hxxp://cordenpharma[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://cordenpharma.com
Sample260623-vb93hsew2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4612	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134267070232476079"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{C5B76102-A744-4A36-8769-C29028DB4011}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe
2236	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 5084	2236	msedge.exe	86
PID 2236 wrote to memory of 4612	2236	msedge.exe	88
PID 2236 wrote to memory of 2868	2236	msedge.exe	89
PID 2236 wrote to memory of 2868	2236	msedge.exe	89
PID 2236 wrote to memory of 2868	2236	msedge.exe	89
PID 2236 wrote to memory of 2672	2236	msedge.exe	90
PID 2236 wrote to memory of 2672	2236	msedge.exe	90
PID 2236 wrote to memory of 4080	2236	msedge.exe	91
PID 2236 wrote to memory of 4080	2236	msedge.exe	91
PID 2236 wrote to memory of 4080	2236	msedge.exe	91
PID 2236 wrote to memory of 4684	2236	msedge.exe	92
PID 2236 wrote to memory of 4684	2236	msedge.exe	92
PID 2236 wrote to memory of 4684	2236	msedge.exe	92
PID 2236 wrote to memory of 2664	2236	msedge.exe	93
PID 2236 wrote to memory of 3108	2236	msedge.exe	94
PID 2236 wrote to memory of 2664	2236	msedge.exe	93
PID 2236 wrote to memory of 2664	2236	msedge.exe	93
PID 2236 wrote to memory of 3108	2236	msedge.exe	94
PID 2236 wrote to memory of 3108	2236	msedge.exe	94
PID 2236 wrote to memory of 2128	2236	msedge.exe	98
PID 2236 wrote to memory of 2128	2236	msedge.exe	98
PID 2236 wrote to memory of 2128	2236	msedge.exe	98
PID 2236 wrote to memory of 4788	2236	msedge.exe	99
PID 2236 wrote to memory of 4788	2236	msedge.exe	99
PID 2236 wrote to memory of 1684	2236	msedge.exe	100
PID 2236 wrote to memory of 1684	2236	msedge.exe	100
PID 2236 wrote to memory of 3152	2236	msedge.exe	103
PID 2236 wrote to memory of 964	2236	msedge.exe	117
PID 2236 wrote to memory of 996	2236	msedge.exe	118
PID 2236 wrote to memory of 3236	2236	msedge.exe	119
PID 2236 wrote to memory of 4116	2236	msedge.exe	121
PID 2236 wrote to memory of 4116	2236	msedge.exe	121
PID 2236 wrote to memory of 4348	2236	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://cordenpharma.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff4668c188,0x7fff4668c194,0x7fff4668c1a0
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,4791363666691745588,9392855747549882349,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,15744062566080092670,13796027409351744264,262144 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,3385726621643337268,3904487852835083430,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,4910584243135020953,1204051616136579769,2097152 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,8313258843273954376,6561535859760911590,2097152 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,7178479948276503071,861169157332097837,2097152 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,14115666520898373769,4606919159485598168,2097152 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3484,i,10323336854405094533,12103510132102578691,2097152 