hxxps://intuitqbooks[.]com/unsubscribe[.]html

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://intuitqbooks.com/unsubscribe.html
Sample260721-thrn3sxvey

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1704	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291234495780746"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{7E31FE46-7770-4750-AC9D-22A3AF5500D1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1268	msedge.exe
1268	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe
1416	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 1416 wrote to memory of 4620	1416	msedge.exe	84
PID 1416 wrote to memory of 4380	1416	msedge.exe	85
PID 1416 wrote to memory of 1704	1416	msedge.exe	86
PID 1416 wrote to memory of 4380	1416	msedge.exe	85
PID 1416 wrote to memory of 4380	1416	msedge.exe	85
PID 1416 wrote to memory of 4436	1416	msedge.exe	87
PID 1416 wrote to memory of 4436	1416	msedge.exe	87
PID 1416 wrote to memory of 892	1416	msedge.exe	88
PID 1416 wrote to memory of 892	1416	msedge.exe	88
PID 1416 wrote to memory of 892	1416	msedge.exe	88
PID 1416 wrote to memory of 1276	1416	msedge.exe	89
PID 1416 wrote to memory of 1276	1416	msedge.exe	89
PID 1416 wrote to memory of 1276	1416	msedge.exe	89
PID 1416 wrote to memory of 2412	1416	msedge.exe	90
PID 1416 wrote to memory of 2412	1416	msedge.exe	90
PID 1416 wrote to memory of 2412	1416	msedge.exe	90
PID 1416 wrote to memory of 1996	1416	msedge.exe	91
PID 1416 wrote to memory of 1996	1416	msedge.exe	91
PID 1416 wrote to memory of 1996	1416	msedge.exe	91
PID 1416 wrote to memory of 5008	1416	msedge.exe	96
PID 1416 wrote to memory of 4292	1416	msedge.exe	97
PID 1416 wrote to memory of 5008	1416	msedge.exe	96
PID 1416 wrote to memory of 4292	1416	msedge.exe	97
PID 1416 wrote to memory of 4320	1416	msedge.exe	100
PID 1416 wrote to memory of 1920	1416	msedge.exe	101
PID 1416 wrote to memory of 1920	1416	msedge.exe	101
PID 1416 wrote to memory of 1920	1416	msedge.exe	101
PID 1416 wrote to memory of 3936	1416	msedge.exe	105
PID 1416 wrote to memory of 5072	1416	msedge.exe	106
PID 1416 wrote to memory of 3476	1416	msedge.exe	107
PID 1416 wrote to memory of 4712	1416	msedge.exe	118
PID 1416 wrote to memory of 4712	1416	msedge.exe	118
PID 1416 wrote to memory of 1156	1416	msedge.exe	120
PID 1416 wrote to memory of 1156	1416	msedge.exe	120
PID 1416 wrote to memory of 4548	1416	msedge.exe	121
PID 1416 wrote to memory of 4548	1416	msedge.exe	121
PID 1416 wrote to memory of 1268	1416	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://intuitqbooks.com/unsubscribe.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffe392dc188,0x7ffe392dc194,0x7ffe392dc1a0
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,16825932096971508022,17311994842181972338,262144 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:2
