fb65190dbdaa17dae42d20a106091e1c650d03292ccd9a825359012d38e330b7

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1KB
Sample260925-wp32ssshnd
SHA256 fb65190dbdaa17dae42d20a106091e1c650d03292ccd9a825359012d38e330b7
MD5 eb81f78e2a28781c565efb61a33ec6da
SHA1 b4e942ef0056d384c77e977d0cd9623de74e609c
SHA512 4eeaa110a6e6d1078002566f0f84c4ee761df89bac7578eeb62aa1f050e4d20963b83f11af944e4acab68db4c8b3429e61b9be8ecf85f88c916aa336ec15b199
TLSH
T14811F04334B0C805032042A29DE2F02A6D8B62574B499D6478BB60FFCF94AD186E7669
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4696	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{1F14EE5C-E706-49F0-A3FD-4E7A4D509BB4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4072	msedge.exe
4072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 2552	4124	msedge.exe	85
PID 4124 wrote to memory of 4696	4124	msedge.exe	86
PID 4124 wrote to memory of 5092	4124	msedge.exe	87
PID 4124 wrote to memory of 5092	4124	msedge.exe	87
PID 4124 wrote to memory of 5092	4124	msedge.exe	87
PID 4124 wrote to memory of 2284	4124	msedge.exe	88
PID 4124 wrote to memory of 2284	4124	msedge.exe	88
PID 4124 wrote to memory of 1088	4124	msedge.exe	89
PID 4124 wrote to memory of 1088	4124	msedge.exe	89
PID 4124 wrote to memory of 1088	4124	msedge.exe	89
PID 4124 wrote to memory of 4752	4124	msedge.exe	90
PID 4124 wrote to memory of 4752	4124	msedge.exe	90
PID 4124 wrote to memory of 4752	4124	msedge.exe	90
PID 4124 wrote to memory of 3976	4124	msedge.exe	92
PID 4124 wrote to memory of 4920	4124	msedge.exe	93
PID 4124 wrote to memory of 3976	4124	msedge.exe	92
PID 4124 wrote to memory of 3976	4124	msedge.exe	92
PID 4124 wrote to memory of 4920	4124	msedge.exe	93
PID 4124 wrote to memory of 4920	4124	msedge.exe	93
PID 4124 wrote to memory of 1996	4124	msedge.exe	97
PID 4124 wrote to memory of 2280	4124	msedge.exe	98
PID 4124 wrote to memory of 1996	4124	msedge.exe	97
PID 4124 wrote to memory of 2280	4124	msedge.exe	98
PID 4124 wrote to memory of 892	4124	msedge.exe	100
PID 4124 wrote to memory of 1592	4124	msedge.exe	109
PID 4124 wrote to memory of 1592	4124	msedge.exe	109
PID 4124 wrote to memory of 1592	4124	msedge.exe	109
PID 4124 wrote to memory of 4092	4124	msedge.exe	111
PID 4124 wrote to memory of 4092	4124	msedge.exe	111
PID 4124 wrote to memory of 4792	4124	msedge.exe	114
PID 4124 wrote to memory of 4792	4124	msedge.exe	114
PID 4124 wrote to memory of 4792	4124	msedge.exe	114
PID 4124 wrote to memory of 5840	4124	msedge.exe	115
PID 4124 wrote to memory of 5840	4124	msedge.exe	115
PID 4124 wrote to memory of 5840	4124	msedge.exe	115
PID 4124 wrote to memory of 5860	4124	msedge.exe	116
PID 4124 wrote to memory of 5860	4124	msedge.exe	116
PID 4124 wrote to memory of 5860	4124	msedge.exe	116
PID 4124 wrote to memory of 6012	4124	msedge.exe	117
PID 4124 wrote to memory of 6012	4124	msedge.exe	117
PID 4124 wrote to memory of 6012	4124	msedge.exe	117
PID 4124 wrote to memory of 4604	4124	msedge.exe	119
PID 4124 wrote to memory of 5572	4124	msedge.exe	120
PID 4124 wrote to memory of 5592	4124	msedge.exe	121
PID 4124 wrote to memory of 6052	4124	msedge.exe	133
PID 4124 wrote to memory of 6052	4124	msedge.exe	133
PID 4124 wrote to memory of 5600	4124	msedge.exe	135
PID 4124 wrote to memory of 5600	4124	msedge.exe	135
PID 4124 wrote to memory of 5600	4124	msedge.exe	135
PID 4124 wrote to memory of 8	4124	msedge.exe	136
PID 4124 wrote to memory of 8	4124	msedge.exe	136
PID 4124 wrote to memory of 4072	4124	msedge.exe	139
