hxxps://na4[.]docusign[.]net/Signing/EmailStart[.]aspx?a=12aff67b-d9e1-8dfa-80d6-d154f539dd04&etti=24&acct=a6975ab5-7b93-49cc-bbff-0503499e74aa&er=9212d2af-6446-8b0f-80cf-38c692805911&ensd=OlmiHSbJ0eI9ZkG%252fXULDagw1z6MoGmXryvR%252b89kR3Jb%252bO2%252bYjhqbrRSWNwArY0CBLtt27K35e%252fSUvk8k0vvGMG8X%252f5Vd5xmbOCyNpCRDQFYnucDGtxZ93AeRS%252bFaMdippIRAMiKPsA2uLLld7cWL2RxWAuORH961OYx6v1kCUJo7%252fzhKNoKNYgSatW5GdG8J

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 03:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://na4.docusign.net/Signing/EmailStart.aspx?a=12aff67b-d9e1-8dfa-80d6-d154f539dd04&etti=24&acct=a6975ab5-7b93-49cc-bbff-0503499e74aa&er=9212d2af-6446-8b0f-80cf-38c692805911&ensd=OlmiHSbJ0eI9ZkG%252fXULDagw1z6MoGmXryvR%252b89kR3Jb%252bO2%252bYjhqbrRSWNwArY0CBLtt27K35e%252fSUvk8k0vvGMG8X%252f5Vd5xmbOCyNpCRDQFYnucDGtxZ93AeRS%252bFaMdippIRAMiKPsA2uLLld7cWL2RxWAuORH961OYx6v1kCUJo7%252fzhKNoKNYgSatW5GdG8J
Sample260620-dn95lses5x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3792	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134263986427340431"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{0F2AD512-C85E-4704-80DB-90B7354AC3A7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe
1500	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1500 wrote to memory of 4000	1500	msedge.exe	85
PID 1500 wrote to memory of 3792	1500	msedge.exe	87
PID 1500 wrote to memory of 892	1500	msedge.exe	88
PID 1500 wrote to memory of 892	1500	msedge.exe	88
PID 1500 wrote to memory of 892	1500	msedge.exe	88
PID 1500 wrote to memory of 1652	1500	msedge.exe	89
PID 1500 wrote to memory of 1652	1500	msedge.exe	89
PID 1500 wrote to memory of 2904	1500	msedge.exe	90
PID 1500 wrote to memory of 2904	1500	msedge.exe	90
PID 1500 wrote to memory of 2904	1500	msedge.exe	90
PID 1500 wrote to memory of 4684	1500	msedge.exe	91
PID 1500 wrote to memory of 4684	1500	msedge.exe	91
PID 1500 wrote to memory of 4684	1500	msedge.exe	91
PID 1500 wrote to memory of 4764	1500	msedge.exe	93
PID 1500 wrote to memory of 4764	1500	msedge.exe	93
PID 1500 wrote to memory of 4764	1500	msedge.exe	93
PID 1500 wrote to memory of 1780	1500	msedge.exe	94
PID 1500 wrote to memory of 1780	1500	msedge.exe	94
PID 1500 wrote to memory of 1780	1500	msedge.exe	94
PID 1500 wrote to memory of 4204	1500	msedge.exe	98
PID 1500 wrote to memory of 2104	1500	msedge.exe	99
PID 1500 wrote to memory of 4204	1500	msedge.exe	98
PID 1500 wrote to memory of 2104	1500	msedge.exe	99
PID 1500 wrote to memory of 644	1500	msedge.exe	101
PID 1500 wrote to memory of 3488	1500	msedge.exe	102
PID 1500 wrote to memory of 3488	1500	msedge.exe	102
PID 1500 wrote to memory of 3488	1500	msedge.exe	102
PID 1500 wrote to memory of 2432	1500	msedge.exe	112
PID 1500 wrote to memory of 1764	1500	msedge.exe	113
PID 1500 wrote to memory of 3988	1500	msedge.exe	114
