hxxp://monatglobal[.]com

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 19:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://monatglobal.com
Sample260710-ylek5sgs3p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281867479399993"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3989226554-2204910950-1522900112-1000\{666D5435-4A6C-4427-A741-BB34A4C81417}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 4204	2352	msedge.exe	87
PID 2352 wrote to memory of 3812	2352	msedge.exe	88
PID 2352 wrote to memory of 4744	2352	msedge.exe	90
PID 2352 wrote to memory of 3812	2352	msedge.exe	88
PID 2352 wrote to memory of 3812	2352	msedge.exe	88
PID 2352 wrote to memory of 2752	2352	msedge.exe	91
PID 2352 wrote to memory of 2752	2352	msedge.exe	91
PID 2352 wrote to memory of 704	2352	msedge.exe	92
PID 2352 wrote to memory of 704	2352	msedge.exe	92
PID 2352 wrote to memory of 704	2352	msedge.exe	92
PID 2352 wrote to memory of 5992	2352	msedge.exe	93
PID 2352 wrote to memory of 5992	2352	msedge.exe	93
PID 2352 wrote to memory of 5992	2352	msedge.exe	93
PID 2352 wrote to memory of 3900	2352	msedge.exe	94
PID 2352 wrote to memory of 3900	2352	msedge.exe	94
PID 2352 wrote to memory of 3900	2352	msedge.exe	94
PID 2352 wrote to memory of 2968	2352	msedge.exe	95
PID 2352 wrote to memory of 2968	2352	msedge.exe	95
PID 2352 wrote to memory of 2968	2352	msedge.exe	95
PID 2352 wrote to memory of 3280	2352	msedge.exe	97
PID 2352 wrote to memory of 3280	2352	msedge.exe	97
PID 2352 wrote to memory of 3280	2352	msedge.exe	97
PID 2352 wrote to memory of 564	2352	msedge.exe	98
PID 2352 wrote to memory of 2260	2352	msedge.exe	99
PID 2352 wrote to memory of 564	2352	msedge.exe	98
PID 2352 wrote to memory of 2260	2352	msedge.exe	99
PID 2352 wrote to memory of 5628	2352	msedge.exe	100
PID 2352 wrote to memory of 5628	2352	msedge.exe	100
PID 2352 wrote to memory of 5628	2352	msedge.exe	100
PID 2352 wrote to memory of 4828	2352	msedge.exe	101
PID 2352 wrote to memory of 4828	2352	msedge.exe	101
PID 2352 wrote to memory of 4828	2352	msedge.exe	101
PID 2352 wrote to memory of 2932	2352	msedge.exe	103
PID 2352 wrote to memory of 2932	2352	msedge.exe	103
PID 2352 wrote to memory of 616	2352	msedge.exe	104
PID 2352 wrote to memory of 2580	2352	msedge.exe	108
PID 2352 wrote to memory of 1792	2352	msedge.exe	109
PID 2352 wrote to memory of 1188	2352	msedge.exe	110
PID 2352 wrote to memory of 4808	2352	msedge.exe	111
PID 2352 wrote to memory of 4808	2352	msedge.exe	111
PID 2352 wrote to memory of 1168	2352	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://monatglobal.com
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x27c,0x7fff63cac188,0x7fff63cac194,0x7fff63cac1a0
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,16204756596518919851,7188678602996708152,262144 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:2
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,15246322385528672953,5428714344640526566,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,7860283124574807927,5494422671377195098,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=3276 /prefetch:13
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3344,i,14367186566177771983,3196339985027506414,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3348,i,4353672855236709822,7917206642368908779,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,10633940622737420501,863150970366927913,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,15992135836132472271,12050394185226944685,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:9
