hxxps://s9m8g[.]mjt[.]lu/lnk/AW8AAJ9-Wn8AAc6cU2gABCvJXvsAAYKKfB8AoweMADEfGwBqOf5JcHPGFp2RRy-sHrbNFwqp_QAs44w/4/TfZyu5gjhrHBxtOgSI6B4A/aHR0cHM6Ly9mb3Jtcy5vZmZpY2UuY29tL1BhZ2VzL1Jlc3BvbnNlUGFnZS5hc3B4P2lkPVh1LWxXd2t4ZDA2RnZjX3JEVFItZ2pyMlR3N2kxVXBGcGJPX3VoLUk0QmxVUWpJMVN6QTNWbFJHU3pFek9EUkZTRTFQUVZKVFNFVTFVQzR1

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://s9m8g.mjt.lu/lnk/AW8AAJ9-Wn8AAc6cU2gABCvJXvsAAYKKfB8AoweMADEfGwBqOf5JcHPGFp2RRy-sHrbNFwqp_QAs44w/4/TfZyu5gjhrHBxtOgSI6B4A/aHR0cHM6Ly9mb3Jtcy5vZmZpY2UuY29tL1BhZ2VzL1Jlc3BvbnNlUGFnZS5hc3B4P2lkPVh1LWxXd2t4ZDA2RnZjX3JEVFItZ2pyMlR3N2kxVXBGcGJPX3VoLUk0QmxVUWpJMVN6QTNWbFJHU3pFek9EUkZTRTFQUVZKVFNFVTFVQzR1
Sample260623-e24enaaw5w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1580	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266624331694342"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{9A9F72F7-ECB9-4523-A59E-5773051BA52B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 3224 wrote to memory of 5000	3224	msedge.exe	86
PID 3224 wrote to memory of 1580	3224	msedge.exe	88
PID 3224 wrote to memory of 4276	3224	msedge.exe	89
PID 3224 wrote to memory of 2780	3224	msedge.exe	90
PID 3224 wrote to memory of 4276	3224	msedge.exe	89
PID 3224 wrote to memory of 4276	3224	msedge.exe	89
PID 3224 wrote to memory of 2780	3224	msedge.exe	90
PID 3224 wrote to memory of 1364	3224	msedge.exe	92
PID 3224 wrote to memory of 1364	3224	msedge.exe	92
PID 3224 wrote to memory of 1364	3224	msedge.exe	92
PID 3224 wrote to memory of 4564	3224	msedge.exe	93
PID 3224 wrote to memory of 4564	3224	msedge.exe	93
PID 3224 wrote to memory of 4564	3224	msedge.exe	93
PID 3224 wrote to memory of 2956	3224	msedge.exe	94
PID 3224 wrote to memory of 2956	3224	msedge.exe	94
PID 3224 wrote to memory of 2956	3224	msedge.exe	94
PID 3224 wrote to memory of 3508	3224	msedge.exe	95
PID 3224 wrote to memory of 3508	3224	msedge.exe	95
PID 3224 wrote to memory of 3508	3224	msedge.exe	95
PID 3224 wrote to memory of 4952	3224	msedge.exe	98
PID 3224 wrote to memory of 4952	3224	msedge.exe	98
PID 3224 wrote to memory of 4952	3224	msedge.exe	98
PID 3224 wrote to memory of 1460	3224	msedge.exe	102
PID 3224 wrote to memory of 1460	3224	msedge.exe	102
PID 3224 wrote to memory of 1676	3224	msedge.exe	103
PID 3224 wrote to memory of 1676	3224	msedge.exe	103
PID 3224 wrote to memory of 3892	3224	msedge.exe	105
PID 3224 wrote to memory of 388	3224	msedge.exe	114
PID 3224 wrote to memory of 3452	3224	msedge.exe	115
PID 3224 wrote to memory of 1920	3224	msedge.exe	116
PID 3224 wrote to memory of 3856	3224	msedge.exe	118
PID 3224 wrote to memory of 3856	3224	msedge.exe	118
PID 3224 wrote to memory of 3208	3224	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://s9m8g.mjt.lu/lnk/AW8AAJ9-Wn8AAc6cU2gABCvJXvsAAYKKfB8AoweMADEfGwBqOf5JcHPGFp2RRy-sHrbNFwqp_QAs44w/4/TfZyu5gjhrHBxtOgSI6B4A/aHR0cHM6Ly9mb3Jtcy5vZmZpY2UuY29tL1BhZ2VzL1Jlc3BvbnNlUGFnZS5hc3B4P2lkPVh1LWxXd2t4ZDA2RnZjX3JEVFItZ2pyMlR3N2kxVXBGcGJPX3VoLUk0QmxVUWpJMVN6QTNWbFJHU3pFek9EUkZTRTFQUVZKVFNFVTFVQzR1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff9557ec188,0x7ff9557ec194,0x7ff9557ec1a0