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,4833310769887526649,11391882227006397614,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=3040 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,6554249141730587723,3877435887700951341,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17729762734544610383,5194650919317626052,2097152 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,8278320271128895439,7365756294455618687,2097152 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,6486131306611819095,7038524621326966342,2097152 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,5604397543609511725,7310874415900105765,2097152 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,13088646501563368274,10768377766203715430,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,8891066533714801724,6770221702139266107,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,14833451021095710746,16946873092304202783,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,14833451021095710746,16946873092304202783,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5644,i,14826031495468377851,12409691490127896668,2097152 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,14341034477160738313,18444655124807084912,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,13243586373785261215,10540529498082560885,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,12796004312914773690,4937925336619154716,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,12687235429369078832,11605223808591644658,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,12421374908155418708,3549193444652360027,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5508,i,17115697044187570196,11956303988745917889,524288 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5216,i,10735390219999549831,15045190335010559359,262144 --field-trial-handle=2924,i,6219595109811202904,5083442926647604492,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1268

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2516

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 2c96397e37acd0a0d3af19827f5fcf1a8700d81cf6c7b16b7569d2e25f70838e
MD5 bbe3ef29ec220963b4e14dcd6bd8daea
SHA1 d282bdd21b1afe01046da9cb847ded0ec7b4abf2
SHA512 b7cbf68b4166cdf7676c6ba6a1ff89e14b0904347dd51fff60791f7e6728471caab48738472b82dbdf26726f1e872bc2a08ed06fc8965b5e4f0a96f88352de74
TLSH
T1C0E0D8A51280C5B411B8F4CB816CF325C516F31F9B4C8876332C76D83481C85936E899
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 fc2e5c4b5f2f12d0f0c4bbf34ad4da12f2f8270ed7555c81e1424ffaf58b44f0
MD5 e4886d7ec5fc7a6ee2dcd5b81b4728dc
SHA1 619656267cea73e7d8332dd4a717378a09aee63f
SHA512 579caa5aca2a117ea5abb6ffc265a8e965b483c83527e412d0ecb57debc8febd4d8903b1f9d9ef19ca1272db016716aff91fda7ef59251973ed3b56a40f342d0
TLSH
T1F581E7B4810B35A9EB0C4F3190DA0D5A32306AE9FDFF3FAF5D8424B98778355052B468
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9406d8a62447729c5b39047c6bbddf316463fc277e1328e5abfae678f85e0f44
MD5 2ad47f5fbfb5ae6340c876c863e13221
SHA1 eba45d8c3b9de1f602b1a1b57d7ce70b73c70193
SHA512 983b72364a0c345423d4bbcaf87cdcb64b25225b2e9771e783c4e91e4e558c13fe928a0f698b35dbffe6f91f7199d7084ace917b835553f25984eb4459f52312
TLSH
T17181C6B4811B35A9EB084F3190DA0D4936306AE9FDFF3FAF5D8424B98778355052B468
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5870d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5870d6.TMP
