hxxp://beeg[.]com | Triage™

Analysis

user interaction
yes
max time kernel
898s
max time network
899s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 11:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://beeg.com
Sample260925-nslb6avdpg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4672	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348100253277426"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{A7D92DB5-51B9-4C21-A847-8CB57B279A09}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
748	msedge.exe
748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 2016 wrote to memory of 884	2016	msedge.exe	87
PID 2016 wrote to memory of 4672	2016	msedge.exe	88
PID 2016 wrote to memory of 3776	2016	msedge.exe	89
PID 2016 wrote to memory of 3776	2016	msedge.exe	89
PID 2016 wrote to memory of 3776	2016	msedge.exe	89
PID 2016 wrote to memory of 3160	2016	msedge.exe	90
PID 2016 wrote to memory of 3160	2016	msedge.exe	90
PID 2016 wrote to memory of 4884	2016	msedge.exe	92
PID 2016 wrote to memory of 4884	2016	msedge.exe	92
PID 2016 wrote to memory of 3028	2016	msedge.exe	93
PID 2016 wrote to memory of 4884	2016	msedge.exe	92
PID 2016 wrote to memory of 3028	2016	msedge.exe	93
PID 2016 wrote to memory of 3028	2016	msedge.exe	93
PID 2016 wrote to memory of 2228	2016	msedge.exe	94
PID 2016 wrote to memory of 2228	2016	msedge.exe	94
PID 2016 wrote to memory of 2228	2016	msedge.exe	94
PID 2016 wrote to memory of 1888	2016	msedge.exe	95
PID 2016 wrote to memory of 1888	2016	msedge.exe	95
PID 2016 wrote to memory of 1888	2016	msedge.exe	95
PID 2016 wrote to memory of 4708	2016	msedge.exe	98
PID 2016 wrote to memory of 4708	2016	msedge.exe	98
PID 2016 wrote to memory of 4708	2016	msedge.exe	98
PID 2016 wrote to memory of 4716	2016	msedge.exe	100
PID 2016 wrote to memory of 548	2016	msedge.exe	101
PID 2016 wrote to memory of 4716	2016	msedge.exe	100
PID 2016 wrote to memory of 548	2016	msedge.exe	101
PID 2016 wrote to memory of 3052	2016	msedge.exe	104
PID 2016 wrote to memory of 5960	2016	msedge.exe	119
PID 2016 wrote to memory of 5968	2016	msedge.exe	120
PID 2016 wrote to memory of 5976	2016	msedge.exe	121
PID 2016 wrote to memory of 3744	2016	msedge.exe	124
PID 2016 wrote to memory of 3744	2016	msedge.exe	124
PID 2016 wrote to memory of 5784	2016	msedge.exe	127
PID 2016 wrote to memory of 5784	2016	msedge.exe	127
PID 2016 wrote to memory of 5852	2016	msedge.exe	128
PID 2016 wrote to memory of 5852	2016	msedge.exe	128
PID 2016 wrote to memory of 5852	2016	msedge.exe	128
PID 2016 wrote to memory of 2872	2016	msedge.exe	129
PID 2016 wrote to memory of 2872	2016	msedge.exe	129
PID 2016 wrote to memory of 2872	2016	msedge.exe	129
PID 2016 wrote to memory of 748	2016	msedge.exe	132
PID 2016 wrote to memory of 1788	2016	msedge.exe	133
PID 2016 wrote to memory of 1468	2016	msedge.exe	134
PID 2016 wrote to memory of 1788	2016	msedge.exe	133
PID 2016 wrote to memory of 1468	2016	msedge.exe	134
PID 2016 wrote to memory of 5572	2016	msedge.exe	135
PID 2016 wrote to memory of 5572	2016	msedge.exe	135
PID 2016 wrote to memory of 5304	2016	msedge.exe	136
PID 2016 wrote to memory of 5304	2016	msedge.exe	136
PID 2016 wrote to memory of 4848	2016	msedge.exe	137
PID 2016 wrote to memory of 4848	2016	msedge.exe	137
PID 2016 wrote to memory of 3584	2016	msedge.exe	146
PID 2016 wrote to memory of 3584	2016	msedge.exe	146

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://beeg.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff91a6ac188,0x7ff91a6ac194,0x7ff91a6ac1a0