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,9435659400827008444,6489132815679755414,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,16256521007410028781,14149820621496259597,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,11647812890558933244,17302256597603431226,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,11647812890558933244,17302256597603431226,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,11652073812867888527,9094563553081753021,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,7287669654884366779,6313708881860682376,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,5507503985228931077,9970394483594529136,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,14715809616542042736,14529581017993190735,524288 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,6778545134756965382,2263772647509548421,262144 --field-trial-handle=2356,i,8842750512790833244,10295546330122423428,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4348

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 1024KB
SHA256 83bc1cffc614b4eb8d705b65899000b94815619d20d49024789161380e833459
MD5 5737360b49f4e11d476976145c47568a
SHA1 425dbd0be7bedf13c6d28d47273a36c359487c1f
SHA512 767b9daf3a9fc91a8bd73c810c342834a72718e22c2ae36594e976606c58cdb4d646bb5bd7766dde4318b106fed95a07d9a5427bca56a84c641ae3f389e6d797
SSDEEP 24576:9Go6UZ61gJ47jhTMaqTs7LBkPIzuL+6hGUjk8551NUwSCtNSzZhk:Io6BO47jxMa/dkPWu5Hkc51NfSMSzU
TLSH
T1C92523213FB29FA7EB94533B48EB0728752EDCAA431613A35318E6275C617D13B369D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 1024KB
SHA256 308b899d9cc41ad9067753f619957bdb8725c68b637ebf1270aeaa48303c75a5
MD5 e7cb4de25564c1179afb5cd09061aae1
SHA1 12ebfeb70ad26d0b3f2cd2458d1da1fb2dfc6bc6
SHA512 f1f4f0b5f681a0551fe9589579b10918d3b439492e0cd3ecde28f8510113e6e9d741986f42597b21d1d8cf986aaf31c9317b5646da3f9ad26e80c085cedccf7e
SSDEEP 24576:AMJCFwoXDDOw5DUVStLZYeI+hk/CpGnut2NyHMy:AICuCNAiuJ+hk/pn5yHMy
TLSH
T1E5253393FB52325963813FBE38C982ED4F6D3B2CD769526194DCA4946644EEE488833C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 1024KB
SHA256 a00e6e24f096a9c92fc0b22c4faebd89c237abf20a9443db632539b106a90132
MD5 0fa7dcef1eda141f56744874d31cfb33
SHA1 00ded65514cf09e27abefa948d37c2b3cc70d13d
SHA512 6e60fe86fcc2ee90f0a2d747efb1b71fdd164337145b21b57b9682c448694864b7671af365e475eeab2c25c91b0e5563b96e49b6a62b5d261f44e6f334220da6
SSDEEP 24576:JZWUCYb1qzeGYfHQ21cyrXG6EAJGNPJgsQ2bPQv5GzjDOAPv:JZWUCYIzvuw21CnHcB20vkzms
TLSH
T1902533C59083362C42B6FAFC779FAEF75ADA3E7B0D17854AC4E2E2FC5990C162045950
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 1024KB
SHA256 ee9623076b144b8a550e9b8e9a3133362174b7a09c8b84a494dcf1978692acdc
MD5 10e494d9ac8f038bdf49cded3efffe75
SHA1 f5f081bd7e88817c40a729dd84278e4dba8f77a8
SHA512 8282f8b8b37ae317da42c7a553472e51282432782a48f5a95ee7ce3b81669b1b0df470ac9e76fc3109c5260841e5d37bba39a49e6f1940db56817f089d25df6e
SSDEEP 24576:1FYowKPlbKaj+SIR+YWI+6XS7xw7GWkrhpg5P:1GKPlbKajXjp76i7xiA1peP
TLSH
T1DF25333432162ECF8E66A30AB95FEC33D75EA2D943B87E5642E0A2E837C64C1DD05543
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 1024KB
SHA256 15f1aa818acb3a43e8a1b82151c5145fdba454030cecc04bd404c47df861f66b
