255274db48cbb1fdf67d2
SHA512 772be312ad9c360a8f28c71710c155c4d6283c4ef1f6429b2291ca660330336fd89655cfd600dec64da860807a800e561bf6b9e5b2c13769e0c5b42b8bbb371d
SSDEEP 96:sbREG7edWF8Bq3arPs62YNu7GL2jVvuUAPCRCM7eD9wMHQS5S6vfN0xuzjNF52gn:sblZqrNuaHDCof5bJCSSu2CB
TLSH
T1B0D1B78891A56E20EFCC38F320D18B82B57E247D1D470F13F1B6EA35976B3AB601447A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58fdd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fdd3.TMP
Size 2KB
SHA256 9c328ff2afe979e784feda2dfa3cbfafd139e73c4f2a692d712421d2760eaf61
MD5 abdc914bf542d06bc4a73fb71f1b86a7
SHA1 c26b0909819293830e92c2eae65b1ce6c0dc47b9
SHA512 35e9b1efed2952c2da85140f4c3711a0567d6d3500fac886eeffd9c34804fb606576ad202030e7bce47b7c433937f082cb1412ff9dee8376cac169655e07bfe3
TLSH
T11F51E78D92702350D7AD7033B6E11283FA7BB9B167935F523095C9B88B4A374B10803F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 4613c80f57c549f40e906b871eda11ed3daded678bc8fe6b3eb1aacd6b0cec5b
MD5 4c11ba0fb097269765cf38b8af212153
SHA1 96da82d2315afbe708bbe7dfd02ae60ffd2f6d9e
SHA512 92a94e344f305d60cd318684968454742f59411ce0efa2edde5031619f4665cc47e65a449b547c5f571efb1e119164702fa26638e3a982c060f6faefccbb374b
SSDEEP 192:DSrCwMOE7Apr5AgB5yliB3kZFE2FrQfQEL7:DSrCwMOE7Apr5AgB5yliB3kZFE2FrQfJ
TLSH
T1A4E1ACB7C3E9865DD81116F1A628BE2BCE2D0D14532C3D4ED4D8AF8B93E1470C619E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 d23ebbc5e6d67917c35fae7faa6e53d61f9b29288b65926fabda18a14fc21968
MD5 ceb093cfa61706381f6e8affd4698219
SHA1 bde1fe2e7d9ecab1d8f503037e98231b5588b110
SHA512 7d065cd1e447319b09ed07e8eae4705f761e8056e9f72d65e675d391673fd2d8be41c3b2b999955a4c4a8d2299950595531a8d10f0cfba4f483d5814ea0457b6
SSDEEP 192:DSrCwMOE7Apr5AIRXRkBDliB3kZFE2FrQfQv8k57ZG4Gc1E/83:DSrCwMOE7Apr5AIRXRkBDliB3kZFE2Ft
TLSH
T1E612B9B7C3E9865DD81156F1AA28BE2BCE2D0815432C3D4EC4D8AF8B93F1470D255E4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 1575195c8bb743f6aac556ca75cd7b5a6ae2a19d52fac07f2345c57cc14a2f7d
MD5 eb9d601627c1ab717c2637a8a4aedf34
SHA1 c19e4706f6567f7b1355ba93837c3388d9e1ea0c
SHA512 69afc528c52515e4b7d574db386314592acf8cb1c3f615824e5cbd5aae1deedcc22ea98c0f6d739da146bd0e4fecb66e88186ed9972da1f663ab45572f3d4513
SSDEEP 192:DWjvelzuByJMFQfRXRst1DliBXvWaEslbixa8k57c4Gc1E/8lkGj4v:DWjvelzuByJMFQfRXRst1DliBXvWaEs+
TLSH
T14302CAF783A5865CDD2196F0EA18BE2BCE2C0815436C3D99C4D4AE8B93F1071D215F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 99fc83e52cbe3a7f2e2b6626d911e2592504d589616604ee5b28b1459d1316f0
MD5 0a5f677ff21f7788c746a39d3e0eaa4c
SHA1 482157b8db30d23f45b64ce46e85113f328e1057
SHA512 000180eaa25308c70a7c5e6b4405322d5c85173f4049cb65a27829f854ba2677aec645c0a8940b3fd6ce43b473550eeea99985ce782dcfb0d2d2d6e752180120