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,6594824238968537439,1659520881687930120,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,10439335195582118038,8578541976961680490,262144 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,17369634116604786372,16680242698465618232,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,6374496103053175511,8375651441001395501,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,8503591580641291917,9307990318788633724,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,16897051511827961809,7350941191558751048,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,2497555683202029257,18039188702587015198,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3420,i,16394096040211498000,7170801840133536634,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,9308069330154618575,16104509709445174627,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,14793522089414212951,16801675399241825393,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,10103140966550425104,4318422552057087468,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,10103140966550425104,4318422552057087468,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,7991273401444311870,8147069235465923856,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,10189631636238262409,11423926468676403076,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:8
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,17431334863141555583,3011239983412431735,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,10300702026526944985,14851223789528395885,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=752,i,12583520878063766138,15170787913474410563,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6452,i,6685598077464814003,13463022249748456427,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6448,i,6283562319810044597,5702989286011992825,2097152 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6796,i,1638704148562743343,7138458191273464885,262144 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,18069471126291927224,5651562920780957944,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,467751646184664133,13686537090456192704,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,17538258197051827106,2817459845725170444,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:8
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6600,i,5277971621777384068,9938848703348041158,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,1232159670111767489,315777693295947030,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,10488652168455328435,13677441841073068647,524288 --field-trial-handle=2336,i,8967108617306362387,7735904871694042572,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:8
  2⤵
  PID:3584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2243b944c3046aa3daba0f21f4f6bade9eb29d56ab4f57ded4d6cf2ae64d9183
MD5 da94de0da6f9510d3a18ddf758c696d0
SHA1 2db11060c87eb75f0623a6de9571ad53a64eecbf
SHA512 b2349d60a00cd9e6f040a79fef6f48eadfb6cb1c871878798da4107d1827e5577cfa07b88edb713233d8b6d1c9c3e429cb60dc6857516f3930e332dd9b48127d
TLSH
T12EE07DD884D8C72EA714E48B42ECF70CC3A0371BE6CCAF0A2B4084C97082048B7C2BA1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0498008c3874929ef667ab92900c92fc996cb894a0322588a56702cb1b74c3ba
MD5 eae2cd351a6f54d752851c839e81df09
SHA1 ccb75a171857107015a5f53376efcdac695613c3
SHA512 9c63dcd735430ead00fc5f1f120b1a875476d24c51b5b21198d79fe3e4ce7264c4497f757c0e4b513694622a32af5be111233d2c43c3629ab289ac4a7a0f5067
TLSH
