hxxps://www[.]amazon[.]ca/gp/f[.]html?C=2C4HFI2WQET67&K=2J2MKBJO460V9&M=urn[:]rtn[:]msg[:]202607032321227adcf45001fb42fab44a74027610p0na&R=BQ92KOUH0ZWF&T=C&U=http%3A%2F%2Fbusiness[.]amazon[.]ca%2Fabredir%2Fgp%2Fhelp%2Fcustomer%2Fdisplay[.]html%3FnodeId%3D915466%26ref_%3Dpe_114350650_990647030&H=850IBGH3ODIBKZOEIAOEQ28IZC4A&ref_=pe_114350650_990647030

Analysis

user interaction
yes
max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 12:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.amazon.ca/gp/f.html?C=2C4HFI2WQET67&K=2J2MKBJO460V9&M=urn:rtn:msg:202607032321227adcf45001fb42fab44a74027610p0na&R=BQ92KOUH0ZWF&T=C&U=http%3A%2F%2Fbusiness.amazon.ca%2Fabredir%2Fgp%2Fhelp%2Fcustomer%2Fdisplay.html%3FnodeId%3D915466%26ref_%3Dpe_114350650_990647030&H=850IBGH3ODIBKZOEIAOEQ28IZC4A&ref_=pe_114350650_990647030
Sample260706-py2f1abs8j

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278155137679829"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{AD9C95D4-B7BB-486A-B4DF-A82BDAFC5C2F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe
4428	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4428 wrote to memory of 4604	4428	msedge.exe	84
PID 4428 wrote to memory of 5568	4428	msedge.exe	85
PID 4428 wrote to memory of 6088	4428	msedge.exe	86
PID 4428 wrote to memory of 6140	4428	msedge.exe	87
PID 4428 wrote to memory of 6088	4428	msedge.exe	86
PID 4428 wrote to memory of 6088	4428	msedge.exe	86
PID 4428 wrote to memory of 6140	4428	msedge.exe	87
PID 4428 wrote to memory of 1576	4428	msedge.exe	88
PID 4428 wrote to memory of 3156	4428	msedge.exe	89
PID 4428 wrote to memory of 1576	4428	msedge.exe	88
PID 4428 wrote to memory of 1576	4428	msedge.exe	88
PID 4428 wrote to memory of 3156	4428	msedge.exe	89
PID 4428 wrote to memory of 3156	4428	msedge.exe	89
PID 4428 wrote to memory of 2400	4428	msedge.exe	100
PID 4428 wrote to memory of 2400	4428	msedge.exe	100
PID 4428 wrote to memory of 5964	4428	msedge.exe	101
PID 4428 wrote to memory of 5964	4428	msedge.exe	101
PID 4428 wrote to memory of 1900	4428	msedge.exe	103
PID 4428 wrote to memory of 5484	4428	msedge.exe	107
PID 4428 wrote to memory of 5484	4428	msedge.exe	107
PID 4428 wrote to memory of 5484	4428	msedge.exe	107
PID 4428 wrote to memory of 2068	4428	msedge.exe	110
PID 4428 wrote to memory of 2068	4428	msedge.exe	110
PID 4428 wrote to memory of 2068	4428	msedge.exe	110
PID 4428 wrote to memory of 6016	4428	msedge.exe	112
PID 4428 wrote to memory of 4244	4428	msedge.exe	113
PID 4428 wrote to memory of 4100	4428	msedge.exe	114
PID 4428 wrote to memory of 5792	4428	msedge.exe	120
PID 4428 wrote to memory of 5792	4428	msedge.exe	120
PID 4428 wrote to memory of 3136	4428	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.amazon.ca/gp/f.html?C=2C4HFI2WQET67&K=2J2MKBJO460V9&M=urn:rtn:msg:202607032321227adcf45001fb42fab44a74027610p0na&R=BQ92KOUH0ZWF&T=C&U=http%3A%2F%2Fbusiness.amazon.ca%2Fabredir%2Fgp%2Fhelp%2Fcustomer%2Fdisplay.html%3FnodeId%3D915466%26ref_%3Dpe_114350650_990647030&H=850IBGH3ODIBKZOEIAOEQ28IZC4A&ref_=pe_114350650_990647030
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff85254c188,0x7ff85254c194,0x7ff85254c1a0