PID 1500 wrote to memory of 2096	1500	msedge.exe	116
PID 1500 wrote to memory of 2096	1500	msedge.exe	116
PID 1500 wrote to memory of 2388	1500	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://na4.docusign.net/Signing/EmailStart.aspx?a=12aff67b-d9e1-8dfa-80d6-d154f539dd04&etti=24&acct=a6975ab5-7b93-49cc-bbff-0503499e74aa&er=9212d2af-6446-8b0f-80cf-38c692805911&ensd=OlmiHSbJ0eI9ZkG%252fXULDagw1z6MoGmXryvR%252b89kR3Jb%252bO2%252bYjhqbrRSWNwArY0CBLtt27K35e%252fSUvk8k0vvGMG8X%252f5Vd5xmbOCyNpCRDQFYnucDGtxZ93AeRS%252bFaMdippIRAMiKPsA2uLLld7cWL2RxWAuORH961OYx6v1kCUJo7%252fzhKNoKNYgSatW5GdG8J
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe6be4c188,0x7ffe6be4c194,0x7ffe6be4c1a0
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,6425698017973926162,15962818597947591093,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,18117527200762706580,6181435844232954118,262144 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2452,i,18019748924829548089,13646595646788629554,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,2776716558311608000,6405167472788044278,2097152 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,10073165000248504780,3921136200824316986,2097152 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4132,i,6943431543572679315,3675301677441582379,2097152 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,5856543179606438752,5390374972149108381,2097152 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:2
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,18409676992272765269,12579840848876073746,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,322068946453000631,4931243575623515012,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,432988036314950691,14680690314090294092,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,432988036314950691,14680690314090294092,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6184,i,1157547173384993068,7428916004963364279,2097152 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,8648138258606041610,2609501942336536318,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,8068804678095181266,9820586796054304984,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,5026954971899061152,2321952043741465574,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,3948550193527001029,3819313067600879057,524288 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,3144029516994249373,3474457649647175016,262144 --field-trial-handle=2168,i,349574116151500238,11627302741549642612,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2388

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec09ba5da501666cac506a8e17a37a0b19f2d9712ad11c5ba4ad14b3ce62e7db
MD5 e1404f4875306f456785e26a92aed547
SHA1 053db7b2ab0b6a59f2b44973d8f1751505d230ac
SHA512 a6ccf97239d40b1773848dd7f6ee31e91a3f8b90e05f43c6d7b13ead4ba9896a88cb2a9ebb06880b10b5223c52e29e192ba9e6e80528cece8415c817c164e52c