T17AE07D8DCAEAC22EE70A645B537CDB0C8381370FD2CC6E1A57018484F081048F2E3BE1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000044

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000044
Size 47KB
SHA256 2fd6ded776185aca8a6a0a419181f03aefdb990b3f600afcb393dd14324aa9c5
MD5 8062488c76d028634bfcda1b1ceeb3e4
SHA1 7244f0940d42f12b368666c1c27249e915538466
SHA512 9e0d75c8287b47db620a265143b64c4c8be49139933d56611f1bbc7d61036a87d5e55a91474ac610b984e9794eac90bb7c3ced3472f6cb08d03d662f7ff6ba86
SSDEEP 768:zbtsd3uNilVdtohuA1q37oW5dReAaNhvZ3qgyT4CVMhGGcO5MqyObG9AHYSJRDtz:VsY2Vdt8uAwsWdQUCxhV9MQG9AFVtgqD
TLSH
T1962302846AE07471B13ADDC2D06DEB0601B9B3A5432399A289FFD17837613288354BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000045

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000045
Size 247KB
SHA256 eb9e39512da83681737ff8a993d930be686e76d2ce0736f8b026bb12fabacfec
MD5 15a29cdce03a4874c8b256d3c6038423
SHA1 4a089c75f3e65d2cb8f7f53cb82e7d3e82c0d622
SHA512 2dffec698c074a28b4ed3b5a9581b8632e09456a56c6e6d019f256c45120b74c94f2dcca59e074750cde808a0d9e90a4bbcc8e5eb41aee6ea0a5e8cb4d5b306d
SSDEEP 6144:Bb6Ws67YOp0dvOkxcGxNS1gJDLitYY1Jg:Bb6r6xp0VhSyRmYYfg
TLSH
T153442358860FC05E950EE46A560637C2A31DE01D8E768F836C6D42EFCCD226EE5C7C97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000046

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
Size 177KB
SHA256 b052a2477727c853940a099fdae793256124572971a85c479d92863b15162f16
MD5 d8f7ece820325dcc529d73bdf9992e8c
SHA1 aa798a6371f1104ac3326eb2db8596dedc09eda3
SHA512 4882268f535bcd22fbc6f349b7eb7f2cea36a2843c0f4e3e5eb443af0fafb03075a06fac77ccbafb2ef9dd2b522e77e962dae9572b8a1bee1667acf713d720c5
SSDEEP 3072:6tfZIwYBFXk6IF2T6C8ihoGJ3Np7OC5pBj4PGO1xC6d5shciyxR545F7dsL05SLW:6t2U32uC9L9NpyC5p+I6dWiTxRW5F7d9
TLSH
T1D9042344306BCE805E1EE35C856637848685255ABCE3A52CF36F0CEAEDC3AF58725E51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000047

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000047
Size 132KB
SHA256 78c208fd496f5b3942f0848c18f93e2aa3317d734decef67127c3261eb1a5cea
MD5 c319be24168b9c3f73dfbd5c7f37ecdd
SHA1 bf62ad70f6aae590d58f81ca6be6611d4225c80b
SHA512 26c1bd17d21ef84f7d1181cd6eeb24a908e97c35e33d3db03a6d4f53f8898745fdac0798938817b2e808dbba533ecc3d8e4acad0b2176e85bc21d7453b20f36c
SSDEEP 1536:OdqBUQafdgEIPvA14vL4ru+mrczbO0n7f+evCUk9+JcKV9int2HflUJyCIx21vkI:kaUNfWEIPT8GrSPGUgyhmu6Zyq
TLSH
T13BD312E2F42E529CF4BF3DADAAC77137299F58D662C302318015169EE0810C4E66CBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000048

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048
Size 20KB
SHA256 fdf429225df400795017c25c9e3d84bc98da2de56ddcc335f8dc85f3aef2086d
MD5 22260eda79adef71cb495650a7c5d64b
SHA1 22455daab480829c683039e69de19d6254052414
SHA512 c6d1cdc43e9d75e069f82cf0ef851a950ef19dd391610071daa50e9ab3cba5f6576670b6cd4ecad4e4ebae23615a45cd74b65c6a97bb03b76f47e2abc7fb02bf
SSDEEP 384:ho1Z9DzmBHfmcztCNvFm5l/L/WffcHE4ZGhRqW3UPbqd4cu5WK:GZ9/mB/mGgE/LefkH7I4EUPbqd4vb
TLSH
T1BC92E083E0BE4A3DE727A8DE04462F8D94D0C35B80C593334061BA9C90E3E9557E8B76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000049

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
Size 34KB
SHA256 0c38d615d78bc770fa4f062af98f72c3adb3109ff92dce1cf83af41ed9127f05
MD5 588c18f66fb09d7a4f09388a15741215
SHA1 47325c0f7152e609409d5780b9b5b906284a9dce
SHA512 26acaedeb8994f0eb0fa0b00a22132a588b8fd70fbe159269a0063774d500c0ceff2714b701256be0dcbe7eaa81c2e8382bc8057f96a963affa5f613258a5fd3
SSDEEP 768:CfhIcCPeb+0FuKgV8HE1QaHn1ils1xGA/UVI8rQ+uNe0gyc:aITGb+0BrYwK9/GILel
TLSH