PID 4124 wrote to memory of 5668	4124	msedge.exe	142

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff89516c188,0x7ff89516c194,0x7ff89516c1a0
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,17186771104713779690,11735295554881755385,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,3264659948720718840,6265904914013339284,262144 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,14944786307885984714,16738719720904375369,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,4274550158244242770,13130014985433249335,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,15133195158253084821,4660387577943417762,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,12042755505581001519,10933045750497115384,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,14002208461041143617,11377912950762325119,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,629372337583986970,5994646283792618543,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,6720817954372129621,16972331557141616583,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,10396174310911293517,13912477543004452389,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,10396174310911293517,13912477543004452389,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6280,i,2591593952203884487,11999636022814227413,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,14922890768453853621,17447228393031397817,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6924,i,8326061616768721596,9510437686903133439,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7104,i,2814957609451641894,13081828250006476075,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4712,i,6389481989176932347,563784655321392919,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4268,i,16065220384155673999,15929070522865584589,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,10960855370863751363,8711435557559886191,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7208,i,5940149953516978684,7989594230477675739,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7184,i,4184126054348819033,13712262965116794480,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:8
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7580,i,4968106160910430419,9284435883883015206,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:8
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5700,i,15936296680917184389,13767662371986048668,2097152 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=7840 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,1250225105946655991,11681855699256330495,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8172,i,4533901920248676120,5622129912411647914,262144 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,18225770143946244207,5891660035286821225,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=1016 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,18225770143946244207,5891660035286821225,524288 --field-trial-handle=2156,i,1224952522358442007,3342809889722786192,262144 --variations-seed-version --mojo-platform-channel-handle=1016 /prefetch:8
  2⤵
  PID:5668

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 70KB
SHA256 483db2092c66391c9b1048327cc8ae5a392fd0cc9802f30a2a2094ec55f7e0d1
MD5 6a8a48918cb681f434aa2088125962a1
SHA1 1deb63168dc64fb8d3ed940e1b76e655a5c52828
SHA512 08ff814485eddc3293c2b3aca3462f4a5f0e2f22a51eb13590e2e9203744a250f395627ce4a890e956d193bf7dad9f243267e9dfa0406a7396dab6c9a88ea080