SSDEEP 192:DSrCwMOE7Apr5AIRXRslBDliB3kZFE2FrQfQv8k57c4Gc1E/8lBx:DSrCwMOE7Apr5AIRXRslBDliB3kZFE2F
TLSH
T12E22A9B7C3E9865DD81156F1AA28BE2BCE2D0915432C3D4EC4D8AF8B93F1470D255E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 ba4705ca47e80d6c1a53ff443437702554e77167133444a98e222e63036b7ca5
MD5 349b9ecabb5f7607d39f4c6733658d62
SHA1 e93cb441cc435acb92d5eaa7ad22f5fefaa9394b
SHA512 58450bd9a926b1f0ad4338f034734388565d1b881d9884b23a86f291b54bc7c5b8b9fa2116f2a336ed32870df9c52a0dfbed847341e5d8da10454ef46d672ca5
TLSH
T147D02223534930B6EAEC6E93516AEC8FC3E700A00882D9EE20D2A8AC093986C4757189
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe597788.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe597788.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9d909a709cc6a441b060691da4ed7372079febd279711bf95011b17a5146363f
MD5 8d85e21ee5567bc784d77f813c2be5d8
SHA1 70468b8875566e1f07c338230e29f32388b950f5
SHA512 4cc09bb8ce45427803bc64fa40bd5a9658324ac41e1961496a5ee4a43c265b7e97c57fd00412539efb8a0a0826953d3debc0c0a0f898f27bacc0252e6e84aff3
SSDEEP 192:sxZcRIWp/fusMoFIdpTFHW6+WNjK5/YrDxTIgrJ:sxZc1p/fusMo25HbM/I9
TLSH
T18022BA566E28A57B4CCBE20DBA15BF53D6F9203295D51E48EAFC861C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 96ad71711f2914b0bae04bb6b61f8eb2ac961b64abbef0f24d54181d61d3ad2b
MD5 d4d5436c3a5cfe4100746210ceb67228
SHA1 4525286af05a0f9e1b57854fee09ed83a93d4016
SHA512 8d31928269b4e5173e4836ab04c4987730a3b19247729a1e46f473a8b6d3b98156811e190daa93584692da022c1370e1bc9349d3ca8fd6aba665fea5a2174c61
SSDEEP 192:sxZdRIM2cBzp/fusDG+Iahb8vadp4YNwjHW6+WNFEfK5q/9H2Y/YrHxTIg5tRlds:sxZdX2mzp/fusDGIGvqmHbSwUP/6zds
TLSH
T19462F8576924997B8CC7D149FE35BF12E6F92022CC951E4CAAFCC61C04EB6ED2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 60b2c64a3a07ab562581c011400bb74eaff08e22211fb12a1072e7d9e1ebf5cd
MD5 8c38fa6a6eb39386e39b399ad0af56ae
SHA1 8697277b079cbaade6ee61894f38cbcdcba769ab
SHA512 a299142acfed469a0f432c125971740aa666c80af7d37018e927225b0bac91e297640a4426a030588ae3202bea7503f6d6f0f23a78fe0d6c2a3f4d5a03ff5ab6
SSDEEP 192:sxZdRIucBzp/fusDG+Iahb8vGddp4YnXwjHW6+WNFELUK5q/9xi3H2Y/YraxTIgu:sxZdpmzp/fusDGIGv48HbSPUKP/dzds
TLSH
T11772D7576924997B8CC7D509FE35BF16E6F92022CD951E4CAAFCCA1C04DB6ED2207807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 29KB
SHA256 d3bf5f26879afa2510711e1c0799e74935e310e866fbe35aad02de42be6882c0
MD5 270e383ca92b6a4853f59f905dc9cbdb
SHA1 5b87e80562ff2fbef99b6f6cbf86fde321c8674e
SHA512 26342010588fce44f4671602a26253d402ff1380b746056db0347a829bc903bbd919b4f2b7c21c93bd464973b2e4a6e3cf9446db5c4cfdefc978eb45a763b62d
SSDEEP 384:sxZdpmzp/fusDw66s8qMpRiYnazAW8pZS15posJWeT+EIGv48HbSPUKP/Gzds:sVpmzp/fJw4Mnc7WeT+EfFHbSx+s
TLSH