T1AFF2E123CE16C547EA7A56BB760112E8CB4E3DE6D2DF603E88E82509A135CC1D75F12D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00004b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
Size 89KB
SHA256 7e85c1049c69d902fa6147a8a179eb9fd015b22238272784f0d39cc0ab03cad9
MD5 2215d25ecc35e2f6b89815dfddc3eeb8
SHA1 963b9748728a10869ff2a5e802171fc56b1cc3e6
SHA512 ef4368a2f4d1fa85a4f3ded46c8d10a459a864171d5f5b2e3c4a77971f4e3820bfab55a8247b14f973557c66651fba66ad9888bcad209c7a8779d17603860a99
SSDEEP 1536:6qy7Amyjw1jxRCoHp1b7OGZSwP67/vMGMA4svdr3Qbc9yA7KIE90C6G:Ly7AOh3CYDAwyMGMAb1rgbc9/KN95x
TLSH
T14293121C0BB273621DEBD6E998AF91F5E9420B3AA5756098CB65231FB03435B023274E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 26KB
SHA256 c861e7be961d538501350adb95b44a6e954d96173ce3639e4e6d81697db8329d
MD5 589f18fc4fb6d722f78416e3d0c9c0dd
SHA1 0e69a41744e5f954dc015683a38d32ef01d884c7
SHA512 28e8d4d383a89d38d3c1bec7c3e9e3400dfffd404e70901b12df2172dc7655cec642e5e017ab7fe63163c8dfb398b35d1a6b71b55c1ea806bc4adcd693e79254
SSDEEP 768:d8Td9BI/9FWVOh/+x52tj85ULuY+a3XRWUJcOOO:d8T/+/LK4c2tj9dxbJcOOO
TLSH
T1B5C2D1507BCF977C4AB2B4A69CCBEF2C54725806A4A8CAC41B5BBB16C54B550F3036C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 158KB
SHA256 f3c7dd8cbb0860ebb6fd8cfe6142fd1c4455ea9d2cae5ed6953214112efbf772
MD5 83cf715e1a10532622e0559cf247775b
SHA1 27e7887962243eb8f830c77d6e9275e34823c0f4
SHA512 bf331a219b2050a6354c6a55f9d70961233a84dc151a5df0e9697496605a76845893830fe528c37fe4e574daaa1bd22d1d8f1a8bd34471db130363aceb32079f
SSDEEP 3072:xjKu3mLSb8dTrtRfBUi+HTKsta1BxcnLywymJSOvK9nKNxX+Iybp5O983D7:cDLHJfBU/zGBxcn2fDn9olib7Z
TLSH
T1FEF3129A211D7377C5D14DEBF7A8D628616E08C1B974E284387CB3B92948F77D84A838
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 35KB
SHA256 2b686d5383e883067fa9a15ca07c36f79f2aa44b8fc890ea6b104e51112cb9a0
MD5 2adaab5067f2777d0fb2aef3a247c635
SHA1 ec650f0c0d562d33dd7c628a40d9fbcb1a24fc55
SHA512 07c196965195e4b51d331275739be8b571252fb5b207baa40ee66475c859d6c677bd6db3a1d232f256b8f0fd56ca12cd5266d35a4672f5ed50604e6bddb6025c
SSDEEP 768:eltEb0100iyF1Rsi/N1/6ENWf7rBT4mzD+Md0use6GkxR:erEw1rHFfN1/6ENm7rBkgDQJGkL
TLSH
T116F2F0DC493B778ED566337EBE05A084CF8B6E879ACB3D5DE74A430D9F8708A2502065
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7ac69c0844419eabe0ce90bc8311c6bca0aa91ece1dd110b4b7127f9995d94ba
MD5 b60d8a855486367d21bf76e83b1cea77
SHA1 7aef787052128d77db20fadee67800e8b20a9960
SHA512 628d94c8925df992c1e93122b8c7444714d2e2dd78adb2b7c3f9246ad86935a21367c9d030ffa2866ddc8de5f3a2adb118a6409b94f1a418009711c9edb39b64
TLSH
T1FA514E90BAE08045F7B1B2B160CD3D733232E92C54731E521178D9FBDB2232889963E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 eccccba7cc69c4936f3e7818939a6d23b0bbd92411853eb3b08ba678784c3a3b
MD5 f5885c0fb2994ba8302f0ebc184ac840
SHA1 500b171746c815796146a70ab785a3c0123583ab
SHA512 4e60a458468681f20d325a05b0e36d0d6369b285fb07bb56f9477b4780f5f225b6d3c75dfdb3439b31d4c36b70d082684f47f3e38d0d73d750363faba039a09c
TLSH
T12C513F90BAE0C045F7B562B160CD3D733232E92C54771E5211B8D9FBDB2632889963E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7679cdee2d51872fd8979820b38a86a7460e5ddddedd0049c3997146197238f7
MD5 4861f71db80b4e123cfb38ae5ff65c77
SHA1 49c6f47359e63b58b6d52518c67eba3ff5aa3471
SHA512 33d95545f13ffbf55a70c377ee8b5bc91a033675b010167cb22837f63ffbed13ed2883c982e5aa7120223799f06f478f160dba5a9ca7980b3ff0104310dba345
TLSH
T15F513F90BAE0C045FBB5A2B160DD3D733232E92C55731E511178D9FBDB2632889963E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 97d1fb714344294650e8391f9c598e43f310c7ed62f585c2b74a2dc80866988d
MD5 6af5017d890780a5ae2086f608e51081
SHA1 e2dff7502e9707cb49b9a7bed8c32e8ec301937a