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3724,i,10814799632973808340,1508672651342955923,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,14731871889115385324,1453215204634062105,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,4038877975263986429,5936051660551325377,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4428,i,2300867529478546334,6068018418060269195,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5924,i,17713669259091519352,8813059600577440711,2097152 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,1917978718619102633,5693173627441900108,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,2199885546737620283,14247910624247102664,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:12
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,1917978718619102633,5693173627441900108,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:14
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,11589256120087760378,9535180614014386701,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,2354950474972856740,4351347552131638390,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:14
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,337759509771104582,9034297026967893932,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,10218778252708495117,11151740824109575643,524288 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:14
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5052,i,6941864165313664731,8473898388901363818,262144 --field-trial-handle=2596,i,11765389523749233417,15417219124106301023,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1168

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7f7f7efafb9f87082470af84df3b906033b9d533fb7a188458a4e181362f2170
MD5 8af1f60999c332d8cf9a392cd968a81c
SHA1 93834a1f070ff24041a0deb17d95d868998c98ba
SHA512 95d5c6b0fed3c3dce459178eafa2e9fa13b06caf50a5b294d66ecf16bf91357eccebec57e01d50e054232862c252fc80f7300e865318ec24078f9288a88c63d4
TLSH
T17BD02B206A444A4CCDC0B03064A2EA18E2104135680013C44001B06988901830B970DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e34bc4625bf22507150f49d8c28444bda8222ea36c2a7d431bbdaae5c134a9d
MD5 e1ae04b3e73ad5ac4854b3b71e22d4d3
SHA1 221461b4f2d9e84e2f881b5a79edfef3705178db
SHA512 58529610d3f5dd7778bff3b81dd8abd9d79702eff78583d0294f3999089de0bbf84f0abad703269c0988835522b1d8d48e9f3c65472a409c5868fc3547c3fb1b
TLSH
T138D02B206A54494CCDC0B03464A3EA18E2004135140013C44001F07988901830B970CB
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000c6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
Size 1024KB
SHA256 b0a7eb8e82398b97ffa29def5ea798b41fd1ac524faeb27bd3c2da9cb3424017
MD5 11fa0b9388b3a4862bab9ac2d8886d9f
SHA1 c8e7c3c46e51e6fd45756f60d8e262d443366147
SHA512 e69c49dfd1701ea00c12a22ca017a93ffadea4dfe2b52ab4c58ce85e92ed6a688d9b55ec4f8ab39df54c156718b03c307d7b62f50ed78107b5a4a6344833bb55
SSDEEP 24576:K7lncD0EVsBlb9T+i4VOVt6DWSXJM38fVWZXNWm3Igj5sd67XAe4:olncD0EyRTn4V3DWSXJMRXkmPj+w7XT4
TLSH
T1C825335805A418357B8ED44CA2748343B82CFB5A4258471DAE982C7DFFF07EF19ADAD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 1024KB
SHA256 e26badfa4d2ef9a09679606203f60bd47f365eaa95d9ad2deb21e37f85276a35
MD5 b044cb01462cf7fe7a5b7350f6c61acd