MD5 29678e9ba1e8a0dd382af05ad4b3f69f
SHA1 0920d233021866dc7353695f8d397b3faa47a24f
SHA512 ead9d787a6a4056b9d0938a00739c24dbc5210978fa59dab2a574184a806a962fd3b594a34ab88c90545963f89def55cb6a0a6c36fcb56cbb56d1847b99103b4
SSDEEP 24576:xyaWJOaVYGakgn/z28yRSSYP5ID6K0tX42LKHDzJj:FhEMyrSHPiD6ptX4Wqlj
TLSH
T1E32533BB835B5C8E495F9CC43743EFC15BE202C56CDED92A608208674B51729F4DD2EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 1024KB
SHA256 84579c28b6240ecabc2ec26d1ab667644d855017256f5fd13f8072402f520e8c
MD5 63e7990984a840831d45ffe83f8450b4
SHA1 d8768c175ecc16ebf10e20e8617e601f32009e76
SHA512 71a8e7392f5b317f27cf92218c87bc448f740794fd79620db736f97945e50a77c0233b70f68b5536bbcf0a227fd5c148037f9eefe8f37d4483a243c4a67851f8
SSDEEP 24576:S6y2S0qKSz9nuj7NterjCSgu0LZiaVlu2YoPg0K+1Xsy/ufb:Xrx7S+N4rjCZuIZiaVlJJPg0K+yy2D
TLSH
T17F2533DA4F0E27915B211E7CF2250E18DBE5424508FDA94E8E16EBB2AF054336C7CE6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 1024KB
SHA256 48530bb5d9038e0e7e1159f84cfc593cbfc3495a142314a64d9eef297de77b1e
MD5 172084ee8ebf391c9c0ae4349aba2036
SHA1 5a579643e087691a5f08cf37ea966d42e7f5265f
SHA512 828598ee3db55915dfacf2afcbe99862bba4300e3e2d63b0b9af3718285f4f4a5683774f54b9c0637b11b95c704d33a6994acd9510aeec813656c0c7c97496ec
SSDEEP 24576:MRnsH6eRdFtePYzv2OQRIH0odTinmABJgo2vVHJuJ:Mne62DQRE0odTin3Uo
TLSH
T13125338EEB246964F78194A9AE4257BC9C94D41FBCF8969C7645C0C3F23924DD388E0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 1024KB
SHA256 712df9fb7ff5c4e0b94b14374cbf976ab7e66c440306835b393d2793b5e6e81d
MD5 ba65780aa2307c60eb1bca1f65422a03
SHA1 40bab68a1ad81875afc4a4af2f0d467c2c68450f
SHA512 27721b6efc0ddef05384665d265ca6212694053e5fe4d48c9910b5e271b837fe8fc99aeedfd6c4cd06ba93bcdabe0a960175203d6bc063174c13e75b4ee4737a
SSDEEP 24576:wMhjNTbCtBRGI8MFcbPHXAXvjyJ9N5DjWLDQ4L8oOIQS2:LJNytecow23D6Ls
TLSH
T10B2533174E8641988FCB41FDC0BF1B81C2F6196ABB5173AB86AAC1B131DB1F57CA1835
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 1024KB
SHA256 bcd93b6d6339831aac620a9fee905052365689099fb73ea660a5ea4248563c23
MD5 d8a18a8340affc39463845adc8994b73
SHA1 d85197864d47a0b7c58a6b9eeaed6f30f978206d
SHA512 66f05d746514c8416e7c60ae9a0489643bc55536f3ed51b5f5617bcf4a5e31c09c6fcb4d70cea31808d5c02eb39477d289d5fba6a50844dad880af3e13e38269
SSDEEP 24576:7knp1EigLINllA40K7u2h74oIlP8aYEDit7pKPgMW868Jd7GwNb7:4np1Ei7GHK7Hh8d8xEDm9c7Gwt7
TLSH
T190253359C306941445DCEFCCC3AE82F2D79B7C1CFC4D95FAB60979590B8322D249AAE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 1024KB
SHA256 8c695c013a23cf17072df2cb910ae3b7f9518df62525cbd047866a2c44fa154c
MD5 2398e9ff8056095d6338f7688a812726
SHA1 f755c69b7c13b2782ac7443ed3feb42a107888b3
SHA512 7deb2c2bf222c9e5ec14b823fb6c60366d1200f98eff86db7fce9f987e0a571038151d1d3ad5ab790f4163b84cd572a6ca87c7d819a1b6bdcdac8cd7aeecfc96
SSDEEP 24576:JqLNFpWLiQ70zyQ661Iv982WxlqjKAlmeJrV7vD:ABYl0Iv98BQRTJZ7b
TLSH
T1B22533C855E9A0C8F0F11DFD3E3A22E4AD26DA759111E234CB83D13EE6EC158C9D7926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 1024KB
SHA256 0bae43b25e75923b4c16d28ef2cb4be27f2838b1a60524e164c170a566f35846
MD5 1b122e393811595919e7c159818e9f46
SHA1 9566943830caa1294f246a81f411bf1e58a38eaf