T1ACD209469910C87B9AC35D19A93D7E33EAEC205259C5CEDE5AECCA1C00DE1FDAB07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c7cd2476596735bb5435a468743842a828b0bd0d1ae1d72eb1ce55699ddbe546
MD5 f8b315033ec3212be972093682bc0929
SHA1 6562f61e27ecb461c56f97cce8d3675cb249dfd0
SHA512 3edca8e20d642aa9d9943efd9289a217d72386da7a60532273d199e67f19fb4b3f4019b42029e819389ed24abbd918b04a855738402f9e4e024028668a58fdbc
SSDEEP 192:sxZcRIWp/fusDoFIdpTFHW6+WNjK5/YrDxTIg5PJ:sxZc1p/fusDo25HbM/IL
TLSH
T1AF22B9566E38A97B4CCBE209BB15BF53D6F9203295D51E44EAFC861C04E7ACD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b4baff8a6a7ab4c7043ef3fa601008cb4e38fe55968093107a1e82416bd6b266
MD5 464df5567b359d1aa89c1b633c82b9cf
SHA1 e1ffdd882b357130addc185e88fa015db3ed045e
SHA512 ded0408c411af05e922584347c7079a8f7330c4b2a4d46f7e9231e2e44d640ddc3979f248caa9f6cf75cc8ddd636508e22beb6aa10a5012f34bc149247d369a1
SSDEEP 192:sxZcRIucBzp/fusDG+I9dpTNwjHW6+WNFEfK5H2Y/YrXxTIg5tRldgAG:sxZcpmzp/fusDGrIHbSwP/Szds
TLSH
T17252C7576924D97B8CCAE60DBE35BF13D6F524229D911E4CAAFCC61C04DB6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4efbf0696e7643edb2bce4075a1f5cb759f1fc40d9306f0b9584d6cc343fca7e
MD5 f08217e41bfc22b602bf962577adfad1
SHA1 3952d3679ef2ff5cb431aa0e7014fc9379c96418
SHA512 f3a16423603adc38b42000a0142276a88713ebd24f00768b18124f125acd691b080ecb2cd4a5ed44ccf7582ebcb0b828e400cbf84eb3969c6a97be5f745d4747
SSDEEP 192:sxZcRIucBzp/fusDGv9dpTPiFHW6+WNFEfK5H2Y/YrXxTIg5tRldgAG:sxZcpmzp/fusDGpeHbSwP/Szds
TLSH
T11652C7576924D97B8CCAE60DBE35BF13D6F5242299911E4CAAFCC61C04DB6ED220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 dd3fa259b9cb94edeea328e17863305efe023fc07c720a58cc71a71d86b16adc
MD5 e57cf88198e9458a27ee23ff994bf34f
SHA1 153ddfd883e42ed9a8df96796f53318a8e6ad8f5
SHA512 f852ba8d1cacc9f17ccf8ec2df85c7ff48248370660f60b637eaff79ef14af1a5c0da1760581e0a1d61d6c6aee6f5cadb24749094aca094db9f254b2aad0072d
SSDEEP 768:zMy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb0roRts:zMy4J/DWvbtBhu1jajiLm0bf7s
TLSH
T11CC20B3B684CCA7E4FC00A9DED5E6F973E9802C796948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6c35db92-eefc-4671-9b7f-85d3aa932a14\index-dir\the-real-index
Size 864B
SHA256 677e30fff976fe14c096e5748d2f348807f152a4e129181ece032aabda8f1836
MD5 01cf8882539136a42ca32a6ebc02d3eb
SHA1 56bb429abe70d3543f3221dfaef02c74d173feee
SHA512 edf4152415fc4d2ac6e4eff6452821647499d4109172d452f7876cb1c4ce74ff8b8f1c9e43a6bcea84fe995db3f5a2f1f684409a4be0291a60f2c6bbf1ee62ce
TLSH
T10811629A2C03AF9BEC5802B4203CA885B0B402CC03A06A1FA1FEC12A8CC2B407D40AA4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6c35db92-eefc-4671-9b7f-85d3aa932a14\index-dir\the-real-index
Size 3KB
SHA256 03b5c098a7fee77f7e97dd29d65d7bbee722d539f62af499bef1676a69b34935
MD5 0c338b9d5bd146d33adc3816fa9a35a3