SSDEEP 1536:joqOysWm5M1Ew3A56Tm67CPFgkG6pT11HyC3TIpZJueYO9/hKnRmQdeDqsKldRL:FsWmy1EmAgm6FkGWTqCeY4/hvQYDq3dR
TLSH
T1326312E785750C26B1D12DF09294ADC629A75904A3F1310BEA85FD7B253D0F3EA23727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 416KB
SHA256 c5c78d605032266ac4d831673f8f9d0323a47194155b0534b737ced2d78333e1
MD5 b0e065464f811470ea6d4c064c4e4cb0
SHA1 96043c799a46e1d51d91294b5f6865f2a9a17de0
SHA512 d0cd9520ba734504f87e48da9cc94b18ca5728bc188537f47a566fc7bcf91081d8819df97c3c018bd11459da40dc0231610c3d7077b115f8c621ec2c62937e87
SSDEEP 12288:gFsJTkrWpiA70rHTngUuX5Z3IGHrpbW9w:gmJDoAQrH7M7IEq9w
TLSH
T1B99423E5247A1E5B0BCE3743B9421D87628772C30F9613C85723E55E9AF24A0EF524ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 206KB
SHA256 411cef8faad9f49513ba7a2fc4082e0d3e7fa124d4c42a5373d6281a7519636f
MD5 b77639b2fe0a351b8c6042415977b086
SHA1 af05dab11ab4e162976f574dab0fbb0571d51529
SHA512 2be088036381cf7adf85081a3f47f78df1b8d12537536c8a9525aeaec03e639fa61c8bd2b4519ff7500916919348be2d2cd56bda1a5907327e45e47bd4e9bbde
SSDEEP 6144:ut8RUGfimWNzmcdAhDrTsrye/NOgcwH5YOVJhqRpTA:PeW3Wx8DrTst/NOgcslIA
TLSH
T17124236930F1A69190B8913C86DFB09B543C8807DCFD68ED6699055AEF0D9700BB9C7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 256KB
SHA256 266387d6179d8cd4661ef22124dc479059fe8e40758feb4022b2cca865cb654a
MD5 fcd6fe1438e4149e6a7128144033a8d4
SHA1 360237dcd048317694abe16fa8d8e9d0445969a2
SHA512 24b22bb6a1388315f42f20495d5593da0ec537840f9ae46e4cb71cb090f1611d341492f7cf091dcacbb8d85478f4e4e51e45801b505708bab2e597717fe07fe1
SSDEEP 6144:fc89w5sS4So6X7GUfKyxW12Hngz1DwVETKG5:fHQ48XViyxWjZ3F
TLSH
T1E6440250FB564388DB032A36E4583E671E626AD530D37A0906A4BC12F81699FF33FB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 128KB
SHA256 85b6a6ec3ff4d947c9859904da096dee0e8412646ced7ddc983c1fcb8d2e485e
MD5 7e4c208669d74bfb0e73a225e9db01cd
SHA1 414362330cf8ebc23cf8adf54a76d2214e3e425e
SHA512 137e9b79fff86a63f99eb5730edf327467c95a5acfdd63104e09985dd2dbd69ef0ffa1ab10f0ed1ef718fbf541f5004f4a51403e7f62de9f3943ad74f00687c1
SSDEEP 1536:sxJENA1yEiM78Qr/q0FkbClOAopWxWDpHm4YxWvhJcnnYZyn2zwKU7h:Ox1yB280/dkbCJopWyltceh8j7h
TLSH
T1DAD37070FBC3D781CB432BBCA43C3E730B5501D162D95A1B46636D16A584FB6922BA3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 256KB
SHA256 ef389287b32b215ab2e1831b8baed478f94246cafb0528c444a34008bd45096d
MD5 538ab0e37d112423be3332008685b7d6
SHA1 77cc839d2d7aa136436cfc3fbc90da2cb8a76525
SHA512 ea4b975c6f315cd2a17ab34b10bc8cae93d3cd3a104302f5b9ccc3f6ebf4a900559487ba58bbd5f54d4ce87889aa99bedaf3986d3938a00838f80164273c7f01
SSDEEP 3072:MrD9ZU2i9owsDU/LCOmkbqQi8eEvf5VjmIFhdJV/vZN+mAQQEp4FTUqbWHfJx8an:MnsobbYxvfHjJFxVLx3tiTlbSfTUNG
TLSH
T1114402A9D6638341CF03BAB9B46E3C73CB700ACE76C0199686065D11BC617A5D32F92F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 877aece97d74fb881388154e5315feb57109f9a0f68871eb9606c92f67a7b83e
MD5 f7c87c3576f39147d250ae1325726526
SHA1 a4b74f074d8577c86aeaf29ac34395902157fee7
SHA512 35d87394052a38517f56014ecbab54e034d796614db7ed459399ea76440964b72b9da8eedc85b00946bf5003231385a40f212b63fa1a932378a4d28665a9b162
SSDEEP 96:0YRkz174XnTcmMKM9vl71/lh+rS4606wBd+fN5mY87ePfip:0dInomMRplVlh+rS4ZANtJPKp
TLSH
T111E176AB66936284FF6B7939C0CD8DFD3435044D8A471F9AA39FDD3060173A1E648A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 69ba8f4cd112c59651b8dba88ac6e9a853ecd47a4d39c2502c969d4bece8308c
MD5 58baeede802e208f83d644c27b1cdb04
SHA1 fed806d9d2b7fa669085e4533deec32809a752c6