SHA512 b182b203a95a7d1a9274664f11cd7350e5385d5d3524232640a9be7d84f80fee7737d4b7214be0d3508b20d8f76cf0c422944bda8869f6db22ac2e9171f88519
SSDEEP 24576:Tlnffh9kHrFYblqvosfXWZnnCKv4XfBO1src1ctB0SzJW:Tln3h9kHr+JqLv3KvYO1ecK0ow
TLSH
T1A525336E9F9AA60910382187C267E2D5536CDFE2F04AB0D82F44BD1D097E21EF96C1C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 1024KB
SHA256 7763c4698456f03edaaa3ca332520f22d75d5ce3014e289770a848308b0b9402
MD5 470cb294da8757802872ee964a219a8b
SHA1 142a556a207d8643e653bd176456eedfd3bbb966
SHA512 d1e874265ed352d15942e620b8aeff8de61a9329c795865de12ec7f5f2ce22f1340c452eeef4a9950419dad368950da51b3896db318710221c49a0356ec87655
SSDEEP 24576:Q+Pw4/SmupPeBCffIs1F8L/w3A8cQIXI07MPa:7ZStZfhI/4An3407MC
TLSH
T1912523F86ECF7E034BEB124784D72DDD952080A7392B8F122852AD93952465315EFABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
Size 1024KB
SHA256 d7e473ea95aa4eb001efd83e850acdb5b2ff112b23fb4b506615142e38f2b73c
MD5 9f3dead79e90bec5714693fcf69a61ad
SHA1 7209d1491229d6f891f48df7499ba67f520e780e
SHA512 905d28891f9734953d15154e4903a35216215bf74a5bb5a56783ffd295d471bf3759b0126a578310c225fcc6b5b350ec7298036b890ca717f3ad1e5c13808b86
SSDEEP 24576:r3qCp2BnWck6opog6TmSAUm2kPv+mUEagrLm/gR00sETS:rgBnWJ7ug6TOUm2UhtdjS
TLSH
T1E425339ADF0129E6815A30F693964849B8BD6D7C6268661301CBF83752FFE71FCE3005
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
Size 1024KB
SHA256 67d70d43759bcd4249e9f0fcc4ec29b58b02db2ff394130ba2ca708609aed94a
MD5 adb9a77bab3f1c6e1e8eaaeddcb91163
SHA1 5faab877037268b0df112bfca93d3ec2d81bb563
SHA512 56b7ab4ee01ac5d39a09958afe5d2bc620e484903ad262d29609fb9cb9dc1040a2d4bc19cd2460a533bc07ff592ae564f0b15fbbc58c54fa1706f4611ecc8509
SSDEEP 24576:CVqNzE0YJm7L4drcbbsQYI+HyLPJQkfrXEFJ8VzqkEGhCD:CVqi0z6Qbou+uTC9kEz
TLSH
T177253375CE0F136C1DF79E98395D45566E87252A00F882DA41E4FB12FE864ABE2F0F12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
Size 1024KB
SHA256 7f3784c1d449110c7c8852ac2a9d33f39271e580dde746c9212f54a188dd273c
MD5 0c65480f0aee44c35a8aa47aa1a48607
SHA1 27f50b23f76f136396160d619a3164ce7b3012d6
SHA512 d6722950afc23b91fc701e037797bfbee067f5e4018163f14d46837c8ea14b2b74813c513ebe93bc4f3051ef0a45911e9c48eecb4ab0414cbde6a1dab5e5305b
SSDEEP 24576:DjjQ/3kaomw1IJ7YDup/9Gf53d9QRSKly9bk1vNT2LhZ33ZMcKKWtxnJ22bPZEtJ:H8f1cImzf53PdDbk5oUcgty2Ct+y
TLSH
T118253338071DF2730239C273A4D41BEE819D99545C6599138B3239EF1ABE3A36D781BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 1024KB
SHA256 3fb194943e37e61c85ee808b0c7f7ae562cc7ab4d993c21bc1dc8862f91811d6
MD5 7d5f37faeb513e28ed3d64b2869f7b64
SHA1 a1c9c04d30c3b9fec053a1180a3a1a79d93dd3d6
SHA512 2044d14c038e0048f032e37bc0246391281566c59ba116ca5a409027d69e0e976c3a51fb27c60fcb10d930c1c52cc8cbb2a66e0ed3dfc6a7aa3f6d7964b8477e
SSDEEP 24576:3JIXOxx1J2v6jUFBsIsCeWEdB69sSezHb0hMPkHBWUqdIFpEalVM3Dk:Zpxm6QB9sVJz7BXwealQDk
TLSH
T12225336AE2CDD4E0337EE8625145932768E24346E1D470A3656F2BAB341CAF73E135F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 64411555a50853ae5c3168ff48ea1b72cb489a969b6725c7980d53aa72d33b62
MD5 3a403d54fabfdd6fd5020b711a71950d
SHA1 6bbab6fa8faa3cf585e3b8cd68171a4586b977c0
SHA512 5db2a524f0c39f4adf54f7cd14933438f95233724675de7f622456c9310410e2e3f56ccf5a927eb95abeb486daee0bbb7eedbcbdf187bcd387074d72bab3f6bc