SHA1 b566426ca199ede0f02a3e8cf68f069ac2d3eaa2
SHA512 9d8538500d1a7757d92d2e5f7e463b65e3aa3a2cd98e9798d03bf296670ff4b083add15ebdc81fc5a16b2164516c503cef1c25027004d11e5e149d356b554c54
TLSH
T1DE51E94D5D072F1AEC9C92B114B50445377415DC13681E1BA4FE4178F8C3A2919D9768
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a5759.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6c35db92-eefc-4671-9b7f-85d3aa932a14\index-dir\the-real-index~RFe5a5759.TMP
Size 864B
SHA256 929143dbe8bb66455ae05cd016c527c19107cb7a758bb85c444637641f556acc
MD5 f1ce810f9bc42b5bc5900d195c273c07
SHA1 ad6ac32984afa4fec087b9438254162c9c5b4df3
SHA512 131c5b29d9ce10068575d3a8719bba815e15349451897d36fef0c4dcd0d02e67475326cc1312e098d2fe1fc35640e775f0f97a23e1b13afc179535d067e45155
TLSH
T10E1141E901538B1AEC4803709A3CA946717542845384774FA3EBE12ACC82B84AD83FF0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fe1cb7e3-ee10-499b-ba7f-32aedfb4372c\index-dir\the-real-index
Size 72B
SHA256 3d7229e47413296098e9726a0d62894c21522d7ffa0a2a1739cedb56f2893bfa
MD5 1776dc7d2f12fe28c676e2e26bc816cb
SHA1 2ce6f1e89fe4a84a811aaabd843e1796b4068903
SHA512 5e0c23519ce890c9ed787ce0db9618072c120351ce7be30349ca493195fa7b21a17f8b0ccb205be6e761d95cf28d02dd0f110d1e9a2d464bd4f2d98de9e8b4d2
TLSH
T18CA002151A821406C0561BB829EA32712720C9142A42776785D24098CC7258A8D9120C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aab55.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fe1cb7e3-ee10-499b-ba7f-32aedfb4372c\index-dir\the-real-index~RFe5aab55.TMP
Size 72B
SHA256 31194500a33b66e38fa7fbdc76bc680ce5daca18c9305ecd10f798e1a32c8468
MD5 c64382c3ac5fcd20f284f52bae9197ff
SHA1 dcecc3bf0f82b9bbf6c8fa5340c1199d98e2ea37
SHA512 f8b6e0fa2faa9396700f75def1c5a285340e20393aa0bf7f6091e787018bb6a3c7241e625350ca7dc5ff473694651b064e716211f9bb057e56b36ff810a30b94
TLSH
T1EEA002380F82110DD49661B1666222A11310C8215110130750D380D8CD724405D9750C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 87c84009be6ac2e6b932fae6ecbecd06377e9af133f24093237a3450a93a8674
MD5 707e811bb098ca5ea7165438615fe09b
SHA1 78c59a8cd917c12f8482da9916ee1ba8ba3d2736
SHA512 c38ff3ec1b20ced41e6ebb3d75511f6b257ce02faf254976e9c6ce6abcb361dff95beee80ecd192632a4877bffdeed79d84b39a4d2230d01a60160140e7e6d98
TLSH
T1FDE020FF2DFB1820ACBB43D520704CA10106796DC9256D5FE02A528320B6707745BC65
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 9e8067d8cfe68f8bfcdcae618e771f54ae50ca6fc2787146e8e1221f2ec79ff1
MD5 994721a14e03acb73b959328b1547228
SHA1 e6c59df595a57be0a99a630bd5d9af33391d46fe
SHA512 90653ffb1a3aa423d3adcad2c8552f443f80763a61e0725127bb1c047aeda5c5cabaa38981948f0f57c523db638f121973e13caa1fe8a36a89324488ad8af957
TLSH
T12AA00294EA629842D14002B8217913DA2318DE9D99066716C0F9D04AEC7026FA1C1404