SHA512 a3b8594cbf032f520fd192e1ac998616325c16586064b6a3b18c4109e4046e35b0e266f4179aa1459058b287e1fa59f2395910f52a76bd46f990711e5d90773f
SSDEEP 96:Hkz174XnTcmMKM9vl71/lh+rS4606wj0Zd+fN5mY87ePfid:2InomMRplVlh+rS4ZjBNtJPKd
TLSH
T126E175AB65936284FF6B7939C0CD8DFE3435044D8E461F9AA39FDD3060173A1E648A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a128f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a128f.TMP
Size 3KB
SHA256 b0bb012a18db5f0a24482028bad86130d612e517a4be1b97470bbb42ed4817c7
MD5 cb233533a34b22768aaa3564f3598347
SHA1 c6b23253f27514a30c4268249aa79c7f112315e1
SHA512 77c5a7a80ad257b52183d6d79a6e77ca0afa3e350cc3c1a8b5e08dd36ddffb2c23ddd6402cf655f2ffe217608345c4c6650a03b4266a032f3c6ccc479d7e504b
TLSH
T1355174429B5343ADF7BB603281D519CF3A35454A584B5F2AC1E8C678B89F718A71806F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 6c303c3b6fe076422ce62e73e66aee5222aef4a219a8f3d099f7f6c463d33093
MD5 0cebf96aba870f841fba1464bb14a8e9
SHA1 0236534a56a3b6c0ee16849e957c04d1c6fff106
SHA512 16249879721bb8fab02107cd309105212dcda478f654483ed55a2241b5b4e802f625ef6aa2599c126f6e88e8fcf7b4ad0da4dbea73498c3ca41510c2ca59538a
SSDEEP 96:DUf56qG4xznnEiEB0tPBvI4wBjGO5HzRstY6Ghx:DUf56qG4xznEigEPBvI4kj75TGtY6Ghx
TLSH
T107B198F7C3E5822EC91151F0AA186E2BCE5C0556436C3C5AC8E4AF4BA3F2871E151B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 d0c6b5e5f55b1bd8662a6252ca8c9eaf7e6feef31f45424cdb8f157bc9d6cb92
MD5 f087596d42294748ce2504ef7da01616
SHA1 24417d231e8e0b36dafa810f1b8c1b7feb257b5f
SHA512 d10c26c9d95fc5c5f7355b9af7bfe4f502f4c6b50c4a4d0038ed7aa70f673e8d122de1600dded01eb98d47c3017bd2141490a77b3b97ae7a686a159c8f70003f
TLSH
T1C9D022633388B0B6A66C2EC151AAAC8FCB7620A81902E9D460D1D8AD253156D65A7640
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59b4ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59b4ee.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 70a4e73ce01a87a1101e2626c04ddf7c106c47be905dd385c5fb5e03ff545682
MD5 72969f132e16ff3e993d21631a037cfb
SHA1 c3e018726c41fa481717bb9bd2343ed04e87ea56
SHA512 92e581bbe5596faf6f9d098f78fc8b1bedaac268aa69f5121451eef09e59ae1cc4e34de1f7bb3d9ac8401f524072e46e3a0890c7f0fb1cabd54338c17343d7b6
SSDEEP 192:sxZ2RwMOY/f1sa6Nb4fdpmiuHW6+WNBkz/YRPRTIIgU7I+ImTyRfcV:sxZ2HOY/f1saJbaHbO/myU8+TTb
TLSH
T1CC52D64A6A24D8778CC7D519AE357F52D7F900239D915E8CAAFCC91C04EB6EE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a10d5ba1a85fe7cdda6a05df4ea6d9a03aacd5c4f3008e4539136cfa34b96efe
MD5 7b39b8b95c59f67bbcfe52523cf1529e
SHA1 be072a62ae24fc413871f71d97b8467b36e9cdec
SHA512 821346670597b642badd47c8033d33c646a73048b0ebbd7cb4fe26affaa0451ce7eb6a65eb01b6126ad14fbe1f782252fa25cc9f7b3a589f0ea90d320ab95ea4
SSDEEP 192:sxZWRwMOY/f1sO6Zvn4Jb4JdpmKuHW6+WNBkz/YRPRTIIg5M7I+ImTyRfcV:sxZWHOY/f1sOj2tCHbO/mye8+TTb
TLSH
T17862F84A5A24D8778CC7D619AE357F52D7FD00239D954E8CAAFCC91C04EB6EE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 e7dda05b042b3ebe76478c956cf03fd9184a1ce50482c4105f20e7c5b1540be9
MD5 1716df3f15fea048b2cbcd1e40ce72eb
SHA1 85594177abc2bf92e32b9ce18bedd441f8b28350
SHA512 e54f559a9ce9300848f5901616fb17e810b972f731581f659d4dd71999bbd827e8f62898914f3f0581cb066e8e738248280498c699016d175f5a7fac1c6fd37d
SSDEEP 384:sxZVnlH2mzY/f1sYeI9JHb7y7/myI8+TTXvh+TT8:sNlWmzY/fxeQHb7wmt8+TTXZ+TT8
TLSH
T1CF82D55A5A20C8778CCBD519AE357F52DBE900639D964E8CAAFCC91C04EF6FE1207817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 0b3c783f7940cb40e279f2091ad07974d4b5b459d6b6b523239e65455fe123eb
MD5 bb9f65b142b6def986ec7227fbff215f
SHA1 b51fd24ecfab8cb9ea1b290eb6073c775190c320