SHA512 a65ba1151b5ec2c363c639cffb215b6a4a0f4a82db18879e3b1c93baff8cb398a427b3c400163a0c344fa720e44ccb4d2a0756b315e05555bd2d0bc690caa44a
TLSH
T135513E90BAE0C045FBB5A2B160CD3D773232E92C54771E521178D9FBDB263288A963E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 82ca24cea45be5c24b2f48f4a883db0620ba8eca7afaa30863c17812bff03956
MD5 3419738e9a2ee98ee92d1b16ad36fff3
SHA1 fa8d214640ea4a503ef1d0b48377f73815ed7200
SHA512 5514a127b0a5dbbdae81fa6e5fabf66217ae0ce0ddcd1477223199692c3f5e78732d587caa47d8326ed6e06fa4e732113f9976046e7d99df6cb4fe4ee04fc18d
TLSH
T1BB512C95BAE08045F7B463B161DD3EB33232E56C54731F5111B8D9FADB2236889863E4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 19a5dc12f8e475f0709f6010308dd54b1cf0d022a72cd28b07b7cb7a6f5a06e6
MD5 c97464829fcf4df791edc8dd147dc2db
SHA1 c12e63f678fa5f685b24f5cbc9f86b7533ae4355
SHA512 82445a269d4f559ef7b6e0b5a640ecc209b4464a74a897cf507cffa0bf44f1eb3d593eff607c82b4d45f91d4fb007d38e93a8fb284644d9922babecf07071ef3
SSDEEP 96:D/Orl6F++/r6IrzcswBOii7nJ/kuMu94sGjuuFGfKexYKBQtj4/lGo1Xjl:DWrl6Ff/eIrYskOii7nJ/kuv4sGjuuFq
TLSH
T103C1C8F743A4866ED92152F0EA442F1B8E2C1697931C3C5595E0AF2793F2470E095FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 5c8655040f8f4c3b22c7d9551354c7ca2217469716d825acb7d55087ecd40cb4
MD5 370d1997034b338a882c1e8ec5560684
SHA1 78f09cdfdcd199eb9acdf20d5c6d40137f59b322
SHA512 9068aed0899e0abb54cb482c4592c45fbc516f14623b1fe49d445aef89e4be833f0332a928af14309b16bfa057d05556ad312467251f73c32aa02666233c9c1b
SSDEEP 96:D/Orl6++65QJ3zcsOii7nJ/kuMu94sGjguFGfKexQtj4/QGAoaYK2IViwQ:DWrl6f65QJ3YsOii7nJ/kuv4sGjguFGx
TLSH
T156C1D9F743B4866ED92152F0EA446F1B8F2C1597931C3859C5E0AF2393F2470E095FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 54a391db7a332551707ac2a58924de52245da374df670e7e7888369008bffe44
MD5 4f979f001941a5b1f643f43eeebb5c96
SHA1 f64d5c40025655a3cee10adcad2f599324911f78
SHA512 d28f6183e1cdb8b20a42bd30a8e1217bb41888e649419d7ed3266debf0f089eb9150871d40f74d78b08a629a47827c3c6667a9dff1ad115ec9b3f8b7c7b7feb7
SSDEEP 96:D/Orl6++H363MzcswBOii7nJ/kuMu94sGjguFGfKexQtj4/lGAYioaYKQ:DWrl6fH363MYskOii7nJ/kuv4sGjguFT
TLSH
T1C2C1CBF743B4866ED92152F0EA446F1B8F2C1193931C3855D5E0AE2393F2470E095FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 e7d9482f7bfd2a12bbc8d64cc3a3b6a4b1b69133ef6d81cf3805b6965e4b93a1
MD5 096c1ab49c9821c1a83efd25fa8f4905
SHA1 4641e8b71f6e11b062ba4751d38eb68a469d2a72
SHA512 c0b8a2e2533e5b0a6fb191debd4dfd2dd0e12d40a88d086ae090fb0c960119f1cdf2f92e186e8452c15474a52c84a342f31186888dd1ef2632ed4804e652a117
SSDEEP 192:DEmu9Pv/edYskOiiznJOruv4sGjX+uVPDiaGfbGA9:DEmu9Pv/edYskO3znJOruv4sGjX+uVPU
TLSH
T10ED1CCF783E8866ED81156F0EA542F27CE1C1696931C3C16D5E4AF1793F2470E190EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 fc591272925a39dbc49d961a2c0ec9c511f0c3a6988cdb0348b330ce3a034d96
MD5 b50e022fb59e2e6dba42a896b6da0a2a
SHA1 6f29b7408d2a55dee24dd8dbd254107cadcc1fdf
SHA512 228fb4cfcd4bb3178c35c633b3b29982f8d047703254f8c1bb2c4a77e76dd18f93386b9b097bea51b0294f35ac40b30a3fd1f622b3dad645e40bc37edea80cd1
SSDEEP 96:DROmu9PubzMB7uMeGmxvYOifuMu9KLexwB4n:DEmu9PCAB7uMeGmxvYOifuvIQk4n
TLSH
T1F091AEF7C3D8866ED81156F0AA542E17CE1D1956931C3D06C5E4EF2B93E2470E190E6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 560cfa07630cabf9d1d72014850ab06992c8e9ae748af00ee3ad2460156683ff
MD5 2aedd2521828615e1c7098e37b4f467e
SHA1 db076c203fbc5f6bd9e3c36969e4226858090c26
SHA512 6f69df8998f02899ca83c83b01d0254ca1629d75a08e9320acd2b16c66d1a623737eda3427f4ed817d4e4ec33a5218c65fffb3fd30082e5c3d5aae18fa130df5
SSDEEP 96:DROmu9Pu+/r6dzcswBOiiznJOruMu94sGnxYKt8GAXexjus:DEmu9Pv/edYskOiiznJOruv4sGnxYS8i