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aaa89.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5aaa89.TMP
Size 48B
SHA256 ff32529dcdb070f2f172f458ec2ec63b9333d629b5049cb901ca5f217d02e29a
MD5 c6ad2ca6097bf506f0a9d133f6b5de19
SHA1 a9a73d02c0d67de533ecaccab6c7a1e562f920f2
SHA512 ea24f6078995de471911e2dba7c3d180e76ed90ceb3dc18bb085ee66b4d6f511a15991658c895fea7ce77a3461cb1c1c9c855d4ecdc2fe59d581d2945f12782d
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 59188299dfc0d8aa97c1df9cfdc1bc3b0b79c746b386734bcff8769180be896a
MD5 28ff212bcc5e2b108fd13566af4a86d3
SHA1 b9a1d647421931451dc1042086cf38b6810f8346
SHA512 0fd80d396a87e32736f3d3e45e18c87667ebb7aba9364773e2ff1e0ad1d2413331cde800b4dc30df7b5d53cf1864b8092b12dfe4f52965211a14c891aec3abb6
SSDEEP 96:KIDCKs0+u/+KEUqed2Ku8BycK7yCe7aHbJhh+bxwl57+KBL5F+NT7Y1y:E5xdhxfjq
TLSH
T109E1F55631B7060038BD258C8175976E524132733019FA6FBFBD44A59E2BE4C9EFE8CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599939.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599939.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 29260687446380cad235ff2489353146eb57db374601ab69c85695caf10c5649
MD5 bef8e7b4eb269e4466719c17be0292e2
SHA1 13ad7b989917484839f61ed0920747128b8c420e
SHA512 407ea3e834ff9857115659edd5ddb41efda5288540c69a4811f35844d4edf763172da679647e27b1df20dd289767f77aa4485db4a2ec2df1397aeb89fcacc868
SSDEEP 384:fiFiZcIKzsNM8TUNTUlIl5StXZvQ42HX58EAOrKyatgOIwZOyO+ow:qFQChwgC9q4QaDOrKbXsA7
TLSH
T185C208F258D7993AE9EE5743B77E2D024EBCD027F585A650B3985A0DCC961BFC306802
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bb62b694ede5622936ae97bb97920d81009f3b1ffd0214500657cbe986258bbd
MD5 0d9f7c3fb4c4a9e632bd401c4ad7448a
SHA1 2c9a20d8d007187d7a66374a4b34d62547bbf7cb
SHA512 cc94c6d38e8c55a4ef0d1bef2a01ddc512917e4555ec26bd3db2a1100ab784ff6c5183fc6bd3e9baf86210e6696a568bd33b61dbdb998e4e8e4a9ef1837dc2ae
SSDEEP 192:1ONw6wlDgQmiUyDVW4X58gZAOKmyDlyZUU6:1ONw6kgmW4X58EAOtyhU6
TLSH
T14D02EA39B9B87C6B9EF26D05F58727139FA4203BEA516F44CAE85A1D00D739C2307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b5840f86efd449448f7d6d0a99936fcd1162a7a14f79d2d8bcc9ea25d81af0cf
MD5 c1755baea102f44cf45da6b60d1ae9ed
SHA1 d36e075d82d1e76d9857db1ed73cd2dc6c7d7ea6
SHA512 dea63ef3b9cfa0cc49a7a87c8c52f1f544243257a6a99d7a6a7a10b053e8304d6644e3de65c270795a92cd51124186a7ec532ded6b2ebf057ee05075b0ed2eee
SSDEEP 384:fZcIhsNE5StXZvM3HX58EAOrpyatgOIwZOyO+ow:3h89OHaDOrpbXsA7
TLSH
T123828E366978AD372DFAA144F58736034FB85427D685AF50C5EDAB1D00DA2EC131BD07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a5c56b80ef32c55d03435c6d3f4ed0a2a6d657d9a5c5d1016a3d11a0b54ac351
MD5 c471ba027f4761682b4a8692609e8de3
SHA1 51b1c82e76e2a262a57f70efe645ca3523f0ea30