TLSH
T137D09B203A88F441CB45017195049F553B2654542057DA0BE165585D5CA51D493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0c2d3188dac9bb9154d682ff31ee9b457885d03d0dd2570a5f15506292190fc1
MD5 dc76d38b68fdb6a95088145a83a70d03
SHA1 13ea6784f23abe1cd23a3417c5d516b9bdb02285
SHA512 2e09eda8254c2dd2b37f237b4ebf95518cfb61f067195f1f3379589c597fecba049549a4dbd0b9ea81b1525ee742b39c3e1d505120d9322e0a4a76e48e60ac79
SSDEEP 48:IJgJWuedpUZ3WCQ500pdpopXsH95zSzenDA22W8jUdJYsj:I2JzedsQ500pGsH90zex2nUoM
TLSH
T1529191E8E3C217A7E76408F1F9D19A47BF3189C949438E221E5004BD58A77E2F52BC88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596fd7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596fd7.TMP
Size 3KB
SHA256 836b10a128ef808dea04d67818cb1bc1b0c80a9f01214b5f8814d30df703e0be
MD5 5116ea2560fed1b4585c49a1eb777580
SHA1 a18ca80d56e2e732a3c90f61672c1f0d558060eb
SHA512 2b3a6d8f39f86306c5aa0ab6d5404e4327509ab79b65f4d2866405deb9ac208cf036324dc7229e890273e3d4155564ae07bb644c323d490ee8411bbb00a12c45
TLSH
T18F612DF4C1C20787E32014F1F6E016537E318AD65A439E662E6049BD98E77E1F57BC88
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\000003.log
Size 28KB
SHA256 b83ff1130acb438b2a6e508c747d6e54705dfc1bbbde457228f0f4133c1268a7
MD5 d55df3d1e48fa31628705335f1f307dc
SHA1 61acee520705a2d71d33c99447feb97f8d76ac6e
SHA512 110fca488ef3a886a4a3c04c5a3aa97bf31d5153e44f2b176d66df22d53f3f07eca2fa9a7d4b9dda309a0bd9fe2b3c8b29e7d44212658c133f77a285489ebebc
SSDEEP 768:nuCQ2qd2RJ26y0t27W0A0b0s0s0s0h0y0Y0r2Ww21i26D:SrdKJjy0tCW0A0b0s0s0s0h0y0Y0r5wZ
TLSH
T1C7D2512979F91628F3B65EBD5A7607806876FEF9EC91CB185020254C4D20B90CDB3B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\LOG
Size 355B
SHA256 084a27986a74c4108377860e2770934a9334837d2c7faec74c79bba3f7b83009
MD5 4d92e5d9152a8fd5b8175a6291dfe90e
SHA1 f84dc687bcc3d751f7a93fab48d008efa52464ac
SHA512 64619ad283f07f452a53d95b005d431da6883601357d3e7faf307edaa7ff0093adb5410c81aa1fb04d7af8acbd7bba2f5e6cedc459c84367bb160471e473b510
TLSH
T15BE0D87CC4D9C32B9654549A1A247F4AD5F7A50F97CC7E491E08DC0C7286044F66D552
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.docusign.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 942b7ea949cd83a1f7f61d0e23f1ddd67c2f95a30dee5541338107b747d8a902
MD5 84fe97406b52c1bdc3516933bdf93808
SHA1 7230cac8d5546aed86dcdcec0642f86b82655453
SHA512 506e3955dad6008461a2df6615e5ab6836cce2b96c7e8fe8ee1ada335f35876031216fb6a1f16992738ed0341d2ac33dfba9dfc16f3df745495fb4a37e25646b
TLSH
T132316BF383E4996DCD1152F46B256E2ACE1D0911532C3C2AC9E8BF1793E2474E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aea5573bdf4743decb3ae4fa71959e74312d60f4cecb7ff3f80f4f8eff7089ed
MD5 6b1f6b3fa88c9de8ab34553ddfb4c2b1
SHA1 08e54d1528df8c6292bbb21645456cfcb1783a72
SHA512 b0baf8f831674a42a6f07c748ca536e2da757705b2177d9f433cc075c17fe939980f9701085a2134f7be48313e3585c89a837d32bcfe8899f453af36e3c3dc3f