SSDEEP 96:zO8EUQtBfmcBjzVfmLY0B4eRejgC/zn1dncI774tHuG0X:zO3U6fmakLY04eRTC/zrcIH4tHul
TLSH
T162910BB481834171EB2900B971EC146C36FB99F5FEA72E5248D56AB564323E2E38851C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c908.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c908.TMP
Size 3KB
SHA256 605d0d7d12756985f114cd79e5c1788d2729e452b3fdc16e412ba55821b078be
MD5 3c7816d7e8d01005b21b47b915050a16
SHA1 2093b3086566bffd69ae9baefd332badc67b3521
SHA512 ccdeb676b341f6e95451ce35a2e4fe37d4c56933451d272f208fed5f669072e91fbc49323b7b1770643c2329e99f1cedb54a281ee195d7fb3e9c9bf0cd893f05
TLSH
T15081D738C20301A5DB2D01B8B1CD112C34FB99E9FEAB1E858CD56B7674323D0E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a5914d218e6c129e28d59690f698f129f10f2408c20eee28c9c9fadc5f876ba6
MD5 51e9b0a4b6a7ba9f3c67670a4a412f40
SHA1 3fcf9556a82d748b0aa261e212223bd628694b7f
SHA512 255fb5073beecf650a3fd918775cdfd877f398fb7f6bc4e4ef7940c9b8de7805edc279eeaf7d9e9494d57ef08c4721eb3cbc01560bd7cfddb27d76a4254f6b39
TLSH
T1B0517DB7C2E4C96D8A4256F476186F1BDE1D0A18532C3C5ACDD4AF4F93E24B0D24195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e3e217adac132190b1629f6778dd28cd0cd4633612606cbde82ad0dc5636eea4
MD5 1eb17c45a76e0161ab84c2c357e3a0ea
SHA1 bc39531058b1e2018fe6f945a4e5697c36457148
SHA512 4bff7b1ea463fc72108a740ab27b8f232382ac05bd744e7e8414ff051c760cf89fcf7cee3f1f04b93f89c9deeb4b8b6d13847ef4e2934be092174de8b2043df2
SSDEEP 192:sxZAR+yM/jK1Ml8Mkt/fHsPpacAIdpuhHW6+WN9kD/YzUsXkRIgrJ:sxZAMMt/fHsBaWKHb+/R9
TLSH
T10652D9126B389977CCDBD209F955BB53D6F51462E2940E54AAFCCA0C04E6FED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 927c30bddd147084a52d64e3b65bff0a3d8e82f54ae414dfdc55502cca46c960
MD5 7b4cf8b0de1582dbc97366e391a55b73
SHA1 03b6b58af0c7cd9cb0b0b0abef5d18e02f277519
SHA512 d8884a60d8ced0af8c41439ad38959c5f72d80f047059005b28ddac32db5a0508fb210b3002021ee6cd0e57b92fbc3f4ee23c91ab5e846047923f36bb818dd13
SSDEEP 192:sxZAR+yM/jK1Ml8UQa7kt/fHsRpscAIdpQhHW6+WN9S4dYzDsekRIg5kJ:sxZAMqtt/fHsPsWcHbDdxe
TLSH
T11952D85266389977CCDBD209F951BB53D6F52472A2940E44AAFCCA0C00F6FED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 94e4253d2314b1f856425799cad7476fd61818edd5503f7c6db9d42cd1e5f591
MD5 de53913aad9092523756545ddb997ada
SHA1 03427a05e89ff76611406c19c1cecb8ae0d648b7
SHA512 b90933913bbeb2e28ede432b9b318163d6470533b6807ca82c925b1623faebbff0b573514eef03b862f3329f963d754d8fdc852bc0c24c6adfea6e13958ec329
SSDEEP 768:yhW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjzroI0i8YV:yhW7kf0Wvqidau1jaa5LA3jAqV
TLSH
T132D20A3B684CCB7E4F840E5CEC266F976ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f0ac24e37b706c47d812fd40773a6c57dd2bbaa4b729e9b686a15561f056a31f
MD5 51cb0c0e5b246749c86f47891dfc7745
SHA1 77ef46c22998636dcc9a4af85654ea2459fe996a
SHA512 2a483c391aeb04cc656fe06be7b35eee5aff1ecd52ba11372c876f158ad7a91779f1ef2db1ef91ea4ab9d0ea4b996bd3a9509d50031bbe78328e14d0ff449fab
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTjNIdKeQAXyhIIXKJukZeIvKjC4DyD:KIbCKcjNmKeQqCIwKJuyeEKjCWg
TLSH