SHA1 55e81779d4f0d6e5e78d8673957e0123262ba485
SHA512 3c3aec7ad70b74ef0853092c64bda860f280660f30811f167de627cbdf520666744834c459e3539519eabcbd9f263572da69884538e8bfe3bf8164edd5c5bf56
SSDEEP 12288:Sy+oqq9mxHhw5mHAntXcP+E9ffxUi2ViteNcs5LPHTy/iLkq9V1a4KMe8F+5UcYa:S6PA5mmgtXcFJfxtqcMy/VYVMUcCG
TLSH
T1A52533579C7FC02E4FA2DE3AAAC55E0977934098EB7861BC5B458005BED00EBF50EB19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
Size 1024KB
SHA256 713c97545ba858bd203b7717217028c14b7a2057cc9e54c0d85b829b8c349413
MD5 822f3507e8afe6ed35fd28446f67f127
SHA1 e459f5f0130cf628e44d311e63a0bfe3e0e723eb
SHA512 ad917b6ff4e1e5b8c18f2c41fa534c7b6e03ad3a476499c154cb12082d7e2e45241a70ccbdadab109d49bdd6ac48f15bdd02c49d8b80422e6b13acbb825673ff
SSDEEP 24576:fMAuc2mU1NhiI8lQQpCp+z9pnI8ehVldJks7420W+0/VcejtJwM:0Auc2mUMI8+QpCsz9xRoVREW+acet
TLSH
T1F8253369DD9528C64B6D2FCCEE8FE552489CE8C602FD0121F2264D1C76AC947C8BCD7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ca

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
Size 1024KB
SHA256 0c3691ee6e9ae5a1a1559d21fd796477aded86cb93111f6817632d51174b6fb1
MD5 67a827c28a44108a3f869620ea25d16b
SHA1 39fdbaa70dd7206bf919efeaaa99ee2be4f0e509
SHA512 b1d1b25bce384fca1781103bb89d7245caf4103b3998b5dfa77e0f780f0ae086272ac070cde63e2d849d7a8898707c526dc6473184bd325c82240982188c2560
SSDEEP 24576:XBHkSKUf7Kc06jiLu5iHLvo742mu8tmNCL39ue4ABDQ:X5T+cVW6EHLv+h5NCLznBDQ
TLSH
T1E12533B3297DC9330555DA2CB86CB141056327E8BA6A96FF8CFBD53AD529023F215C8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 438KB
SHA256 a59aad7ce8b13c23ab84f0135764525fc506ca3929c44fcfe46d7ba7cfff2656
MD5 045356cfcab1855be501fe3e97638cef
SHA1 66ef42e9931c66d0104833b353f6dab860ef3d00
SHA512 fb1d0fe8ea09c394dff8638b74d44b57d754dbb7a3991fd31b3a65a50f373cabe52ae4e2bde70935d1316818bfa260a36f051123d43633551a355c62760544ec
SSDEEP 12288:jaWT3BloFAj/d/GnfuHnI1mbmw6dlB5PP9Rs:2WznoIVefuHI1mCvHE
TLSH
T182A4239C87712AE3DC068A369EDD025C2791F6A115845F2690FEB39E1C12D92DF2F09F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
Size 268KB
SHA256 01a484207b64a59cfa4cfa683a7ec13d5a23f909aebaf5c6f1d004971e651a1b
MD5 9a1ccf65309ea7e15bea7d9aaa754a71
SHA1 a920efa1c08819ff0ccfb52a118ad2e0293cbcfa
SHA512 e536eb40e8baa5c38805c76cdf6da6619720cbb971aa0b5f110b4f3debfd2b7c7a261d326b10a99a24c92cc54bae487b31c9bc44ccfdae73c4149c89ee22bcde
SSDEEP 6144:BsH5p7l2uE7dGQOmPb/W3FaYYpb+GMPi/0/lCKYfXDWSkizYpsh9:BapQpb+1aLb+13YzPzYpsD
TLSH
T1B4442364B39915C3C9DA8BB070E16B45735EC8B8A2468B2F12481B716CEB3DD1FA6DC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 1024KB
SHA256 77ccf10eb1a46c2e43baf2438e7442e79f24a742695115288696a9a2b3a31f06
MD5 96c8ae2ed86f9f43ce8075e3552bc858
SHA1 54b1b801ba951f2828fb7d685f2c2acb5b605240
SHA512 0170a03e57897db185fa1617437317a463e9793f3e0ef7f1d52385062c37a00763c9d90793f1364fb986d664f4dd401887d71b07f441b8907f958620fa2af4ff
SSDEEP 24576:l8f84tcg5bEpInj8dGj8xbpTtg7TSI7VuQl7DiPJWvtqHN/ltRk6E+cqGtKo:lwdB5bNIdo8m7rIQhDiPQtsN/ltRRFXo
TLSH
T14925336BD781A1D1F930938E56825EC164373D447AAD06AC01DECF52A37203E91F7ABB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
Size 1024KB
SHA256 c3338291e46abac97c2b75558acb8c857bd96607148da26f65434fbb66d452e6
MD5 175f9693d0cef5cd93e4e9568e8ed2a4
SHA1 38a9e56e81678ea95736e24b0476ed1614943e8c
SHA512 7d200e5070af1e331a719a709cdd8b52f3b47bae27ad8f99934fcd421f4b3883fc94edd57d0de3a26da945638397b7052411549278581ce6574ae3295e67eaef