SSDEEP 192:sxZERyyM/jK1Ml8Mkb/f5s7VSTIdpMRIHW6+WNE7YM/YLNouJIgrJ:sxZEkMb/f5s7VSM3HbS/i9
TLSH
T1A352D8126B345977CCDBD609F945BF53D6F91972A2900E84AAFC8A0C04E6BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7ebab70c55cadd956dc6a537400de6ec07c93c553dcac57f463cc34f9e8a6f8a
MD5 967dc83889afd5914ca92040067c6512
SHA1 cc052ec0e69d575ab032720254a445e0ffcaf601
SHA512 c389fb23c076f089168deb44b6e44c579c21f753712df528fb33e09592e2abf8ba03d0b314b9d136ad09bd5c155988dfd469fe5144ee74f09c0199b73577a484
SSDEEP 192:sxZERyyM/jK1Ml8UQYkb/f5sy4STIdpORIHW6+WNEqsC3YM/YL97uJIg5gLJ:sxZEkq7b/f5sy4SMZHbfn/30
TLSH
T1CB52D7126A345977CCDBD609F945BF53D6F91872A2900E84AAFCCA0C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d8a3d0c97f81e1789360aa4aa47e6b381b83aee7ebee430cc9346f242e70675b
MD5 fdae1bd4271bbef27a84f86c5f40436b
SHA1 82c0157f16df3e121ae210b2cc7ccad044310655
SHA512 e4a535798dda51c9df1e48cab8cec65d0e6a60f0e358e87d492f11f9c13242d6a6dbce708d22cb5fa26b6fa133a4936afa502b8b7c782720dd6755fc75da1f33
SSDEEP 768:M2s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJN3roF5:M2s6pD1WvxzWju1jahILIsNkF5
TLSH
T15CD2FA3B680CC77E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\551893a8-c073-4b3a-acdc-fe55b5eba629\index-dir\the-real-index
Size 696B
SHA256 8d3268f1c15e8b2ad533beec0d64d0af324b8f4dedc6e00931c77f6bc3d5c9ac
MD5 c308a0f154304c7fbea8a66c04f60c43
SHA1 c1d94ebe3a3bab012c65258bf6cb4e69a260467c
SHA512 b16af131e30bf61a2a20eb4bb13cd6f964deb834262b7408abb4549224ad4ee8664082806b20c778c077ef985b3a4f22404104f4731dcb312c32fed648da34bc
TLSH
T144010E509781A4C6D010B1BE8D28690D3FFDDBEB0B8447272019C0F193940094949234
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\551893a8-c073-4b3a-acdc-fe55b5eba629\index-dir\the-real-index
Size 768B
SHA256 fff452539a1aa8c04f7029a708cf128215e24b8c21d41eb0171d5d844f73dc93
MD5 57123a46fddb3845ef0d570c50632238
SHA1 6ff349b9046846c3f6dbd2a7cdb8eb047b706769
SHA512 2ba751159d11f3f1e5b082ed23536692f5d4482268f89f6368a708b4c20c3660da17cdd16c35aee36eea7df17084571afd5b0ab18de006ff6d10e59a4799e67f
TLSH
T18401C090974195DAD01471BA8D2835093FFDD7FB1B55562F2019C0F1A3941095A99638
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59188f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\551893a8-c073-4b3a-acdc-fe55b5eba629\index-dir\the-real-index~RFe59188f.TMP
Size 48B
SHA256 0433d219f79de3fa83f0c5587bd2bab7404fc4a2b4e3234757f8b5d9b01f176a
MD5 6034ced0f9ed4991113579c4f7d99f01
SHA1 39bf50459211dc2d64c81bacd30392939ab7eb11
SHA512 f8263cf77e33c92b8e1ff0cfad658bfdd526044c4e166c5329f1cdfd84e4a7e5fbddf0a6e1911051b54e928bcf56f75766b402792aef4af86180cbd1c63f28df
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 181B
SHA256 72ad16f36186cf90ae9ff5d3a560714bba2a7b30151e70cfc2eacbd23cb57988
MD5 1445daa3cdbba1b797e4f2128a5b4298