T17EA17413707B025138BF2998A29685369E4235633418BCBF7BBC24A21E67E214DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594cfd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594cfd.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 2a5e8c5443a7289b3f43f9616fa2b0acc603249ed71c1ee12b1a65e17e96b27b
MD5 68cbff5be8f97de127d97f7c099765e7
SHA1 f7a61bd593623a8f9af44fa778cd12f06f4a650b
SHA512 990025f90d4768a11f1e061d55a93675e98ccbcb46821e5e0e5ab0f5d25613deb81162c579a4b44891df0e44471e0b7cb6607e4459bcee911d48f27fba1a77f4
SSDEEP 192:udLsNmNCQwRJXTBbQMQmiU17W+/4aGBPKT++FdGsr2PNJdN5qhQ3Xranl:EsNmAvPXNbBhwGdpqFQQ3I
TLSH
T1A5421A3598786D2B9EA3A141F44736035EB8516BABC46F54E6EC9B0C01EF7AC2316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 15f260d6559b5750e21c78277f038e1a4628647403f82971ba4d2bd4784c1118
MD5 f180a218bf75fa6c3af8ce64cd7629a8
SHA1 9a81d61055d0bc81c3d67a91139d70367c59aef5
SHA512 0ce968839271dec24896642627d68f54d69d87779f0bb268c31d8bf840e0d1f1aac8346c98c484c04cb6d91f3a40c0fefd0b7c4f98183c31afda87e67e7521e8
SSDEEP 384:7niF1tNn/s3n9SfzsNm8TUNTUlIluvPXNbBewGdpq0QQ3ux9h:7iF1j+9kbwgwNkLJQQ3uvh
TLSH
T147B2F7F248D7993AD9AE5743B73E2E034DBCC067B5806A54B7D85A0CCC9A2BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7844661072bcd7c06f80ec3807bee425c2dfccb593cf7bb247dd4a4ac9517c02
MD5 feb45db58e5e5564f47f7a5684baadc7
SHA1 28f1bd0949dc61f084ffe115a6e6db139a147944
SHA512 ed750404448c8ea02c370bf6afd8016827df825d45cd1b31025c5ec0657f4ad3860cfd9813307bab15f0d6d7fb5844f805e3bf207e6f05a58ad844c779950d50
SSDEEP 192:MON064BAQmiUyx1WNW5GBPKT++FdGsfaDUouU6:MON06eASEW1dpcpuU6
TLSH
T1CE02EA35AC796C7B9EA2AE45F4873B175FE8113BE5C41B44EAE85B1C009B75C234382A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 34307866607b3322f6e1e20621796e51f99d013dafb192fbfe50106bc915834a
MD5 abef0d562830f1191b7f0afdde65d5b0
SHA1 2bc185fbbf963b04a560251198f977618815b7b5
SHA512 257c6d25f39449c975096d90a99b32bd263a9ad2358df8c90106d28b55e37ee982018a614366176f100e4f700bb76ebfd12bab3e050671a5f8589e01564ec1bf
SSDEEP 384:NtNn/s3n9SfsNmuvPXNbBhwGdpqFQQ3ux9h:Nj+9UkNjL+QQ3uvh
TLSH
T17F726D3158796D2B9DA3A180F54B36075EF4417BA6C02F54EAECAF0C01DF7AC2317916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5130c1e98de38904afb976e52c6e444f9528362663f47dc8e641897efcea6630
MD5 b6760f607c6ab5526d5202b4bcc48ae8
SHA1 ee6e4ff37b75c921d250c88d8b8b38e125178d45
SHA512 d0720dabc5157803adff9610571b1aa8bced883a23d583a80671db62fe106e9dc6dad3a276560615d9b4982995ab3c2356115d5d6778c3cef23acc720c66c3de
SSDEEP 192:nON/64BvQmiUymWNw5GBPKT++FdGsr2PN9Ww5qhU6:nON/6ex+w1dpqhQU6
TLSH
T1621209359CA96C2B5E92A541F48736035EA8513BFBC56F44E6EC6B1C01EF7AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23fa4e40-67e6-4fa7-8fa1-df1c6464e466.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\23fa4e40-67e6-4fa7-8fa1-df1c6464e466.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ed4e617664ca6793654a99a7e1e8e8649414ce7e4168140d92422f29d9f9e2f7
MD5 fd95b9b9a4fd9ef06db1753ee483caeb
SHA1 9182d5c77a0bf896b358de80741ac41a6ed7fd9c
SHA512 980e9b64ac5004fb6dad8bbfbad5776aeb5a6aac08cf58232af742ae15dcddaad79494491f6ce5aa6cc4931df56cabcc380dc936e16809e03c8a069584a17133
TLSH
T1F8411A5CB7ED1108B3B76E5AABF7686D487BB8772F06945E00120D4E4A32B00C9A2777
MD5 SHA1 SHA512 TLSH

Submit Download