Size 3KB
SHA256 e723bd5676abdac967ffe0c3ce33c0757a8470f24bf689958a9ff6fb699ad42e
MD5 93276a522b4b711c2a9dc4447be502f5
SHA1 d6fd342b54831026c188d02d7153848d6ff2bbbf
SHA512 d0618a8813b2aab196405297df0873098d764e3643aebdec94f49c1159c193adcd8f561bc85991419d9a1ad93a4a12b5e36f154d084fbdc065c6c6661e5aaef8
TLSH
T1A081C5B4820B35A9EB0C4F3190DA0D5A36306AE9FDFF3FAF5D8424B98779355052B468
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 696dbd45b237ebdd7f76646dbf32f287aabc232e4ff76ad7b1f820c174671adb
MD5 ea7f4f5676e33d0a3865d84a6958d609
SHA1 8ec5eec0d3b54e553f6585813d3bb2cb988db406
SHA512 281e948104fe2c8e85f7e58d7e626f853e5d348e7e43fe3666620ac48849d81bdfa7a3b6892f9f05f56b7914a3d2aa8a8374524b212620a64bf0890c824d5d7e
TLSH
T174418BF793E48A6E891156F1AA147E1BCD1C0615872C3D1ACAE4AF1B93E3070D20175B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 05c61eb9dd9a6732f59336ad7ec82f95e284f26062eded4b8bbc298d0e6141b7
MD5 e143847e2c1bbc9d6ee5da44f640d11d
SHA1 90fe8328b68e056a95cfb001fb5e623b178e9c8b
SHA512 eb783e3b07b57a5f34b098e7d239c3d8ce61ca484cc61937d7b5c764a596c465f3b7c72c77b6c19a6057ad2457e736ed7b5d99eb60c31bef54186b4216f47458
SSDEEP 192:sxZWWReyM/jK1Ml8Mk0/fOsclNTVKEdpOSHW6+WNdap/YvjZjFvIgrJ:sxZWWEM0/fOsclNLtHbm/GRV9
TLSH
T18A42D816AA34A977CCCBD309F951BF53D6F90562D2940E489AFCCA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 da1381e0c1f841311bed6e004ff48a72144196ac5075399751d32d043649eabe
MD5 2666b8ed05c478dd35669c550c04fb85
SHA1 1383c415a28655e746e05e2a11d35e6b6266a5f0
SHA512 195eca3c169ee1bd1853276d98c84c79da630a74d88c132fa8b0ffccd15671386bb5fd4e20ba875aaae6fb0eca9f8605f7639b4b1ac164fbfb43f765ec2a1c1a
SSDEEP 192:sxZWWReyMojK1Ml8UQrk0/fOsJolJSVKIdpfcrHW6+WNRzVap/YvYMfjFvIg5nJ:sxZWWDqA0/fOsWlJaGHbRq/GVD
TLSH
T1BC52C856AA349977CCDBD219F541BF53D6F91472D6900E48AAFCCA0C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 df8c289f61a1741dc564580554c4a6bedd49eaf31ce24ee13fed29f8b062c093
MD5 d32dda4ca9425b567345ed81e7a668d2
SHA1 3ab0ce016fee05a8db511653e10a83cde3396a1d
SHA512 158c3c6974401d11ab7ef51c420182388c28f74729b62f9935f3460393f995ce0023eb082e4b196659f462fa44458cc066b4b327d5fe8fdb3f0d9d81a9a1c84f
SSDEEP 192:sxZWWReyMojK1Ml8Mk0/fOsJolNqVKIdpOMbHW6+WNdap/YvjPMAjFvIg5NJ:sxZWWDM0/fOsWlNCTHbm/G9VN
TLSH
T18A52D916AA349977CCDBD309FA41BF53D6F90462D2910E489AFCDA1C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e5368ef3dac845561c8ec99cfd1bce4dc57463e5926a3a4d7e351dad980c4732
MD5 b38f34a5da10386f3b08bb633fd5809b
SHA1 ecbce532f42bd782aad7c17c5361371ac7b1504b
SHA512 defc30ca3711b7a483fc0b1dea05daa413b0d4d60d03fb57c869dcbb89f120560b760aed8df06fc3edf2891ad829c344f1da11bf81b88645eb3764e9288fa040
SSDEEP 768:AKseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppvroez:AKseJ3xWvhfynu1jaVcL88p8e
TLSH
T162D20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487FA884C02C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 e1e61ddcbac32603b71ebfb5cf6250faeffe52a0e38d0c8a36ecf25779fcafbd
MD5 63dd1fae6d5079f22bfbcd5789f6b991
SHA1 1e5ea5c4cf521801fd29aee1d2a9357628241bde