SHA512 69f1ee22d8b5d4b5c3667c00bbcb973a27252cf4d6ed19506d253e54ce6e4904c893e18a84c655f7aeb9712035dcf64725653bbf8ea769a361d25da3199c71e9
SSDEEP 384:sxZVnnaImzY/f1sY+fhZ8Hb7yN7/miIl+TTXvh+TT8:sNnaImzY/fx+ZCHb76m9l+TTXZ+TT8
TLSH
T12492D55B5920C8778CCBD518EE35BF52DBE900639D964E8CAAFCC91C04EE6FE1606817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c01bc06e347ad06905b17cf053b303beb8fcbec2becb0f37d9c4f93ab1130b49
MD5 f48c9625bb30a832f8c1fa761c376134
SHA1 816902d997a70fc7a719aa7ab8d32dbcced58661
SHA512 4f9ebc41ca41f51096b61c16781b8c8f743bab7416a13fae93b90daaffd9526d552669971d3135f708440fc9e0646a9f87b6318ccffcfd0d7fc3bae51d077128
SSDEEP 768:zDK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3QroP+cq:zDK9uzYWvcQWsu1ja0HL7Q37P+cq
TLSH
T1A6C20A3F640CCB7E4FC01A9DDC5A6F973E9802D796588D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\623cd082b6202da0_0
Size 82KB
SHA256 379a2d4f5c727176dde0533d37713dd667e88dd10bae882518a19cf5dce2a511
MD5 7965dd53f05fb08afca1b7fb1f1b568b
SHA1 db8292969118f1e3d268bd662275c1df7b6d3513
SHA512 f87534a87e6cd561e9667415c63f8396800b568a797ca6fbdc9c35da2c908f9a2c4f2117eb8809b374202b5a702afc9617a3392d4e02d3937ea4286063156f8f
SSDEEP 1536:B/t9Q++HqsJs0wihp2VMGznXoHVyOAcU9dP2CsXPoTeZPwce4jqHPwqYzGp/1J:hs+nKMVMGzXo1yO4Z2dS0W/1J
TLSH
T169833BA6B2627036C7AC11D594566F01F21B07461448C9FCF07CA6963F28ECB63B7BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 ceb6cac02de2e94cff580266d41eebd08791c6bb947ea72e14ca50d0fb65d477
MD5 80a61d516015ba34e3d92b0fff07a5da
SHA1 b128b37e5d7524c195ab6b90222004c4bcd8bbf9
SHA512 a786213eaa079f78c8380479fb16f48c554cb67999176385f157b6c564afe610ad12db4b2a3eff38f3021aebe12f4edffcd86a87290dd97f67fb9d06e594a902
TLSH
T190A0021457C45025D11752B31E6726421300C8602110236740998344CE914804DD160F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 5b6d69222b773ee3ec5bc5985f51f7b1682ab0895e814bf48bfb91d73c2c615a
MD5 699f30f9858ac4576787fac012530251
SHA1 fe2ef531d41ee414278efe8753eddf625eadeb7c
SHA512 93d77d5fbd56178463b075f65a3dd594df235fa718f04e6b121513871f2a828f166be55fb82c90c9de254925e4e38beeed2398c0609866b19d7ffb5f9a7a5274
TLSH
T1EFA002140AC20109C14213B8EDE762752360D9180781138746D38544DCF79564E4A41C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a368cb2-655e-4505-85d0-20300a913369\index-dir\the-real-index
Size 72B
SHA256 ec754996efd217ca788c5bba56ba1b3b0f8827eba5014a7dc913bed3827dfd0e
MD5 ab2e2ebffc8d735812f4ca7122c943db
SHA1 00d910baf2cea77383e7cd6d8ec375058df86695
SHA512 1f5c7e9729f456aba0ae7b41ca180f4e17893b697deeae57c56af51d1c9edc3c9ef9f7f7125290b1df8369838c9f5156232ea0cd0fc2daf9c11da9b9ed906eca
TLSH
T17BA002745B834805D04213F52A9A22722765C9245E02934B51A20045CD76A454D4211D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\568da5b2-7611-4c39-a336-da0d40f37a75\index-dir\the-real-index
Size 72B
SHA256 fc0d35eefa8140bfdeb628afd8f882052daba0e04253c4e56c21d2c33fb7a6c9
MD5 79c7a00ac4dc842abcaeef3ce5e83989
SHA1 ffcc8732985456da52782d5f8c92e3294782e1e0
SHA512 7f4db6b17c39f3f1b6c0bb1b24dc21b9da59ea59da5fc75dc7f3892baacf75102017f92cdc63921971b99e3c5d51b11958666f4ce8e5fcebe863fe13e9f9be8b
TLSH
T13EA0022901DC7345E2044FB4554702B82357DD554101530BA0D25A5DCC6119FD9D1056
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7dfadeb2-3b9b-4159-842e-008fa769491a\index-dir\the-real-index
Size 72B
SHA256 a1eac746496386e3bd31fa6c93e2ebd9a5d85bd69e3eeafa336ebfcebd07b96a
MD5 0574916c45557cb1fd6ed5aacd2e3701
SHA1 db65cbb5acaef2f811205e7039a00eb2640a42a7