TLSH
T1C1C1CDF783E8866ED81156F0EA542F27CE1D169A931C3C0AD4E4AF1793E2470E190E6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 635b4d1090c2538a32abd54e9953176bf249a3924f38fa53bd889141edd7bf66
MD5 4a0e42c88fbafe16a55f75d2905b8b2c
SHA1 3f9616d70a66f62f2cb3739919d5d1a233b237f0
SHA512 6a343227342da87995ea487c7063151eec31512e6fc99dc82783de2f811bbd2c1269445c4de9e32eb526856418cff3e8de60ff34a3261a12fd62f5e7379da36c
SSDEEP 192:sxZ4R+WY/f8stxYPIdpV9HW6+WN61x1/Yg/tQIgrJ:sxZ4bY/f8stxYgfHbu1/o9
TLSH
T1FF22B8566E28A97B8CCBE20DBA15BF13D6F9503255D41E48B6FCC61C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 d4c2bcf16fb4917eb30cd1e6a53ae0803d83dad1f7a5c2b34cafe6cb2b26ecde
MD5 d3e59ea065f3f5b1ded72337a7760dcc
SHA1 560c16466083953a55b327e4de77cf623a5a7c87
SHA512 71a8f8d4299b3b943cca49a7189fa177ac65ed2c77d35c132272197bdf0051dba7e9e06777687bb685196a784e708db798310c891861805acfed97a6876b11f4
SSDEEP 384:sxZ4eY/f8s0166s8qMpRiYnazAW8pZS15posJWeT+1eYoJHbCdoB:sQeY/fk14Mnc7WeT+1eYmHbOc
TLSH
T1F5B208059924C83B9EC36D1D693C7E33E9EC506222C5DEDA26ECCA1C019D1FDAB47457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d947a84b9dae25b5e0a389479b0d8a46b83ded53ae2a57187ffa1c80ee889c22
MD5 ad4e172591df6456b7a4e3c45e820c2f
SHA1 6bdac602ad7ba7b438e5dc75e4003e06f63eb092
SHA512 5b14e26723b6f9e43c5deca8a3765b21903bb3adfd6fbbefc6cf33afc694249aa5cfa631864a28608d49eace078000cecb863f1db0acdd44b0175b39dd4c5381
SSDEEP 192:sxZ4R+WY/f8s0fYPIdpV9HW6+WN6HFdYgftQIg5dJ:sxZ4bY/f8s0fYgfHbEd4B
TLSH
T17122B7566E28697B8CCBE20DBA15BF53E6F9503295D41E48B6FCC71C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4b598c2c3c1c51b2fb07714348eda6d74322f3660ff0f65e6914fb0684a42704
MD5 42e43cecd6da981f1d2b370ce0b1758e
SHA1 ae593ed277bc840e9183db9e732277a8c49f5a0b
SHA512 035c538593d1b797903b3c81975f7838967693b7a92a794f8549b58f048b9b4cd7133aff2686063c3d23f1cb61e2b0bb4f8f449bd169b6466f816a883cc73345
SSDEEP 192:sxZ4R+WY/f8s0fYPIdpT9HW6+WN6zbFYg7tQIg5dJ:sxZ4bY/f8s0fYgJHbuFAB
TLSH
T19322A7566E28697B8CCBE20DBA15BF53E6F9503255E41E48B6FCC71C05E6ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6ee9f591b0a3b3d24011445c1aff9ce6feedfacfa5b8f10a514f809e9ba186c5
MD5 ac6c394d586a82d95b18cde22e940ab6
SHA1 40ee45c68209b2aab0fb80aa13640ea57408891b
SHA512 a0432d7b7c70adb48728f366071ff7172f7354336a19ed68471b8459d03deffb98f616ac326efdc48e8239e524c4b63be125f2edc02bb09f9e7266201b795791
SSDEEP 192:sxZ4R+WY/f8s0fYnIdpT9HW6+WN6dtdYgptQIg5dJ:sxZ4bY/f8s0fYoJHbyd2B
TLSH
T1AF22C6166E28A97B8CCBE20DBA15BF53E6F9503295D51E48B6FCC71C05E6ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 24KB
SHA256 40830736764141fad2d66f349fd72cc8c140ef2d681d01c6c95f4549e973a246
MD5 d922f280357fff9907950d16f6e73080
SHA1 2898cfd71486039c238a99a889bba2fd061621b4
SHA512 b8de757fc76200c5c6f80934f04f708235b7ae1f9760772405d76e8ab3873dd0334ca708cc1a0841c1e5691a7be8af234040c300e4160b62ae5ad21058de55da
SSDEEP 384:sxZ4bY/f8s0166s8qMpRiYnazAW8pZS15posJWeT+1eYoJHbsZZB:sQbY/fk14Mnc7WeT+1eYmHb4r
TLSH
T1AAB208059924C83B9EC3AD1D693C7E33E9EC506222C5DEDA2AECCA1C019D1FDAB47457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e13d3981b20eae47a1e617d7c2b232e50ad77fe26a4522f9730a763adfdf0b63
MD5 ea5b67548e2617d62a024ee2e1e643f4
SHA1 f6ebf81ca22dd3543f903d42b173fbb7e6f6551a
SHA512 5726c905e393991679110f48c64457db570e032d695bacf330ca6f92bd74b0929957b01b16dd39875f47387d8e0cda77f8aba2fd33332ec793faf9f1b55a2827
SSDEEP 192:sxZ4R+WY/f8s0fY/IdpT9HW6+WN6lrXYghtQIg5dJ:sxZ4bY/f8s0fYwJHbkXeB
TLSH
T19222A6566E28A97B8CCBE20DBA15BF13E6F9503255D51E48B6FCC71C05E7ACD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c554c0cb89722470061320cdb21ef20f9a701713d3275b29b5e2491849772921