SHA512 08e0868ac2e567ef8349bcf5fe8a36c2d37fc2bc2a87814b40948549146725c49c76541245403acb015bf80d81cd01778f481401a5ea8912ea46258ec2778a9b
SSDEEP 96:KYH+Kggm2jGKEYGCusKTasNYJ9b/jkz/GPpFkKhBpDk1d9mbd5g:49dNfdNYJ9b/jC/GhFBBpDSd9mbd5g
TLSH
T15CB14057313F0202787D258CA1A6A9369E8271A73454A4FFBFB854664F26E214EFCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61efc158-0249-411f-b344-cc2d295ff074.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\61efc158-0249-411f-b344-cc2d295ff074.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d652999e09bc040c7e2a59be6b87973605d79f16cc42f9b4685525b7409981e8
MD5 6a9f642fc9518ea22e6bd55858ee0d5b
SHA1 fa2d804c56873a7ddc77c7fa0ba5c8a41dcd1e2b
SHA512 aef6641a9bd8eadddfc2fb621b64ce91fc9054eca452b16d06869335739c5e33232ef992a2cd823e31b4dca65f6ea6e4b190c1f160414f74d4181c27a454b559
SSDEEP 192:zLsNpMQAXNW6M7n5pQmiU1Rh54MThcC5KopE8z1+qBZ6:PsNpMTkX75HtmI5KGFFZ6
TLSH
T140421976BC749C7BADA7B156F04A33031FB4816B9A845F94EADC2F1D00DA6AC130791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 adce050232be1b04056f89ecd4dbf0fab21abf496e1b197f55a4fc33a4bc6873
MD5 b7bc2730e461d05d8c268bb72ec1a3dd
SHA1 505583cc429fda996a2ced0dca4b61ab00b25f10
SHA512 5f8d906678e4c5a5394f738276c444fd7c3c3eb72c3140e5b21104594a4e057c15595255fca9b5ba5da7435dd963f390b84f7551e9de1daabd78063d7dd57a56
SSDEEP 384:qiF1tNn/s3n9SmzsNL8TUNTUlIlNTkX75H1mI5KGRFp+:hF1j+91+wgnQHVlRFp+
TLSH
T187824A73AC64D97BADE7AA95F54A33074FF441ABC5C0AA94E6DC6E1C00DB1AC0307E15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 062a7956a88efc96688f3d48eb4bcac76635633dcb4ff6b24009e75f465c7bd2
MD5 2f282ae4ac60da06d20563c1de486cf1
SHA1 3c6873b61c2bb2428d38a2962fac742ea72a2219
SHA512 dcf04f639f0f9b45672a26c83b5e336ee727862bb3e25e7987777912c5b064bb64ba1dff6791b840fc066470dff3039cf03206518a67e4eb61fc0b3c057cd1d8
SSDEEP 192:uaTSNWMsnMcPPQLz3XX9VofsNp4OQAXNW6M7n5pQmiU1Rp54MThcC5Kopw8z1+qS:btNn/s3n9SfsNpNTkX75H1mI5KGJFp+
TLSH
T103624B76AC25AC7B9DE7A195F14A33071FF4916B96C02E88E5EC6F1D00DE66C0307A1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 79036a11fc0234403395fa7ca36bb1aa253c564dc8e51fb7712b3b96cdc4a7a2
MD5 de90a90d0c5e48b66ad2161a691a3236
SHA1 37a1f9b8cc5477c605c2dbfe289706f577544b3e
SHA512 a3ec68a7f831b42d7f837fac8a0392b3cbf4f0019b7e6a7208c6cc0284fa248311c059446c10a4892eb23ed1b967e77898152b975b04dce72487c87f15513e04
SSDEEP 192:lONny6vMtPQmiUyoJThThcC5KZ847otU/u:lONny6UtR1TD5KhIU/u
TLSH
T10E02F735BC786C7BEEA7AE46F48E27171FA0516BA5905B40EAE82F1C00D765C2303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 151f76841336c17c65bc4abd9e0c13d5351e3d83cbd14c6d493e3984a8681e6f
MD5 dd1f5208d9ed89bd1e222d74ab14f693
SHA1 389224bb9ffde66dfe3d0e46c879212134661712
SHA512 3124fb75ca517cb15f4b76d390db237f74b5aaf4c79573df319dfdb66131634cc4fd0a7e75d2dcd0d7230ee0b20ea28a41df6e9c39f274379494ba88415b494d
SSDEEP 192:uHTSNWMsnMcPPQLz3XX9VofsNp4OQAXNW6M7n5pQmiU1Rp54MThcC5Kopw8z1+qS:0tNn/s3n9SfsNpNTkX75H1mI5KGJFp+
TLSH
T18D624B76AC25AC7B9DE7A195F14A33071FF4916B96C02F88E5EC6F1D00DE66C0307A1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 f502054ee1506b0e2af5f45ad3dc6bbe2427b4d2a11270bda76303cedd8d6f54
MD5 529d2f71cbd973c6bc17261f1453daaa