SHA512 063d15ab8a2365adec12aae096136bb83089c832529ed5711fbf3b530ecb1f3311d3dd57d791b382e8266072e9010504b12a081ff6cf787939a87f2925f11303
TLSH
T13DA002102351A101C14502F0F543D3796B945AF811C1420F57DAF47CDDD2DB3E5C6060
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0764.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7dfadeb2-3b9b-4159-842e-008fa769491a\index-dir\the-real-index~RFe5a0764.TMP
Size 48B
SHA256 7bdfcf55b6e3eda08f2521018e3a7191185f135c5841fdb8ffafaa3e8d81d466
MD5 1652f92a4965bba11202ec756208eb26
SHA1 d739c3cdf0d08846cd4cb8197db5bcb49f87caa9
SHA512 a181d057dcc8da039751795476ac071de8c6eddad515933d9cdd580eab92c305bd5eb89f7370be2683323aeda0094d829d861c10f230eab8d61c888873d973e0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f118371-aa16-4b56-aeb7-3511821bd2a1\index-dir\the-real-index
Size 96B
SHA256 71305a13a91017745734c7c7f6cb17fbbdadfedba8a839dd0c6a7c630094b7e1
MD5 5346341d609aa1a12f1930b343c6289b
SHA1 37aa3c73cc63bd3004445e101031d846f8781e86
SHA512 7220de17295f7b9790589a5cda57c19a745015bb07afb58cb1285736036eeda5dd2d0debd68fe1badd6abb167bf7397bf45d7024caafc0118a426f4a9195fa88
TLSH
T199B0120833805185E30B13706582006432D0488002C52E07B084D0F9D820681C502024
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0764.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8f118371-aa16-4b56-aeb7-3511821bd2a1\index-dir\the-real-index~RFe5a0764.TMP
Size 48B
SHA256 58590ea784cb506a29188e4546f0d9587faf2730eaa9ed7e4b3d811806471e76
MD5 25e8fb5b900b8625e2078fca9497f327
SHA1 4eab72d4b0f4816ae189866e1c79c5a377e33829
SHA512 631d2d32bbb6335cb87a71b8c5924d07958f19e89ea2af809feffc7f050a50d60d7b6bc99a0f03e0192374044cafe6eed457e6444c7ddfcc73fbf2d0842d0fc8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 3KB
SHA256 c68f3cf9fd20b80ce7193df7a1ce266c5c65600ba42ef1074a06460b79040a16
MD5 2777f934e76803f393787fd6450d7fea
SHA1 ba5b371364c78ba3645524ca9b3f817686bf08c3
SHA512 79c4eda0796b834dfdd00c9a89226233121b0c0ef6528c047ce30bada5c5df19cc202225bbdd2b64bd3b12b314c6570c88828f4afe161f02fc95d9eb8dffdbcd
TLSH
T19351E90D1D035B1AECACA6B004F20405377879EC27881E2B60FE9535F8C7739199C56C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index
Size 768B
SHA256 b441661295c96de35d86dcc4e8bf7869b922e24cf5183be0b4731eb54d34401a
MD5 d520c58732306c2e5ae0d769e0d3be15
SHA1 c00b46bb19917d0e0536d94860d2700be54d2261
SHA512 efd67bfc1e1616f4b767b8c089dd7db88696761e71984072dd8880489aa0b27aff10a632159875eebc8acc55ec96038471f1885aba2ca0a48cb522fe69ba64c9
TLSH
T16501E1DE1D034E46ED410274643CA84555B502DC4394770FE3BDD126CC9A750BD41594
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592d50.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c25285b0-0820-4373-b90c-b7da29e72a5d\index-dir\the-real-index~RFe592d50.TMP
Size 768B
SHA256 53f1b9a2c778212964ad7e5c09292c605172c84cd115f00db4925beeb0e5dc2e
MD5 afdc66b525459e930f2586cf135673e5
SHA1 47b31985d95842bfe2a6640ecbee573605e5825f
SHA512 4fc8fa74e400a6af84d00124fd8092c4abb5ad90987be30b877806891b5109f60202a32acdb4ac86422f7b91e8f656a27102af4348448c8a82f5d8e75e3bb764
TLSH
T15C0120DA40134B83FC000371DA3DA406216641889390774FA3AAA026CC52780BD83EB5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 624B
SHA256 5c09a348cf92f024890e110dba2ac871eb225fa24642b527582ef623b4f37bf6
MD5 e215ab9cc93af0e3e3277016fb5a8393
SHA1 3b3e9af857c74edc747f03aa79065672753666b7
SHA512 ded2146a04af50335309fdb251af63138f0d7687544dccb04f25bd047240580b7253abd59a72faac0c909823650850250ce16831f2db83604a9c7e859f3c9952
TLSH
T11EF0A6F73EFB2C00BCAEE3D5303509B40429BC48C418BE4F8066B29290B272A715CC72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 619B