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,15504608454145525960,17449651056817216422,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,17380178430949695675,9577748802600315834,262144 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:2
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,1035808749748035658,2838167983258765122,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,10007322105666811974,407985022217471629,2097152 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,14768701872327971399,7408612217959056680,2097152 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,16436034530906090092,6443785504423358997,2097152 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,1828637292936050219,2212843358244815390,2097152 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3604,i,3358232809251828209,3796797542116128947,2097152 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,9428969423817618286,5877089878446476561,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,9046611340988039464,13720551972910220260,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,9652419524991839842,17100844310707421067,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,9652419524991839842,17100844310707421067,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,1677906008474388630,1747272660214420061,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,15215502027379454553,15373061015139813389,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,17472902087236588083,15639924590869828658,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,3300339293739407647,17920422756643164510,524288 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5952,i,11895690306351078436,2878708359434086887,262144 --field-trial-handle=2592,i,8575840515529518374,16983088059164354028,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9e80c466-13d5-4b24-8cf9-e9a5bc3aeef7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9e80c466-13d5-4b24-8cf9-e9a5bc3aeef7.tmp
Size 19KB
SHA256 6b7eac14296e9c08db853b0f37726a2b8ece9db0d1bbbb1b7ba8c9782223b829
MD5 d219135b55958ac17b3b1a8325b1cce8
SHA1 00ab941f352e4023dced6667f28741b06e68514e
SHA512 1481e347baca9ea290198fd3c4f4dd1e9d36ad31d78b1b8a016cf590c83c4161d4b6ef79b13eafb0b5ddbf8fb5c32ca1f540ac6683d7b2c925975348cb0d9597
SSDEEP 384:3tNn/s3n9SfsN3km872OzX5od+ROwVMvRITGT0I4x9c:3j+9UoCOwOEMvRi+05vc
TLSH
T13A926D339939AC274EE29096F54B32174EF441ABD6C53F8595EC6F0C04CA6EC231BE16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7c93b14687e0ecefbc1c226dddec7c50d391230701610a266562e90e8b66be4e
MD5 b0eda3fd2bd58e8b82288adb52302e28
SHA1 737b37d2acfe65dd1053eb5d848db014db80a6d0