SHA1 5d9f92103de7ca0b89097840730b114298ac8886
SHA512 d7c10d21643abea8960eed4f394ad131b13a1ae0bd7d74cf8d47e6ccb454422d5699216ce13a020ab0d34ea73518d6d90c90a527dc395f934b89e0aa0a806eb1
TLSH
T1A9C0807E08A257726DD161F41F82578DC04364FF5DD1CEC1544D900152140315E5BABF
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt
Size 181B
SHA256 e89eaab3d312646d0d3d6dd41f49db399c1619029893ee2db56fec88c8ff353c
MD5 79d9e3b8528fa3ae23c1ba5f54ee2c20
SHA1 a96f399fba4002c04961f163daa84f33770a8574
SHA512 7be702bc8aa8bab9a9f562a51a13ddf96cff6487b26d6f6f70737249326c222d42b44d9e6b6132ce6229ff9b2a99117508f24bbcd4fd4480f23edf5c96a6db95
TLSH
T12FC0807E08E55A726DD171D41F8257CDC04364FB5DD1CEC1544D500152140215E5FFBF
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5918be.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2a781e0c58e5415baa08e1f71cc96ac7429ca05b\index.txt~RFe5918be.TMP
Size 186B
SHA256 4bce28b43f3e623374e0422cd1cfa103777d10a455f415d4d80b5f298400071a
MD5 37d09837c10690d228ab4100baf2d3c4
SHA1 3dc4dc3937369bc431cb9e6834f60baed68b88d0
SHA512 24c3bd38199ac78b3015f79fd62c50f110c8094ea672cf3813e64cac967a2a39f5603f85344cba37e9252a84eaeca74de294d5c25a7c40568d39987690ab71e6
TLSH
T1ECC0127A04A156626ED121D40B4157C9C0426DFA5E81CBC1544DB10162341215A5BAAA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 ddd118b32b9c3af3fe96d3218257db382e71983d157557ba8d0250cd5317936a
MD5 6fd8797b3dee7ae1df3fa1ee479fd4f0
SHA1 011b8eeb580e7e274e9811f4fed90c0c1c4f7117
SHA512 29a4a9ff4e613bf0bdd119d0475b00037aa031ac026816ed373899462eddb2cc99a96c39873548aa2035a27904196a9852628537a7f356a15f1effd1f150f8e8
TLSH
T1E8A022800BF80200C030033A088000803B30C80300020323A8A0C8CC8CB00800C02208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591042.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591042.TMP
Size 48B
SHA256 c6ec58783a85a4a4911c455941e2fbecb39b83c10c3252f9be92fcc95b67ac2d
MD5 1c4eaa9af91822f5f014fedbbc40c7ce
SHA1 eafd92cbefec57c1a9573979d7fb14caaf26a0a7
SHA512 57553b580346a9bfc95f99f752719ae53dcd74669b35d60fa28c2eb00bbe85ff2d9c66bb5bc7d0349767adb47daa1f9f74f4e69bf39bd8af02209ccc31770ab6
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5e264dea714a0d1437960b3bb2922521fb64a1d2f04889ba33de851b048c7504
MD5 694f26baa83e651aa48bb18bce39ff05
SHA1 7e3027e4a25f7e8573895b0f99eeefb1684d7728
SHA512 c138420b3d1a2abdfef520793d6cec159ac21f51f19374b03b60f69f550056d72e645d47f92ff2cc34f3799214bb3ac2cda9124a16f4b64e5e5c1b4ed646fdc5
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyqwF0AO6egaCbzInogKA1oGgk4whLmQtu:KUAAKtePubCKs8e+nCKQUTr8PbBN5MRP
TLSH
T16191291232B703026C3E690C979597678E52B5A3702CA42B3BED40B25D67E208FFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1460e07c-05b5-4b9b-94fa-57820e5000ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1460e07c-05b5-4b9b-94fa-57820e5000ab.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 342668231f62404b138035a0330b5cb536ec5d4e9d75b77a7ac7211d6dc6a8e5