MD5 c70476fdfc79591d82da6632ec52db1e
SHA1 6d278b6cbd7c6ec60c758db8ce4a82c30c839121
SHA512 1dc7f375c71186e525dd2e8d9a2839d60b507322661e5f6b7171d532ed5bbee8d77b2dd349c275c8d0a4400f520daf2e0593e0bf2e2aa57bc93fcfa414fc81c8
SSDEEP 192:sxZ4R+WY/f8s0xYPIdpV9HW6+WN6bgXYg7tQIg5/J:sxZ4bY/f8s0xYgfHbdX4/
TLSH
T11122B7566E28A97B8CCBE20DBA15BF53E5F9503195D41E88B6FCC71C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 927cff7e2bebff62bc7a05a2217ed95e63556afdd6525a854fef910e2686e796
MD5 5acc361dc205e7a5c2bb71433ad5f4c8
SHA1 97a486c97f8aca2e7a3965e82ca728482a96a8c0
SHA512 a4b9a45338c7b47e8e08fbbba67932462e519e2971d09c8903a8d6d7db52b6acdf198d6edd77620cab14ab86b5976b777ae038abc395f4a36e2ff2ef61bcfd5d
SSDEEP 768:whichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzDrohzs:whichfPWvPZplu1jan+LKgzwJs
TLSH
T169C2F93B640CCA7E4FC01A9DDD1A6FDA7E9802C7AA588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 dabb9f5a6c66de42c84aec4747138c1343432eedf511d06155fa5a3ed47328d6
MD5 8f2e9ccd9f3b61edc3c982406b152d5f
SHA1 acb9541da196c7e4f0a12c00566d7739c23f7662
SHA512 397cb499833d50398bd6d10d28cf1785c9fda06541ab55cfee3c8c0138cae06aa76dd97d7e85e83d76c0c9fa2462f4a97d106c659d88b76cfa6a9830545e5da5
TLSH
T1DCE0C0B72FD72854ECDF83D2103188D50101B924C940ED4F202E91C392F0345385AC22
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 552865464f5c55b48ab4c5c999efed8c45bd23348eef732d8c384480eba6f16c
MD5 3058687add59aa91f648f67f2b3dce72
SHA1 f90e2ec4c86cf07eb2280e305dab9be5b41b416a
SHA512 c1facc41d3beb15b68f7c1af7dffb36427e014de4d99b9cc9c3148847b2932c6b7cf848624541a11dbfd7b77402710ad81f2b42aeeddcdbc789451d6c60c1752
SSDEEP 48:K07+/bldd+bNglIS7+K9L1J+xTuYIZrfyL4N4s4h494P474/4gb4T4m4zIS414gB:KEIQKFW6WruKAs3bWKQMi+BiK64+
TLSH
T105C1E14130BB064638BD254C91A1872E424235B3316DF6BBFF7D48A68E6AE441DFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59890c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59890c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1f4598a8127e0f7ccc91771df0cd3e9b65fe905842a25a8fa88420c682b432c8
MD5 25600131774c9291f47f1de872710a02
SHA1 6202e9b3cca268894a003e762da6774880af3672
SHA512 422e4af03d00f80a4c0a34fb288a86882e4ef137d5b7ac123c0a51080952e7c1a41d8fc0dab5f69628ea45fc431e87b9187c6514107a598fb8c10cecd82529c9
SSDEEP 384:+iFiZcIMzsNe8TUNTUlIlh958TAGBGYX5EDtOxlLkotgOIwZOyNRoa:VFQwvwgZXAGYuDtOTLkoXse5
TLSH
T1A7C22BF648E78876D8AE5743E77E2D038EBCC027B594AA50B3985A1CCC961BFC306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6aedb18a7154462e3992fb903d302f7a7fa92ee64b2babad76c8e574103a9972
MD5 022cdff1fc1ecdab6c981ef4e945ee37
SHA1 7276dbbd38461981e3d398ffd6eeb256eacfe7ad
SHA512 fae08f75843f0aaebe955ec7c658e117f06404fb6283a6fec9bce0044452ec2105feb66121b243dd3b6cf9cb558290a7b9238ed95370e904e06d92bce879ee63
SSDEEP 192:LJON46DphmqQmiUyDeq8wGYX59ezSCtORX/kk7anU6:lON4619VRwGYX5EDtOxnYU6
TLSH
T1C302E835ADB87CBB8DE26E45F58B37139FA4112BAA946F44D6D81E1C01D768C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c2058ac51e99dd41252c981ea7db64d5d5838d2f6fd0bd2c3a5a0a4e6e6eeca
MD5 12088b86e027345ee0829c7db70d241b
SHA1 6cd973f81fc84fa7f2cb67dffc39fad5a1967991
SHA512 9f3d83ffb29153e594ffff878dc014fc6c759e2975e629ada6d71a94515617a2d963b1c5e55f2fbdeaec37caf67a79f2515710540a556e7ea2bddca28ab135ae
SSDEEP 192:LJONn6DphyqQmiUydeSwGYX59ezSCtORXlLukIIS/5u6U6:lONn61ptSwGYX5EDtOxlLHoU6
TLSH
T1D412FA36ADB8AC7B1DD26591F48735139FA8512BEB847F50E6DC2A2C01DF65C230A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0b05ead8aa50d03e08f1daf3bd0ea62f3dee2962526cf0ea06741960dcd00584