SHA512 eb6a9d1015a0a6382ea6622d08a8a42dcfd32e13e5879de4c9211f41657a54d6df352a57edd388d86e10f2841c1eca2ab164324e722499fbd0d459e2013a3615
TLSH
T1C6716F6507523451F7EE3131A2D246CE7BF38C850D5FDF3742232BF52A267628A79828
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5878e4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5878e4.TMP
Size 3KB
SHA256 b76abd3d9ff06ddf3a80b7658a71b023978419e6b5f92f3ed5537738a0b5d230
MD5 16b31ec0750baac944a2781b7736ed9c
SHA1 1eef5d75db7cb472b03487290c62fe793c3e1edd
SHA512 ab722af256a6a7610152abf63b89e3a5b44812e9b976e23d80f24eb1805b04cb1224831540a0df201ced155b87f7f4dfbe571f64400317d2d9f98a501b9553bd
TLSH
T1B371626507523451F3DE3131A2D206CD7BF38C85099FDF3742232BF92B267218979818
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3b900dbc9474d20477ed0d20339d0b078b010f8c50d3c39bbebfb9a072da5d34
MD5 c3a0c43baff1dab521eb3ae47a7e2078
SHA1 ac6335afeee72af3ab57d015e4f65c2341c0dc2e
SHA512 7c99c80b5577cd889efe444cdb0e55372e5ad804460ea0c3969c75b3fe152b75a418165b5ca5f28020b4226abc13748fe765d12a62a22c9a80cb09125fd9b260
TLSH
T1813186F797E4866E8A1152F4AE19BE1BCE690551432C3C2A85D0AF1B97F34B0E011B1B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 07350e24ca7af4f77715a78ff8e8e9051f9d40300958ce4d63d2fd91866a069a
MD5 7bc71752dc8fb4bd70962e5fb851abe9
SHA1 50be44384591f5fdd1e104a63be35fd2418441ab
SHA512 9e24be68e612b8b0baeab5ddd47c58debe6bfdad31b448ed91e69d8124593de97abb269b304adfaa330c2f4ac6c6b58e616c59d375ce6b767f1505594cac6fe2
SSDEEP 192:sxZlRPyM/jK1Ml8MkN/fMsg1ludpZnbHW6+WNI0j/YH9ThnIgrJ:sxZllMN/fMsgXeRHbv/29
TLSH
T17652C6166A345977CDCBD20AF995BB53D6F50562A2D00E48AAFCCA0C04E6EED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 850dc7f0785a9d1ac39d419eff2c7e4fad377db529acd868216d6777ca3b20db
MD5 adc2878ade548079503344e627a8b81a
SHA1 4d2cedbbd3cae813849ea44df5657dfc527f4072
SHA512 6fd6403a0135236f512097cbfbeb5933018901c2aa830a2358e48987631d96df24ae0f0149d7bc1b60625eb8b5413e67e469e99048d27a6c8a269a8c11e2c07c
SSDEEP 192:sxZlRPyM/jK1Ml8UQ3kN/fMsW1VudpvnbHW6+WNI0j/YHl6tnIg5HJ:sxZllq0N/fMsWzejHbv/X7
TLSH
T16252D6676A345977CDDBD20AF985BB53D6F50472A2900E48A9FCCA0C04E6FED620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 729c5d6f6843b3d647aaa9c176a06218f80233a8584f9bda06f37a057c29d5a5
MD5 e94c0d4d54ed7422331bd9e549d89cce
SHA1 cf0af37330694b71f4495e2e9d8653fd677539c5
SHA512 1ac0841e321ba5ea720c303051663c66c369ca10e0c993f0b18e6c0939224fc01fe147b6112520662feed5bccf5657afbeab110e6240f89e2bde982f959306cf
SSDEEP 768:GFUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RVroVA02:GFUZYTMWvg0Pou1ja7eLZmRuN2
TLSH
T11BD20B2F280CCB7E4F844E5DEC266F963DD801CBAA984D5447EA894C03C76EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\c6bdcb67-8759-4d87-a860-a6ce81e2360a\index-dir\the-real-index
Size 72B
SHA256 c0ea09e6cf51cb3467edf6a0e64ed3efc9de02dbed7f3b0212c11a1bd1ecffa5
MD5 220a1bc22b25f437b737dbf975d8027e