SHA256 48599325bd3ac19c4d3ad4af57e2ebd69f3311f585b6950256c41f3c3506bdff
MD5 9dc7bc3d24525cf965dab75720a8e527
SHA1 08e86bf20cc084de977ea62943ac2988ad8569e1
SHA512 f5a0cb2a9c35c8f8fa16888c6dd0227883685c1ea4f718cd7602db0191b877a2c8a6b29754bb8c7223d9f52844054af44d14f25154cf9aefab7e5e830e19aa07
TLSH
T1AEF0ACF73EFB2800BCAFD3D1243509B405297844C528BD4F4066A29650B27297059C72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 519B
SHA256 b041c553f4e056dc8f0f9d88f81d77d901655f03e71a3ccb1af456dd69c4b177
MD5 3c7e3b0c2ca46bdd08a7f053de9dd26c
SHA1 95dc395dd952ac1775491ed6bbc4910376e0efbc
SHA512 120a4bbe0be6f180780598c755b59f51368baa96b9989ad13fc87a74fba5beb251c565882cd344328522b5e0b34e7ac8064fd450de2a9c2612df354e7cad869c
TLSH
T1B0F052F73EF62910BC6E93E1243449B48425BD44C818AE4E40AAA39221B2B6A7569D22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 fb140cd4d66b14586a8529066ea4d37e6f00ed9e65dc4cb65fc0071eb18112eb
MD5 b9e793cbd54ae07d048b0e240490312a
SHA1 adf85fa07673143f061be196054823258b04e948
SHA512 bcb139bcc020bda6deeb8baec1806fe53f629f93127382fde80fadd835dd74ceeea3ee64c48169ae5c2fc32e9f501c688384e10cd9d022258540120d54eaaf62
TLSH
T1EFA002F1C974D052C1110274B06913A6735E88AC0606625194FCD5548C7125E71A2128
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598330.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe598330.TMP
Size 48B
SHA256 af288392a763dbcd5ee07402d6d012070571fb9255d26eef0081a60f2dae75b8
MD5 7a167f7c3f6dd45eff3148254bcce3c8
SHA1 d0bdd023ff6021703cceb674caa44a0cf26cbc91
SHA512 9b1ce2bdc402f078d17da1a35af489835d88b7a337b6038522263cfb488ff7d20372565365785d161c5f9a7cbd0393a13a570af2eaf31f5574656830a77c7d64
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 09f2db57132bcf8b22fd82f084d768e2f0cb24c1b7c24c382d842c9254dfcd33
MD5 b49db2db69dd06ffa3d2538c8379d370
SHA1 d058af03345add86f658404a603e7f1db49b5fda
SHA512 dff3e249626af125f8dcac56300659075133c8461e9304467a8bbc9d0c3e44ba1efa2f86a10e1126b36fd834451b3a421cc531e57a654dbcf4f9887e70b2c0b3
SSDEEP 48:K0mIm10JF3jXYbLuLISdYK991vYxdIY+vF1yLmBcAeEE9bI/wISY9K981+9xWtYV:K0mpukKLCm2JiKSMpwAK96N
TLSH
T19191D15132BB025079BE255C84A4876F528132B33059EF2BBFBC0461CE6BE454DFE9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3b90f05-6a86-4d76-8514-890befd3c1fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b3b90f05-6a86-4d76-8514-890befd3c1fa.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 655248a6383a25e076ecb744f2792a60640c34f4961ee3e973a22f6fe9f095c8
MD5 bcae56b51cced56f05bb4b6ec880ddf4
SHA1 7dac81a277c785ae086e789ceb2d2a006b5ae799
SHA512 29060bb1708b27327c96278c7f2b74648f08e01a476028947f98f5f5d2445904cb00a1d96127a622c69dbff24ecb9a3d30164bc43d437373f6c347dc711aaebb
SSDEEP 384:9ZcIhsNVDT2KuZHD0T2OjTVYudkG8+/JtgOIwZOyFtoI:lhsuZwTNnhl/JXsW3
TLSH
T189828D3698781D7B5DEBF105F58B36038FB88067EAC97BD095EC9B1D01DA5A8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 20abeb6c1c43c866f008253459e7923ad9ec7a647b48c9bb0cdaccb17d8aee95
MD5 c127d965db8cc2d6e78efc5ae2758da2
SHA1 6ad2593b2f0239bf40960b4423a03a8450e439ac
SHA512 c503f848586a7e81eb881c2000cb876ec156492c27842b812d7580d01c7cfc5b9611e077d9c5649d222d7a80c321a22ce6ab7e10702c2ba6d27d4b3a22dc37af
SSDEEP 384:S0iFiZcITzsNv8TUNTUlIlxT2KuZHDHGOjTVYudkG8+bJtgOIwZOyFtoI:SPFQ3iwgTuZL9nhlbJXsW3
TLSH
T1E9C23CF648E7497AD9AE9703A77D2D038EBCC057F585A690B7984A0CCC961BFC306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7daad90f0c8fc0df9b174df8edbd7d99283ea39205505df08172e2163321d572