MD5 5cf655e9f8493bc2aaa1449f4b0b12a2
SHA1 b559588da20fe60e8de52d7ae575988636efa870
SHA512 832ac38adf7d7e14189f2244dbc3348024011803befd7616b4ada18792d1d4060747adb4b3637b808ec4727c90d816ca61ce0103e85fcad34b235e1b2de33ca8
SSDEEP 384:AtNn/s3n9SfsNG3VCsbQpa99dFMsOMqAVITGT0Icx9s:Aj+9U/4cDaAVi+0lvs
TLSH
T18C928D325838AC670DA29446F54B36171FB449B7A9C53F89DAEC5F0D00DA7BC134AD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 9be45b9829e851f67574a9edb008fac6c60a031cc5cb93205651126a793a8b74
MD5 e644e7cbac06c344831fd23079500f3f
SHA1 0b5b323bb7dbd100ce6799d83e0f431e7bc65df6
SHA512 d4a902e6d07ac76f0e50b31e14f41e5d29776486de89c4b11451d9c67aa666adbae7a405071f92f06ca631575d42b7c879bd41077047a33af2b554a9fbdb58ab
SSDEEP 384:liF1tNn/s3n9SAzsNG8TUNTUlIl+VCsbXpa99dFMsOMxAVITGT0Icx9s:sF1j+97PwgyfcDhAVi+0lvs
TLSH
T1ADC21AF248E78836D9AE4B47B73E2D174EBCC067B4852A44B7985A0CCC962BFC346D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 008c9366948c758b484e0177d7c76ef4e0f428d229301f3af7fdb1195727804b
MD5 2d88228bbf4b07b86ec2787cb42e97f7
SHA1 8e14332f0e39f4de1d32c7f774bbdd8b8e8d3f9c
SHA512 1415e429bf6dce18e76f223829e6c0cfc4d57de4bce28ade18c2ca4da44f048a56e98d9fa489b4d201d7f08b071b5be628b7c54083fb9f89c0c1dd3e0fc2571a
SSDEEP 192:qONC6O7+3hQmiUyG6Gttb0b+FdFh2SgGA9PU6:qONC610Gt99dFMEAlU6
TLSH
T1C002D8356C786CB74AF2AD09F5873B135FA5113BA9A52F84DAE81F0C00D766C2346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0bf328a55caccac21da2b6b3bd65dd0d08409460006a79e2acb75108985210e0
MD5 bf08169c3cedd6cf3f085f8601e94029
SHA1 b3a54bdfad1bc9f3852b693b7e6fe562ff0d024b
SHA512 17f1b9b4b21c9f253bd1145c9619f02797243f414a8c8772517f7d34ee236bd68c3371f2a4ca4e2779e5d461d22ec359d996bd88a55cd2e143e684e57876ca4e
SSDEEP 384:ntNn/s3n9SfsNG+VCsbQpa99dFMsOMqAVITGT0Icx9s:nj+9UC4cDaAVi+0lvs
TLSH
T114928D325838AC670DE2A446F54B36171FB445B7A9C53F89DAEC9F0D00DA7BC134AD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2e2563834c24719d2ed2666be950e9e26e293c09f265859d8f599e2b4144d039
MD5 1b1fe164636a84bb58161b96760933cf
SHA1 15ddaf6020944f451502e78ac661dbd131ca3a52
SHA512 99f3d907891b9ad9b4f98d989e6b63fa5d357979ab25075101024be4607a6c1e5c2d1b401a18275ed0458a79f406a0c04292f6e210f611a221a816b4d3de4201
SSDEEP 192:6ONv6O7+3FQmiUy56Lttb0b+FdFh2lSOh2l3cNAtqe/U6:6ONv6RlLt99dFMsOMaAVU6
TLSH
T1B612E8316878AC675DE3A945F48735135EA54237EE9A3F84E5EC1F1C00EFAAC134AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 76f88c51ad408bb8bb91b48fdbebd2b1d15d4af7f75a5039e4d0eb698ac04d17
MD5 fbb237443e7d8ec13c29c48b5cd34590
SHA1 8cc57e2e89e6ce6e11ccc8a12ca1ccc19fc027a5
SHA512 b4b6111f5d0fb2895db03921c187a5c7c147c1e6fa48d5549f053424d3e4b37694c53fab92f6a82f0a4f6a74495024c67315e1cec55e1e61a7ba34faa3a0d247
TLSH
T1B5415B58BBE91148B3B76E1AABF6A86D487F7C372E46C4AD10110E4E0623A00C961B37
MD5 SHA1 SHA512 TLSH

Submit Download