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,4408344910943980661,4180133016044340720,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,18432832204774700844,16931098068457404473,262144 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:2
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2212,i,12188519968357486395,15556348766053521059,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:8
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,2244473182933378719,13767979081243900507,2097152 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,10863586718377150380,4007019502960299162,2097152 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=1376 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,11874534511874598850,16300425380312281396,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,5074525480142230495,12010008535799194000,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,5193273104909499311,14880566952468611474,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,5193273104909499311,14880566952468611474,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6368,i,5445259678497712049,175436916406401448,2097152 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4288,i,13217976751366111239,4173907468846622232,2097152 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,10141787865992990319,12668051715731744721,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:8
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3324,i,10203905301106088668,380369465846391117,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3328,i,4716668142001231750,13847946309559698641,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,11555515203377400245,6808887880563333713,524288 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,8720823734724949028,4941455271738631204,262144 --field-trial-handle=2972,i,17287270251700195028,4397980610152982409,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 d98a108344e296e1e9481dcdb47ceae23a32595635145a3f3f6945af0d373091
MD5 d68bfc5817dc29bf8184459983125537
SHA1 cb2dadc1597d37dedefbcaf5487dc6be4527517d
SHA512 0bd42229dbbcf3efdc1e5df9167aba5eb1b1212e2e8915aee927c5d604f87a53183f243a048137d13323b32d6d2491d3558ab0d226cfd6b113a4338fe80a37e7
TLSH
T1A9E02BA6C821FC271DFD071E60594647EB0113573740594F3B3D820C8FB462646C5C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b45bbc815118eaaa0cb686cca7b19193735709b3106da5b59604f627829d4309
MD5 8077f9f19c8a36e6fc7d9370408fe198
SHA1 8563396797823de1dfa47ddc3ac624909280cd66
SHA512 d5382ec7144adc2998ec55f660250c85dd6af0de8cbbb0d44176e48e0fc82dd70308d417c442216db3b5e5a45143ff9d8ca96fa413563ec37459bb33e9233f70
TLSH
T1BE710B35F582D478EB23073195E03E54B8B4C1D4FBEB4EF2296444793CCAB55835D6A8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 30a3545bf225f7451d16ffd20d8770ddc0b14f344d522a8076e23cb6355835a2
MD5 f8c1a85999d31406b232a4e9fcbb4e43
SHA1 113ea0bf837fa0d5aa190dc4357d88c291f5e38b
SHA512 ed8b5bf09457a4edc34cb5d46c9de3b75b62f0e2d643d32c375353949937f09c85ad8375e3d7b70d51abb0f1b9de435f38d859a5212232802cbdd63577864a97
TLSH
T1CE51BEF783E4812DD921A2F0AA28FE1FCE580915532C3D69C9D09F1BA3E3471E100B5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 824693bdce582c34a08c0b1b2bd490a61c672c2e51c9a90a4c9e977ecf96d6f2