SSDEEP 24576:kB4Z7teyOvQsS5P2xmM7aQT+HS5V27V1HsfzywtDS+JMk:k6wbvN0qeQT+S5afHsLJFn
TLSH
T1C725334C6FC7C10BCE58ACD37A570B262E0B4859BE727831C729C156B2FA021AD9B7D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2337fbf81e087288ab8fbee502da952731389209bf502067606c2299ceb185ff
MD5 21f53f3b79074146b5bd37b082442a1f
SHA1 741b128806b9dca6b63117a9787e734f4bd146e8
SHA512 fda3829551b04b862b0fb2690929fa93194dac99ac8dec081217f3c2169e37d0b3f31181696c5c2f44ae599477e7cd5e5690e27658d5010b75a6d641d92c56f6
TLSH
T18571D49243A319C1EB247775A0E12A6B3BF45A75CD27EEC21F871EB46916F9232C0427
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bc9f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59bc9f.TMP
Size 3KB
SHA256 392a61f263f53312a286566ab774ad1499725491d47db3858d01ad81374e38fd
MD5 0f2c438a96ac241db21b592dbb3ce233
SHA1 7915484085e8d30ff3ae1c3da7d1d66e248aade2
SHA512 4002a3263da40f26c7797eedaab3ca16d47976d212d0c1b0a194cf564bac89a3da8fdea7c62120e9d08c7933e618828091ca3673444282976fae7b2645323070
TLSH
T18761E8A1436749D1E7347776A0E05B5B3BF49875CD17EEC62B436EB06906F1232D0427
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 9b86f90911890123a380f23051c65676c4576ca0c5afc375497641bb74c4a720
MD5 2053c8668203346e691fc7350eab43c4
SHA1 5d1f92e9552cc2f930394d4539c09a2830829890
SHA512 ebfab7ca2c71992ab0ee8d9d3dc9b938b3b056887206ab8ed00356dbc039a807f9c98c6a722df1390ce418e2347c769bf03a4273872707ea757ffd1af72e4ea0
TLSH
T11321B1F7C6F8557D894182F467147E1BCE2D0814532C3E9AC4D4AF6F93E2871D24095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 4ad3ae623b1b8a70d61ff29a3e95587c6eb8d1f5e626796fe398f7a8dd650cd9
MD5 06864c092d83a412b4feb6814e8ab093
SHA1 7101383807b1b097ea19b420b11e756239992c7e
SHA512 72c8885842cb2b5ca57dceb700beb9da979845f35eb4286d30aa14a2c1479280e5a5ba7e5a85ab6c4879e7b17135622432d937168bc5477609508c998b19cf9b
SSDEEP 96:DZOyxb3uaxJ4zcOzOprGxwpV8RuVdGxwBj6Vx:Dcyxb3uaxJ4YOzOprGxm8RuVdYkj6Vx
TLSH
T128A18BF7C7E4866DC90196F1A7187F1FCE1E0958825C7C1E8AE4AF5B93E24A1E10198F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b8bb48804d32b5acf35afb7719c5c2e5cb1e1f4786633dce5ceb1f3ddb83bde5
MD5 58a1e2a6d30963b90556bc1c96c44b41
SHA1 3a780bbae049d035fe28b55e36cc16d028628627
SHA512 3cd096533bab63ef9be758badb874904b5808b391ded0afe4167a72db587560b96f31c006d7facd870c5209a179179147b89a3347637acc4e351dc649cd36810
SSDEEP 192:sxRxHRXVyM/jK1Ml8wbM/fksIDPiHm2Sm7aEkzoD8ptU/g6+WNhBG/Y30LVGRIgs:sxRxHVvlM/fksITi2ry/5S/Lus
TLSH
T1AE62EB166A349D3BDCDBD209F9567F53D6F91563A2D01E04ABFC8A0C00E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c622c280a68eeb44dcbcf1511f2c75d910421dc3054445b8018ab8be5351f152
MD5 432fe0789ad72bef59c8ae3789b3a1ef
SHA1 51b2df33facff33a6fc5d0e1d038826f306fca52
SHA512 9f5721bf109323068318d86c2545479af7b487e5dad71238c943e904f8bad89708da574ad44f053d5262241b7a83473595928dd49c7ad842808bc4b9f3fa6a19
SSDEEP 192:sxRxURXVyM/jK1Ml8wbM/fksODPiHm2Sm7aEkzoD8ptU/g6+WNhBG/Y30LVGRIgw:sxRxUVplM/fksOTi2ry/5S/Luw
TLSH
T13462EA16A6249D7BDCDBD209F9567F93D6F91163A2D01E04ABFC8A0C00E67EC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 506a93687c8af98c5a5837685b2e3f5d0910a7be31a93b54542306f5bbfc611f
MD5 088b5e458644ed147056e2980b2f8f4a
SHA1 70bdfa7ae8053b4ffccbc46543651b19c7345ee9
SHA512 149e78d7ed0eef7aad467cc0a7dae8e7ca683aa88eb27b4567886b61a5434ecfda661266d3290820e455d892e8029637536148b4c97b3ac7ef676c350857d85b
SSDEEP 192:sxRxURXVyM/jK1Ml8UQmbM/fksODP4Hm2Sm7aEkzoD8pPU/g6+WNhh+pY3zVGRIh:sxRxUVpq4M/fksOT42rs/5mpB6