SHA1 a36f7598b2acf420b2d5057fb98b16c861999bfb
SHA512 3a066031c500f454ef0c8d011b10ecd51d6bf0d31e07252b061e75c2b08c0dd3cde21f609ec4e394d0a5865933425160961a503dae2b3f74ae805efd829c099b
TLSH
T170A002A55DF504E1C04542F810521760733858650B160765C8EF8148AD56B628103434
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5863b6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\c6bdcb67-8759-4d87-a860-a6ce81e2360a\index-dir\the-real-index~RFe5863b6.TMP
Size 48B
SHA256 2ac303dd9c412494180286dd2079998d634eeb469e08e9f5eb54f713ea67ff3d
MD5 e95d8e81c6fff86a1034d0476787b296
SHA1 f4b33dc82fd4a505a05564f558469f7be0165cb8
SHA512 c38923ede802bc0d9bb9b58ec6de2c26dbdf43b4bb254f3a825f51bd2c48fc614692945a55e342878789f274c32ca438fbacac20f82f2ece449c9b5c5672079f
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\index.txt
Size 139B
SHA256 80db2bdc621eef7d997caa3dea16ba27be847bb5779b2ea7b1d30a8fe652ec05
MD5 3de2bc338c3928fd88118ff3db9fd16b
SHA1 b28bc8b03cb04fbb625aae9605dde9646d4893c0
SHA512 e3f5b1527beec046dcb4d58fcea842b2bcbd4679f44b2e8f1e91f2f1b1ce1fea5c49fc0ad94d64ce93266eb52a8d55bea8fb65733c1505503816770a04bc7251
TLSH
T169C02B738E3043A0EFA3CBC2848BA01DDC2B12CC0811406C4003840C9C004E285C7F11
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5863f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c67a00d9d1fe43239f2bf49bebc287eb867542bc\index.txt~RFe5863f5.TMP
Size 145B
SHA256 98e4de289e91b9d70a5c92eb3115bf90602e1c27e5e8c09bea82d1cda71036c4
MD5 1477005d8b961c0a19c7dd34c3239789
SHA1 7f0555b162a950303252fab91682c20cc1640caa
SHA512 ad3dd04618921503e2bd7aa5251066e02143aae43d0a0430e48bcdff1aa6ae6466349e377f312e50e9b22c9ce09f0ff71c48c7f9fb98fa9e7471ac4395c68ab6
TLSH
T138C08C738A3002A0ABE28AC3848BA009982B5ECC0801406C4003A408AC304A28ACAB01
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 f3a52c67a27a9bc67cc81e8a740f97c375723d69c81fda157d2c9ee6624f4294
MD5 761cd149d6e64ce31d88de79a1377e5f
SHA1 517e93491b9abb4256f8f8f981b87bf4770f948e
SHA512 97d7ac406e5a07666560c051269bc7346e04b4e586210bad2bdab27e86cf9fc9eeddc3e459f6ddb3d3954a7376da38bb57ca5a0a7f9bf77b8fefd67f2949da0f
TLSH
T136A0021D015401D7C0212675B64A81E4377088600BE3337154A511B4C8513C64133029
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586397.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe586397.TMP
Size 48B
SHA256 3fdc1afba3382f75f072650ac4fd3ca9d25917663cae06b71e1c5d6e579f61eb
MD5 d54b1febe4bdfbbb38e57da1f48e0b79
SHA1 3f760460c8e3dec6c687cc1880c4aa7d3a8a4110
SHA512 01f6c6751306e8e9782d8b077ec67600068015b0dced955884ebd950a6a66fda88d4d81904fa1c0c432f8e652047d279eb2e070d21feb3f4e879ab16f7092594
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ce049294affed66e6a92a1a787dee5470b99ee5a6d7b4e325d7bf5a8347e6e29
MD5 fde3cc43b8f371aee192bb5e331201d4
SHA1 76a87799902c81554bc19397dbe57828d66b035b
SHA512 36c3e89efbef2b2aab6a846082ff4933ad81de264d7718db6677846982a4825ba8fd1284993e9858d162058435700f43d8cecd52eaf9ae00640b49afe0fd344c