MD5 078ae6d75c607f15c0e69f78075d3f46
SHA1 cc1421478d6c27683cdcdfd2c6c7f2ced00f00a5
SHA512 1eadb565e51901f468b7d257531156bae229cac98dc792ca74a65ede64dfdf0672250a90b6a955547f653338d8826897b487914ca82ce88d60b70285f69661e5
SSDEEP 192:sxZWRMyMqZjK1Ml8UQPk4/fSsmTduZdMzodpOXmHW6+WNfPXXYvYE58MIg5LCJ:sxZWRq84/fSscgzPrHbnX619e
TLSH
T1ED72F7166A34997B8CDBD219F554BF53D6F91123E2905E44AAFCCE1C01E7AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 3eb74178566c64cb73c774801791bad25561e8d5df6036d6055a0056e21870c0
MD5 7a42e4e9cbf16b368fa98fd018d7a1a0
SHA1 8a8bdafc695d281aa131537c3e456303c14dda09
SHA512 47a9d465203f694c427e88b8871eff84f0d95886311c28fe0dff62acb1bb710f08d13849f77b19fad2d51d4324c1a9fd47ef8446edb5b9024592246bbd86fc84
SSDEEP 192:sxZWRMyMqZjK1Ml8Mk4/fSssMdLaZdMzodpOXmHW6+WNfqB/YvOuEr8MIgjCJ:sxZWRM4/fSssMtazPrHb4/J1je
TLSH
T1DD62F8066A34997B8DDBD219F655BF53D6F80123E2905E449AFCCE1C05E7AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 69690d2198cc306427fbb8202494acb3e58ca790c539ab8396a31bbe3545a3a8
MD5 9166f7b9794665be027a1291532d1ec5
SHA1 48981e4fe99bb26e05e00212afb0383a9fc696cd
SHA512 1519e1ca6e5e68d98f9a18776fedd7dababef57a24ac9285707effaf4f10fe9913e2555e74f75ec093c5981b2a824ccf2c42231e4e98c2f38b6983b65a1cb30a
SSDEEP 768:ZYsv8Od/hWvFvQX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQro9RLG:eY8Od/hWvFvQXu1ja10Lm2Nu/S
TLSH
T1F8E20C3B284CCB7E4F840E9DEC26AFD66DD801CB66984D5447FA884C02C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\641becc1-4c16-4fd0-be96-6569a7a8c6c2\index-dir\temp-index
Size 48B
SHA256 cc4e2f65968d04408ab5c73b105b1cc58cd9bbf9acc9749103c8959f155547db
MD5 3b1e7a2d8ba90340436f3394a84ae968
SHA1 ffd35d592991443b46c5c1221b59df57bdcb1dfb
SHA512 74d8cd835b00bdda6600ab8e79609ae7fc9a532afa93b71f83de1069cd38db740a30bcc5ec435a9b8be03f54244725c405a636e292510dbb8506cc8bc5769ace
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\f847aa0b-add6-4c17-8828-1c2f1c28a50c\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\index.txt
Size 612B
SHA256 10c5fe34f2a36c605660df596d28c93028ab15c7feca9e77b73a4bf25257c1fd
MD5 70370769c0d72709c3d7d4f44eafadb5
SHA1 9894f7968b27acc5f4f345f93c46c49188d59879
SHA512 fb8133d658e0ea797cdf4a2d8747d55713a9fb063f6c1e5cb4d86367450df2e8303b65c7aeae087cb51aa9be7b2caabbb954fb329762da4bafc361ffeb430f00
TLSH
T17EF04C440FE2563CF5BFCFC2E5742AD81122FE0B2856C14DCC24145F6ABE501D52D066
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\index.txt
Size 731B
SHA256 ef02ca8a13998762ab50b8bbbe82fbd0466cb77919f91097e1c2077b905658a7
MD5 65d36a7e59e536a34d558cb9330c5293
SHA1 7bef25878501b9866ffc5184f9cb5e785799c4e2
SHA512 65b67eff7c25743039e1e6422bcd8929ba3bb12dc3106c25170e36aa32600b523334db088a686c887c185b70a7c1135167fbd6be0c0c910bed569e1daf04d7b5
TLSH
T1C1017B440FE35638F5BF8FC2DA742AD81562FE1B2C57D28D8C20145F6AFA002C42D163
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\index.txt
Size 383B
SHA256 14b535d1a5ab4b226a32f5cde9db6545e8bb7a496aab39077c7fc728b93942b8
MD5 a7f8f01e103016c2ef994431b8a078d6
SHA1 a68920eff7936aa2edc1f75a05e352b56f8c5ade
SHA512 2670c5f0f1033ef02ccdf6cd560bb8934c697361e4336681650b8835d80152bfde5ef614a4b49dd362e44a1efdcc1e78cd46ade04b3cd159c60eeeb965814f11
TLSH