MD5 4f859eb5b1e5f130b402d8df70d71413
SHA1 e0e92a42d52df632fcfb1c5f8a1263759f7d3344
SHA512 7b704706557d22694fcbda203e0f7a4c5449c4d230aab46fcab7dbe330cec7a293fa616ebca31760c4e28237a72504d03002f0e5a5572645caedd57f3a59c341
SSDEEP 384:rZcIhsNOM958xGBGYX5EDtOxlLyotgOIwZOyNRoa:zhYSAGYuDtOTLyoXse5
TLSH
T1EE827E369DB89C7718E7A145F58B36039FB88027E7D4AF94D5EC6B1D01DA298130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ee3647994b638042c5f00d345c271ee99c482b56357f0cb28594f3200d7d77c4
MD5 28fa8546515a55411b90418f0cacdd50
SHA1 93b61d2909f26d67209b1c4073cbf17a16576d2b
SHA512 35bae71d0fe47a9199a1976d09f909921361523d8e7732496bf3ab73161aa021c56f2d3441616f8974f390ac1812c939ed59a3fa98f90fe536be4322d60b78c5
SSDEEP 384:PZcIhsNOh958xGBGYX5EDtOxlLyotgOIwZOyNRoa:HhJSAGYuDtOTLyoXse5
TLSH
T1ED827E369DB85C7718EBA145F58B36039FB8802BE7D46F90D5EC6B1D01DA698130BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c2226a22556d172ae151f1e5ba5aed09ca4be7c6e0e5a8c85b9290f49bb780ad
MD5 f36afcbdb98810eaeb560a5dc775a6f8
SHA1 33a3f692e1a6a1835c56cd1990c7dddee1fa2ee9
SHA512 dd883e0d02c5da00950eb04c042cc1e6a0cd9b79b3b1f53d818d50f450665283bc2c12cf43bb0d449e6d52294186a80b46ff64578c1f3ba4c6e706a62b04fc30
TLSH
T114E0040013005177C05D073001435F040F50C40503F313475730017C1C713103C70D40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8893f04abdd7829735734d7e245dd828816898b4ee943097863daeae34a5d46d
MD5 9c47a11c8f91b42ea8594008603f530a
SHA1 3ddb7da706dc33e3d87a4e9eb653cf8eec2fb2d3
SHA512 eff426d5ae02d90377b6f8118e7e1475a555c98a1b1d94702571b43e3dd45d7c5e2512c0686c866e2ba150be01b2f0cbbd937fab216c1193aa98c19ddbfa4538
TLSH
T1D2E00211130451B7C0690B3001435F044FD1C41502B213475B30016C1C733103C70B40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 47c3437ef2941f7883a706d25b2771dba231f1c4193bf4c502af2345fbd60f3f
MD5 4ae0f26ce67126990f36a0784aa61360
SHA1 2d4c2bf485f34044cb182377f54edf72f1b0c771
SHA512 b14d5bf7008c3c0592014b1e420fc9f638cf76876a121391184b6846ef5440748c7ebe4745cfb3dd6461040141005fd4da0e35a0f6e72a5ce115287dcdc29050
TLSH
T109E00251930455BBC07D0B3002435F144FD1C45506F223475B30016C7C737543CB0F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 440967a7bbeeb3933c035ff3454762a41c1ea50266a163589896486d65b5b0dc
MD5 9ae1740641e99d28f1742eed86d7329b
SHA1 4790807fab5ec78d872ce16f7c9623020294157c
SHA512 6d2375127323fe5cc3fd96f8b57c32d1ca0b3b083806715c88c8247199812c93228b334583fa357125e9199284327955fa1d5fad8f7e28c6819642543d8cc19e
TLSH
T161E00151A30655BAC16D0B3002435F145FD1C49516F223575B30016C6C737543CB0F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe590d16.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe590d16.TMP
Size 392B
SHA256 ceeda57aecf4776c8bd4f894d09a17c23bd364f653c5df73688180fe88ae1b9e
MD5 84929d37d7109cecd1cbe4f70a52d25e
SHA1 353338fea2b9e84124912480dd2f12640cca31d5
SHA512 9289755793f494bb197defa1fb87f733e0e7d7513a8cb7d2b89140460833818faa5964a6630a5a1188ac3e71125a6715f391659f758421b107db89dc8ccff85c
MD5 SHA1 SHA512

Submit Download

d21f5ef4-4197-4c87-884e-4be544f6b16b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d21f5ef4-4197-4c87-884e-4be544f6b16b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 88f7210b4fe9550c1012c008c2a0fa50d2444d1fa3eddc5e8db81aca281edb4c
MD5 9d5a13bf298ee146ac403d4540f296dd
SHA1 636d7dc51dd92b52f7aa6289bd8f8892438b54cd
SHA512 a1745aa22faf26ff94dd71a2580dcaa35b5fe3768a3eefd1bc5a425293d5333e421eac580148c752d6dca27ffae864aebad4cf409c4ba0c8bb49eccfb3e4c07c
TLSH
T15341E75DA6EE1148B3B76E569BF6A86E487A78372E4AD45E00010E4F0A72F40D871737
MD5 SHA1 SHA512 TLSH

Submit Download