MD5 b647a81ff5017db855594690444447cc
SHA1 49dc366e6567e92ca1e97068ceecc5e12f9f4509
SHA512 dabe186d35973a366953af8ef664b3052c4a4409330d46745564c0cee3af202b8ebdaa46afd31e3396a802cd184877d20a22b246ca5b495f512d8e204d790387
SSDEEP 192:SONU6ygpQmiUyE/tOCTVgvR+FdV6R0ozP/GU6:SONU6lHZtOCTVYudkGS+U6
TLSH
T18C02C735AC683CBB8DF3AE06F48736135FE8116BEA952B94D6E81A1C00D765C2346C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d9e264f446fb5bd59683f425b622f25babf4b810cc429c556f09cbe243a98ab9
MD5 6efb13d7a43e446b24562a441deaf095
SHA1 48b96a6b7f47b2fa70c7c02ececa0dcfc304e360
SHA512 0020524f5f82542e7b17db15f58a0e9b95542e9eab500cb7568101f6aa356e57f3ec39bfda365976486c338caf22d04296d0dc6cc9afc6ae40b1c9656ad4f5ac
SSDEEP 384:5ZcIhsNVxT2KuZHDIGOjTVYudkG8+/JtgOIwZOyFtoI:RheuZ89nhl/JXsW3
TLSH
T11F827E3A98781D775DEBE105F58B36038FB88067EAC97BD095EC9B1D01DA5A8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aab35be5d416502be0d84115235d3a78cd2a1768a9e1e6aad5eaf1296e6f5051
MD5 e1bc701d58dafb4b96ed7a03d39aed27
SHA1 32d16417ad30b63d6978bd3a0c637dbb98afe404
SHA512 24392c1b36a735ba040ed13b3c3cd0e9523b545d7532fa1105d1788c1317d3088244d905cfa1f74516d67e69cbc5a5b15e0e73e551f837768fb066fa8a47bc6d
SSDEEP 192:SONQ6yNQmiUyl/uOCTVgvR+FdV6R08dMP3UY/8U6:SONQ6kKuOCTVYudkG8+cJU6
TLSH
T189120935A8786C7B5D92B501E48735039FE89167EE897F90E5EC1B1C01EF6AC234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f8150b9ca827e41af4eb7585d4773445b3e0244d6dde4ecb927973ebc3e576ac
MD5 5edc3e5bd5e5826a149b2b087c204cbb
SHA1 ba3da62c98e2dcc35e22edabd00f80789cf7efb9
SHA512 d65d32c81eb002b5cb95327dc34171951d465e1f81c447e4fd454d75fb569141d488e46fe71c39c09ea09bc07b0748d4c962e1c4283d9dce7ee98216db3400b5
TLSH
T191E00126931400ABC078133211872B642BF7C06106B347465E2005AC2D233402F31B90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fb8c5831f6a9f1a5c43cd6f99d5a320b9ef942f0dc51aa7cecf51363da227309
MD5 d41a00bb97f0b257308ebf882fa9f98d
SHA1 d30aa94da85a0da48728f0fefb1c9c0a7b94847c
SHA512 1e1787e0a0dc34e62c0a040b5a292e1f71d4cf464632ed0d07d124a828f4c072d0c0ba19349e9e51d5b8425fa2253815699d6a1633af5edb73c2d2b0552fc6b7
TLSH
T16EE00112930000BAC0781331018716242AA2C06106A242465A2005A82D233402E30E90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7b7d673eb043c7d6041fb556a92a6ad715ea826d43b349c2ae388e62042ee41e
MD5 252eae9bf634f9f532872b0674f0fae7
SHA1 d4e550cca180f56acf427a046fb695740afc79bf
SHA512 4ea41ffedd5bc8fc8c24d71c56d49fdf41a54ff43751d4aba339f6d322d34a6d6abd8ef63bd334da14fd1ca450ec94d83921a523e8bb365ef044c9bc70a3e769
TLSH
T17AE00136931400AFC478133611872B643BF7C06106B34B4A5E3005EC2D233402F31B94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe597fd5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe597fd5.TMP
Size 392B
SHA256 b5b8bd04b0cd9a349cd3c4fbe9e5a808e3b7b6bcaccfae3389a760271f219bcb
MD5 ed3b439874df57798f0d20a9b1e38256
SHA1 65a2c570b5d63e6afcc47da7bba671d0a5e35274
SHA512 9a9a5eed334ab38e5c6d5d87f1cf70cce66df45b7392049bb1a5d04acd81c33e5e931c3838f580464655e40d1f92e92c789ad81dd5b2605eeeda48142fdb1f82
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 812c7e865c05116360479627cb0a3f32fe9d19d1258311c7efefaa08bce0e0bd
MD5 a4669edbfc9dd466f974d75ed10d6cea
SHA1 db491eae1d2e9b5da425fdd570426cd0b5c9387e
SHA512 eee78ea990d7b460496785dfd0366fde4b21251573bfc1b4afe09d5853004f475d53cff25bab31e654b5f4ca6f85abc892c88d6892b3a8fa3f750c84d9ef9a87
TLSH
T177410B58B6F91148B3B76E169BF7A86E483EB8771E46D49E10100E5F0933B40D972733
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download