T139E022810EF26279F5FA4F82457825885821BE4A2C95808E8C24A88FA5AC001E57C261
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\index.txt
Size 496B
SHA256 f3588ffc17fe8ec5891d70fef29729fe3af3177c9b16723fa5004535d5b36ac3
MD5 dc094df3cc7996e62931950e4d89db9e
SHA1 46087f2b42185e49f92a5b8c5f0e6c839626d1d6
SHA512 2046b99c2c57ecea11500259ed25ac5015698050890ab9383e3acf8a3e76918a75a396d15f24c37d42a592b254299e375392b32a559b9365f3b83883106e79bd
TLSH
T1E8F02E450FE36638F5FF8F82A53816881162FE0B2C91C14DCC15589F65BD411D56D172
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\index.txt
Size 724B
SHA256 c210318caecc9ca4675248f723abbcdffb83724197d8a0ec3cdc92ce5d038d3d
MD5 f4546c80fa15598f9395c1cb5451dadb
SHA1 3468bb546fb861110a9d2e64470077e1f1a1614a
SHA512 2e83a365951b750a128df98724b58a570c1fec7ea49a2222a4a4482dfe115a40cabbbc5f2f0dbbb11cbcd1c73273d0533cfbdc357461f906dfecad42a75fa9c0
TLSH
T118017B440FE35638F5BFCFC29A742AD81162FA1B2856D28DCC20046F6AEA001C42D163
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5832f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9bdf83683d470e68fbc3265b8cf260d912f49f76\index.txt~RFe5832f2.TMP
Size 212B
SHA256 62f5f7914a987a7feaa2be6c6a4b6259c45d29e03030614c9a57deda2fe03bfb
MD5 2dd2f38cec86aff61f7ad58189844291
SHA1 f8aa14efc84d35e0274356ca876e27553ecd4529
SHA512 8b148e3cf206b818eb77748ca16622f8780eb7d4305b96a4455225e9c5d0621b1717b09ff700c17d079c8494739b8a397111b2c40242a9885de3e268d9f3fcfe
TLSH
T1A1D023D20DE1615DB5F98783543D234540717D1F38D5418DCC20B45F3578411E138221
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 e947b74668c3a6cbd8a9ea5930197c667fc1e194e8ccac5fa270b1c99300b39a
MD5 1886f665deba41553a1f7995a9cabfef
SHA1 ed1c9d4ca1975ff8d5eb748d68e3652152190886
SHA512 3c85a74a1e6b94867fa1563c5b44117036bea2892e3e5ee9de8e2deea572dc8cada5352ba7a0b73f7d962a5f805d6fdeb63165686b013c13ed30392b12b7500a
TLSH
T143A0021245942749C4D89770A5434A883650DD1651833AD350A8495C88502A0553E01C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588141.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe588141.TMP
Size 48B
SHA256 8b8493604c7271d8e71f800cb5d85fcc4505341874e51968e81b5b85dda63853
MD5 f75cc9d3b6c4dfb39513d294f531386d
SHA1 a6cb9e4ffeb2b71d8ab2551ae3b84fcda4dbcf93
SHA512 f8993d61d85ac2ab09e878c93ee9cbb104dc0f9732aec3e23e43c9501271f2fa0af7d8819ff0493281d36ddc4029ab5bdb6a2e1fe09245279b215042bbc76c32
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 f5a96b528d7b6790494f253178afc58548618265624c08040e179f59db251928
MD5 30a1b69d891212dfcaa56ad7e92f319e
SHA1 5ff3abab321d192ddfb7d5ea088955acc18019de
SHA512 3abb1f29b30e2f16b5ea9c1eef7e69c9f3188fa6c88f3872b3f31e16f6a7c5b4f838f3b8143dbd520fc15260c56ece2abc8260b3cdeb8c9b22a24ba86fb5f167
SSDEEP 192:05ppxnY753RNBvRJJdt7p5J91dXW+zC+4AR:0LppY93PBZJPtN5319X
TLSH
T140B27E5A703E0212397E3988B39696364F4135637058E4AF7FB814A54F2BE225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 933e9263037dfd49773489597031c11d2479491b30e86558c51f6c60a037d5cf
MD5 2757bf27ed68ed58dd736a47295f73d4
SHA1 6e75618112e59b1ea36154323e260987b4cc4be7
SHA512 adc6c6734c29a051e9bcc7e2705f1cbcbc5d7c4a580314319259d5e69203d003969a3288bf3fc9b505530ee353fb258c00fac04f3178c8f854888de6c3c93d6a
SSDEEP 384:npLiF1tNn/s3n9Sq3sNW8TUNTUlI4cQckCrSWQphiftGWE3jYRA8TOObjI9G6w7B:pmF1j+973bwgfkgWoGWOQA629MB