SHA512 8bf5e22cd39fe6516551637aff62e21f3157cc3ff28b637701c23a43a0f11d0332b7ead656d0d2b0a69e10a8d31d4fa1e47fe1f0d1a238a543f919c884cb6b30
SSDEEP 192:1ONN6wlDuQmiUy0VF4X58gZAOK62vek/PaU6:1ONN6kqrF4X58EAOr5yaU6
TLSH
T132121A36B9A8BC2B5EE26454F48735039FB85127EB49BF90C6DC6A1D01DF2AC530B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5d66e63336bb4064c038486edd6859ab8a2f7e15bf71bd5e8104e07bb01a5130
MD5 44cd7854b7ad237b9d7e521660518acf
SHA1 06b98d06a33ffd8c2da30c3e9681dbe461f0034c
SHA512 67c7355610cba01e9f8430d0072bf584cffbbd2054dca664339f11c14a22303ae385fe27646c303cb6f35d61996f601242b0795c863698376e248aad81492625
SSDEEP 384:cZcIhsNEkStXZGi3HX58EAOrpyatgOIwZOyO+ow:KhB9LHaDOrpbXsA7
TLSH
T12C828D36A978AD772DFAA144F58736034FB85427D685AB80C5EDAB1D00DE2EC131BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a475d0c054fd8e67bd91edcc92d54b28f271e34e0e2fdd8d66c4661a3ad0d8ed
MD5 b1c47886e68aaca2dad32664f16b0a19
SHA1 f5d619c48d8375f8cc79797911c77b493ff64e0d
SHA512 dfd761adb2456698ee3f42fe64620d7dcbfb16d3643108be1c8cd11eebad3de67deecdde48a62d2e55ac492c9fed82dd97e98ebafbb16bc1d4ed83c589393b0d
TLSH
T153E00252A70015AFC279633101C31F323FF2413013A312455FB0117C6C337403A35AD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 30960167f8f58cecd2dfbd622ed1f80d11c00ed86e7b6dd34fbb4d84bec74104
MD5 c38c12ac8ba42759b2ec5cfbc705e0f4
SHA1 8488a384899b8279cac5ed57d2f520b056b3d5ee
SHA512 0861eb4ff59e366baf11f051b4c5f86e9e95f3153c4bd1de6221aeedaa9681afd8fc1a50b738e81c9a87fb897312d47bfcbe9733cd9763b1f96b48a6d35bcb7c
TLSH
T1CFE00152A70025AFC269633201831B322EF2413412B212455FB0116C6C337403A35F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a6478.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a6478.TMP
Size 392B
SHA256 7ed33e16f0cb0a7ef7c14f8103570b10ad87ed995ce31698ab4ada955aaff8ff
MD5 90a6c8abf3c1f9a2ab77506a3412d83d
SHA1 1e308ec4a5cbddc5f1ef99851d9044c0968a8c50
SHA512 f6a998a2040883d520198de4948fd71b5a2ca202cc8e962cdd4d954edca4cb0b7f1d4a0b86c631f111a825a46da6bef578108b4d52e743e67dd0e6f072ae33b1
TLSH
T158E00251660015ABC268533000831B212EF2412012A212445BA011685C337403525A90
MD5 SHA1 SHA512 TLSH

Submit Download

be50d1a3-b5b0-491d-9777-f11772ad9e11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\be50d1a3-b5b0-491d-9777-f11772ad9e11.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4b3259e621f105536bdb47df5537f57fe5f295e9437e9f0525c751231c52166b
MD5 b58447dff10c609af4a504bf52aa263c
SHA1 008af48526c73f180bba7d82c91576d94ebc9850
SHA512 657f890df80faa27ef5ab89c063ebc41df2d2cefd172e3546c58b5c8ae8d8b3f4221363495fc5d9be43dc501fd56e062608c4f5d1e9da85d7f281e6ff3e2d8ee
TLSH
T180412B58B6F91108B3B76F5A9BF7A96E487BBD772F06C45D00110E8F4626B00C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download