TLSH
T13062E91696249D7BDCDBD209FA567F93D2F95163A2941E04ABFCCB0C00E6ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d028ba1117427079df9fe81dea70e4b620ac0ce23f2766facce13b94c18973dd
MD5 cfef2deae1d39454f8bddb7763d4f5d0
SHA1 bf20c0771c5fa0b2b50f581febb43dccd76a3648
SHA512 700eb7fe4bb7bbc37beca3f81024976122a8014b0a5f7e1a8543b4d8f72f50f7b8f5f3b15a9983aa8948377fb068abc3aab211fcab5f2161534edc0287735c5b
SSDEEP 768:GiqbvkWg0CfDs8F1+UoAYDCx9Tuqh0VfUC9xbog/OV+MW67roZ6i1:GiqbvkWg0CfDsu1jaDF6IZN1
TLSH
T1D5C20B2B640CC77E4F804EADEC26AFD76D9801CB9B988D5447EA890C03C67FB511A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f82d709249e5f458526074174ee214f5b73c06dc5f04a8fca98f5779d4cbe748
MD5 1f89b6debd94851fc774bdf921fd503a
SHA1 72771ffb4389266c6aff5b3a6784048c8aa70421
SHA512 ffb4b4fe22e4c29376bdb04b06978f692cf0969c653332740488874c105ff78328c6c07feb2864ec21bcf1f8834ce5e0d5071119ed28c3a2a66b028fe8a43c2c
SSDEEP 96:KR1i7PF/DnWrw+gXnK4mgpnct1o7zsHI5MYKWaAW+jTgAAK4VgiAf0AKNSeSGoKB:C1i7PF/DWrwfX9mgpct1o7zsHI5MYKWi
TLSH
T16BA1FE45307A16C0787E6A0882A5D92B96C2B4A73068E42F3BE865F51F26F034CFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a276f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a276f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 42KB
SHA256 1d13c3b61a9bed66f642357e00eda748a9255066bd6ef514957be7e61e36aea6
MD5 3cc498c8feec4f00cdb9395dd5fac9f7
SHA1 b21cfb587bad6f3706fdfc33199fe7dad226bde7
SHA512 ca98a56fc7df7881c72a3730128bb57b1624388b2f77bff55de39f78767b7561ea7ac63398a0c848f87fb6e762f5abf5aec9b214bf1b5b008c383c7bce07335c
SSDEEP 768:HF1j+9K35wgskc+wfZOpfo66+RfNzvShCQRfb9Mq:u9K3Jwfqf764fBvSLb+q
TLSH
T116137CF288D78932D99E4757A77E2E52AEBDD163B4845644B7C84A0CCD832BFD707810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 29b43ec163112d36fe2a612945fb41033eaafa3e59c8a81d1df37e5e6da349b4
MD5 0bf0930c99e6eff410979b7065797b52
SHA1 533cdebbfd2454fe9561ce42049c549ba2f7fac0
SHA512 0a65a82d05a551b6ed25faf77005a94f0c89127d57148e136a9acb777452a044ee0a28e67efdaf62113bfaa0a65815fe922428346facb0daedc4207cd9a8dd3f
SSDEEP 768:Rj+9+3vkc+wfZOpfo66+RfNAvShCQRfb9Mq:M9+3Gwfqf764fCvSLb+q
TLSH
T190F2BF71EC655E339DE282A8B74B3B56BEE55273C5C81A48DACC5F0C02C37AD2B1B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 362bad9ba4f837df6addd23586068497a02489654413d87824ec45a5cc1c4eb6
MD5 aa1ce193d7dd17067c1494cb87405aea
SHA1 43b231f5c45a41cd6cba074ad710c0f0d4c7bf63
SHA512 ab0eb415ff0b835ef9c7d7f18006992dce0fc7d6fc8cb044850b4b8e6e12c66ff0bcc549642290fc618e807edc7e3b74733a9ece9747d39de1200bf265369d5a
SSDEEP 768:Rrv+4UNbd43pXkc+wfZOpfo66+QFvShCQt32bwWV:RbsbO3pOwfqf765FvSb0wO
TLSH
T19803D072E86859339DE782487646BB637EB95173C8C54784D6CD0B0D418369F370FC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9acaffd0bf213c9b82f2e72cd0e00ae8c57458d8ab294687bf59824df187e74f
MD5 dccb302d72f34c0d0c9ddf1ebeed0529
SHA1 b05189b0ab98f607c0e36b45bff816b31872a9d2
SHA512 d4cbbbff7d497ba1d55ca70ca3aa5e09d74b5776cc94de9e90a7fb022f283a6fee51ad1f4090d25f82834fc604ae276200ee9188b543a993f19ee688639e2a37
SSDEEP 768:Irv+4UNbdk39kc+wfZOpfo66+RfNdvShCQRfoVd:IbsbC3wwfqf764fbvSL4
TLSH
T11D03C072EC785A33ADE28248B2477B53BEE45163C4C95744DADC0B0D42D36AE271F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1413e743-d5b6-46ff-8f9a-47762b25d0f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1413e743-d5b6-46ff-8f9a-47762b25d0f2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download