SHA1 ce0622c9380bc1d87ca2e7e9b6878e0150c12f3d
SHA512 c8ebaa76f49e705422388f59778f7089ef546e37097ee4642d3822671acf2e3ea14de7ea1c95496d570ab4d616cda8ca4e12d1410091df0d06fc256d8ff73d6f
SSDEEP 192:uONc6vM3PQmiUycJyhThcC5KopJ80I+qBU/u:uONc6U3R3yD5KGeFU/u
TLSH
T134121B76BC699C6B9DA3B151F48A33071FB4816BEA849B50E9DC3F2C00DF56C1307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fb8ba972e23365a610ff9a0530823edd0d5632577d56a27fcfe82551cf1aa9ee
MD5 649bbb5126c93ca82dc769469f536dd5
SHA1 40880d3da36bc7ad64bf73322dc04d125b126831
SHA512 66fbded380f560039838b4ca6d07f6e2b4eaa478ce6d6674e5b5bf44fdb399d1839d9ce03aa9a1d2e67d4790fba5963751cdf15144263bcf84efe5300aee1485
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe588cab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe588cab.TMP
Size 392B
SHA256 2d151115fd2083d04a8c1206eeb708d5d179f41a45d338a345712c4ed2733355
MD5 0e8a5ac3ba37e4256aeb85d468d4d335
SHA1 4c05edc18f41278b8c14abaffec114e4247aa6d2
SHA512 455920c405065869ce121cde93000f5a422370d38ed8bc259754e41cfd1baf43baa1f9b36bd502ff92f6bbe2f5d7eb0f9c90be5443072c030819d7ef5f8f6973
MD5 SHA1 SHA512

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 479B
SHA256 df971de1d83c4ec8d8a5317c7da912d8feaad9129307ead7cac91d8819c039d1
MD5 60aeec055cd3bd04b686b14115275140
SHA1 226ad5a7a3c53e4dbc2166906cae70250583b691
SHA512 0567a6078a9f2c06a9054f75a9bf6b745ad3e3735d4b341e44089627a2e31febb2df182dfc3b521cc3bc180bae5d381bff6248f2806a7339a8f3037dff530336
TLSH
T115F0544E8C2EC994FE0955F500D5C3732415AC408EB55E7D6D0856D364861684CC9752
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 2KB
SHA256 b237104ea3f180d9beec1c737a1348d8480bb0c2cb785bf73173397cbdf289db
MD5 9ed24baa91f0b9d6b0922b3f719c4635
SHA1 bfde54f7343d62dfcfc47af7b29b28a51f58758c
SHA512 5bcde51daa84a514885e4c24721fa73df745461116792e6e46d43af7513f829e07431dcd4e27379a3c949c2b568d168d710de3746fe03bfa86db7fabb186c125
TLSH
T12051296626A243BF8E752EB6EF04A6A07EC8DEB416575055C2221AA14CDB0770C173FD
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1~RFe587d78.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1~RFe587d78.TMP
Size 585B
SHA256 24bb71883bf49040b3e33b8dba87f9ba3d031627019193a4bf33ea678ad7fccf
MD5 46f5184ca8a0a4ec7c440e57f6efa505
SHA1 ac226f34711adecccc640adb0b27db8c5d29ecc5
SHA512 b33f1de50e943565b9f71fe1f06237ae76309e381b823529fcb54bde2a7c7e4eec07a63e21b2ac972ac8a19890ea38443b29f8e3d09b52c8dbd57aa3a8777717
TLSH
T195F0B74C00222DC0FACE0AF5E123CB9009381413C009F0CC1C150E20D08AEF74F92889
MD5 SHA1 SHA512 TLSH

Submit Download

75e1a8bf-884f-40c4-ac7e-e101eecc7883.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\75e1a8bf-884f-40c4-ac7e-e101eecc7883.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d5890265b1d68e4e969b8e309215b5254dfbb26c6c3852a2ed285fb760bd96ff
MD5 38979aa2f4b76e2fd9a339abef947eec
SHA1 25c2df35268416697e1d3cbc2b1f6d04287eda63
SHA512 35624976be929490f557994cb9a353acef4927428f49af55bcd501b7841197777c79ceecddc2871a12ecbb9418dbefc51a04192fa730ab12eb576b380bf91cfe
TLSH
T108412958A6E91108B3B76F5AABF3A86D487BB9772E06945E10110D4E0A36B40C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download