TLSH
T19DD25B36E858DAB7ECE74FD9B75A3A07EEE04263868C5AC4DADC5E4C00D71AC4307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 3fe967aa8434d86ef86fb4bec46968d6fb36e728d33c15873d7cd7bc1a333ac5
MD5 f70ff4f1f9e87e452a0d5cc25e9e9d70
SHA1 181e3601a226f267d3c79f4e73f29a19a7b57048
SHA512 1036fe13d0671299ce2cd1b5a2b24912f6854c841110516a40e1c9f741f43b1e614c223efa119c69cd2cf3abda1b4efeb6d737c964065d1d026c799f4aa32f89
SSDEEP 384:nPiF1tNn/s3n9SmsNW8TUNTUlI4cQckCrSWQphiftGWE3jYRA8TOObjI9G6w7x4C:aF1j+9FbwgfkgWoGWOQA629MB
TLSH
T1B0D25B36E854DAB7ECE74FD9B75A3A07EEE04263868C5AC4DADC5E4C00D71AC4307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 3dbd6d6516dfeb8becf630e46f47f9fad2c2d57b3fec524572dfc1401fea058f
MD5 1eaea9d74cd6538fdf511618bbfb127c
SHA1 293a95c0ba7753cb87969d8c290fde66da107a13
SHA512 54c198ba9a8bf5796a44336772139d1cc0e7ccc56c775eaf0694d2b79e9e73652255fd0ddfe4f3396626fbdd6526537aae05df4950754fe6875dfa27c09968b8
SSDEEP 384:npLiF9CcmyWCS3sNW8TUNTUlI4cQckCr9WQphiftGWE3jYCA8Tjlnty/7IgJd:pmFccpS3bwgfktWoGWONA6jl2d
TLSH
T18AB23B36E8A8DAB7ECE74B99B74A3603DEE04163C6C85AD4DADD4E5C009B1DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 5a2b16f23327d5166523b5061e893d46497dbff80060e6c548b260b70b0b23fc
MD5 6faa0c6d1d97dca169844b2ebd6dcf3f
SHA1 71ba787bd414176a419d66d1b98c4d29c288daec
SHA512 1efde6f7c524fc8263fb529e728014deeab77ac45fef9a666e441bfd28ad18dcc950cf918ff7d45a9d0753ec3615cd608ee0e9da63df7967d5601013379b0dfa
SSDEEP 384:npDiF9CcmyWCs3sN88TUNTUlIm2QckCr9lIKphiftGWE3jygphe4KV8p0xHDty/8:puFccps35wgbkUmkoGWOWcI8p0hvV
TLSH
T1BAB26C36EC68DABBECE74F99B74A7A07DEE0527785D84AD4CAD85D4C009719C030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 6dd0217ebfe90e91aa462ffa5c555fff081bbe39e6f44e9d7fb6c2fa8fd50501
MD5 1850f8fd673d434821a86b7a9dc2b144
SHA1 1c82227748bd85976d84c728512a2faef4eaf042
SHA512 5c0d24bc7fa4cedd5268a94c332541d8fc4b55082292d354792e32d48795bf04730b17f1270be352283020f6cb2f0b6ab791d87435104366f74c20b3a277479d
SSDEEP 384:npuiF9CcmyWCs3sNq8TUNTUlIm2QckCr99F9phiftGWE3jYHA8Te4KV8p0xHDty0:pFFccps3rwgbkUXzoGWOqA6I8p0hvV
TLSH
T127C26D32E858DABBECE74B99B74A3903DDE05267868C5AD4DADC5D5C00DB1EC430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 bf984c6eb5dd9f1e620624f2f1324d10f46f09063f904a65007ca6a683d9a10f
MD5 29a98df4f543a34a8fe7d53e5acb4aa6
SHA1 44e1259867608a53e44be27e94da1ccb87f99acf
SHA512 8f2f3a43b0db788c59d291cf47446cb950377875e7d07f2f06e063e0849228315508c5f9e62db06496f926ee69e903db1eda768da4684bb8b0fe0eed84574e67
SSDEEP 384:ngiF1tNn/s3n9SpqsNW8TUNTUlI4cQckCrSSQphiftGWE3jY/A8TOObjI9G6w7xH:7F1j+9DbwgfkMWoGWOOA629MB
TLSH
T15DE2B2F698D78A77D8AE4B97637D2D029EFCC163B5881984B7C84E4CCC860BFC206815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dc6bab76f58ab1d132869204706c50e7312701a9ddfe6e3c7c909e3bdb71b381
MD5 e593f3e801db7a4a158d3871c4914091
SHA1 35a13b57d32c1937d21f353e37a9ea930bb07f67
SHA512 64dbc3624a0ce5eb8d3894f6f0e27760c1557752157d6557de23e21ffaee7885b5b6d1c7e737e6e4054d39a6f920904dcaa4882139700065332bd80e276efcd8
TLSH
T1D8412A58A7F91148B3B36F59AFF6A8AD447FBD772E06D45D00110D4F0A62A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1900-364-0x00000286EC730000-0x00000286ED730000-memory.dmp

Download