SSDEEP 96:KA1eK2AANKK2IKiSIK/KcGMKvqK2jWKcgR:E0RXs31Q
TLSH
T1E1D13B2270FA62423C7E6B04836497575E42F5A3301DA86B3BAC65B14D26E209DFFCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58f96e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58f96e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a7ca68b6b95eae9f1719a23421a7496ab7fd4e9aa04e8199e4d3c37441f0097b
MD5 0e55acb6ee02de5277377f958be9105f
SHA1 bae9642bda405169f3b419edea58d3bff14092b8
SHA512 3a2d59b9a6d809b42096d41afaddcd22e8d1957a1ab952962d1bba65fb51b2bd6dd9b83c3b11d05bc237f72c306b831b4ab90bd7b0113f6a30de98d466772fe7
SSDEEP 384:8tNn/s3n9SfsN3xm872OzX5od+ROwVMvRITGT0I4x9c:8j+9UrCOwOEMvRi+05vc
TLSH
T103927D339939AC274EE29096F94B32174FF441A7D6C53F8595EC6F0C04CA6EC131AE1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a1326cec70b4e3d48a582115f8586b5448a982bd8ca92d49331c9bde6171b8ab
MD5 be3c17cbb0ee3ce409ff50e242f448d9
SHA1 ccad4fe811ca312b67a9519fe80a3fa334535917
SHA512 1ebd52b535ad0629848e582d309945aaf2fca520d21aa6f1e11096c6e33df6517548e75bc265eff92909c1cd278fec4d5e515375b120690bcdd3545e26545474
SSDEEP 384:XiF1tNn/s3n9SvzsNJ8TUNTUlIlkm87yOzX5od+ROwVMfRITGT0I4x9c:SF1j+9sEwgzCOwOEMfRi+05vc
TLSH
T1CFC218F245D79836DAAD4747B77E2E064EBCC0A7B5816A80B7D85A0CCC861BFD30A905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c165f674f056c7750f8aba2cfe2694302c16cb00fefaade78b17400789b8f49f
MD5 7008d7b27910f151f80b53bc6483eb7c
SHA1 fdc8365b33d49292441a699afb257907aa92b580
SHA512 e15a5f2804340dbe9b4a3ef25457f60910701a4055b836e72f4744a8e5e42fd76e5007b9e719c3b775716c8e72905b5d5e7cb122fe28b37430d80fdf5888bef5
SSDEEP 192:yON261VWQmiUy9SgGX5Obd+jtOwaojD/a/3w4U6:yON26W1gGX5od+ROwVyo4U6
TLSH
T17002E936A9286CB78FE2AE4AF58737135FA52067E9542F84D6E81F1C00D769C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 786afc02986d98f2cafa5374bbf729fc3283482bbe8828d1dfd4fa9dc9fdd8c7
MD5 1eb9671594b6a55762908e25deeb022a
SHA1 693b03a682a11ba5fb6886861732cd85e330e171
SHA512 fc6966abc32893cfe2b0154a57690961283d81f055ea4b4313823c5b49c948a9ed9c8c332efa8205fb7cebd1c5c3d8706a156249d52cf4420555e66009ba0572
SSDEEP 192:mONi61vWQmiUypSqGX5Obd+jtOwaoj4EMjJjnqmU6:mONi6wzqGX5od+ROwVMxRU6
TLSH
T115120932A478AC779ED2A585F48731134EE55167EB857FC091EC2F1C00DBAEC230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a8815df9-2fe6-4d3f-876b-3467ff953462.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a8815df9-2fe6-4d3f-876b-3467ff953462.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 083a19fe7837d2df94f38ed660736f5d066d74e9d7b4521c8255baad209ab44c
MD5 e23ecab1e01b43d892b24b384154a579
SHA1 8c66d018f5587571debf532c8148b8390c35bfd8
SHA512 60dd3d2c5711e17d2bcb15ec4796414b72bddf15d5bc4bca2547790c01f5ffb49514c07a13304e3a5615554c12d80beb84fccc6ca320bd145907eb8e689eef8b
TLSH
T14F412B9CA6FC1158B3B76E59ABF6A86E487BBD332F06D49D10110E4F0626A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download