hxxp://monte-carlo-online[.]site

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 15:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://monte-carlo-online.site
Sample260723-sg99cseq3w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1884	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292928329175756"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{519C4B90-57FD-4679-B5EE-94BC55CA5391}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1128	msedge.exe
1128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe
2972	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2972 wrote to memory of 3684	2972	msedge.exe	85
PID 2972 wrote to memory of 3792	2972	msedge.exe	86
PID 2972 wrote to memory of 1884	2972	msedge.exe	87
PID 2972 wrote to memory of 3792	2972	msedge.exe	86
PID 2972 wrote to memory of 3792	2972	msedge.exe	86
PID 2972 wrote to memory of 4284	2972	msedge.exe	89
PID 2972 wrote to memory of 4284	2972	msedge.exe	89
PID 2972 wrote to memory of 388	2972	msedge.exe	90
PID 2972 wrote to memory of 4180	2972	msedge.exe	91
PID 2972 wrote to memory of 388	2972	msedge.exe	90
PID 2972 wrote to memory of 388	2972	msedge.exe	90
PID 2972 wrote to memory of 4180	2972	msedge.exe	91
PID 2972 wrote to memory of 4180	2972	msedge.exe	91
PID 2972 wrote to memory of 4244	2972	msedge.exe	92
PID 2972 wrote to memory of 4244	2972	msedge.exe	92
PID 2972 wrote to memory of 4244	2972	msedge.exe	92
PID 2972 wrote to memory of 4424	2972	msedge.exe	93
PID 2972 wrote to memory of 4424	2972	msedge.exe	93
PID 2972 wrote to memory of 4424	2972	msedge.exe	93
PID 2972 wrote to memory of 3392	2972	msedge.exe	98
PID 2972 wrote to memory of 3392	2972	msedge.exe	98
PID 2972 wrote to memory of 3392	2972	msedge.exe	98
PID 2972 wrote to memory of 852	2972	msedge.exe	99
PID 2972 wrote to memory of 852	2972	msedge.exe	99
PID 2972 wrote to memory of 3532	2972	msedge.exe	100
PID 2972 wrote to memory of 3532	2972	msedge.exe	100
PID 2972 wrote to memory of 964	2972	msedge.exe	102
PID 2972 wrote to memory of 4740	2972	msedge.exe	114
PID 2972 wrote to memory of 3588	2972	msedge.exe	115
PID 2972 wrote to memory of 3876	2972	msedge.exe	116
PID 2972 wrote to memory of 4256	2972	msedge.exe	118
PID 2972 wrote to memory of 4256	2972	msedge.exe	118
PID 2972 wrote to memory of 3420	2972	msedge.exe	125
PID 2972 wrote to memory of 3420	2972	msedge.exe	125
PID 2972 wrote to memory of 4552	2972	msedge.exe	126
PID 2972 wrote to memory of 4552	2972	msedge.exe	126
PID 2972 wrote to memory of 1128	2972	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://monte-carlo-online.site
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fffe38cc188,0x7fffe38cc194,0x7fffe38cc1a0
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,17658774080407533033,352378905409089408,262144 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,1713127502307916653,8235101515984997812,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,1513481966254200364,16190877725110413706,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,18144824341381983263,10160550615812903226,2097152 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,1887330004306216925,13936648885930398805,2097152 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,2131472737036459315,813618412973142288,2097152 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,11030431733323917500,9791343115492135721,2097152 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3708,i,1869011032636287914,12118496584023523237,2097152 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,16669354428791101287,5010824324920691692,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,13133871743014026802,2910719612679602322,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,3009196455214886366,12972927047676490717,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,3009196455214886366,12972927047676490717,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,14009680043702910845,8470837147183704427,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,14294996406401394092,14151186797282733347,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,10183411184660390763,2164795006568615241,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,9261835343968222402,16914096154829731331,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,15394554497711937420,13032145019692998419,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,7428085936223527652,2258228067667687131,524288 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,18174416146524610884,12940581244947902848,262144 --field-trial-handle=2248,i,3588812394313940689,9382639974993271878,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 8320d6e5159a25ee0a4a5435ff1b85119aa982bf75124f565f0269deabc38c25
MD5 f99182df008dc6fa037ed05c6ca924c0
SHA1 21f23ebbdb3eaa01287bd71deeac5f26421a13a1
SHA512 e096b0830f23a29731de2295246d412b506e7d8d19110e7f7dfe29c4409e2edae9858eff26b299ad82f14acab35dc0eee1421fe3350b8eeaa6e1e7cf1e38be2a
TLSH
T100E0265633C6D2A40282A6C7815CF39F41927119EECDC85A335E7399E8409804369684
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 116KB
SHA256 0490af691a793726592663a333d8d82bceaf02abf58c1e72047615d12460af41
MD5 985624c5e709f39a5e52660895d63983
SHA1 2e96e05c30586745a57da482ae04b0d81f5a5059
SHA512 2d27543017fa03fbfe82558effc003e0112637dd9e28edca23844b105e2798d0708ac01171d9e4299f99fe5d594510caba9bac0d2fd2c8b18508ae33d5812211
SSDEEP 3072:IZ0no5TFN14N6Zyi+YWvM1xsjET+ar85SwbDWGRG4:+0nW6NOyYX1AY8PWGf
TLSH
T1F3C3124CF633116CFEA6A6285EE8FE54FCA69D86DEF8B5D2100D0AD4547C1E40B1D2D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 101KB
SHA256 572388e2039bd305f92454262e0f05cad18f7b800b2a1d70250d463a7b83e08a
MD5 77a6aa4703384f3c1bc37688a20d0a4f
SHA1 fdb4be4b96cd142df61f9ee637ec77b7012cf363
SHA512 e07c2e817ca5a14e7588b9167e0efa8f09458c79b099185d5bc09643a15eb1cfd7539e7a6e5bf4e6d2ca5200550bb8521c876e29f7d3b09d40888878044ba5b2
SSDEEP 3072:kwQPMMyz2ypT9aDN+Dm5bxHoA4xFtXtbZT+3DBm4:kwQPxQ2IS+KbxHoJxFrZ94
TLSH
T165A302FCD673CD00829361FDC1F273EB86A65335AAE1CF537B61A98B0E818D11A61547
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
Size 103KB
SHA256 250c669f817560e502406b190f33fa5d10366d85f39eb6d21898dd506058c7d2
MD5 32dc8c07e61a9ff6a55ea31ee104ee53
SHA1 b354f4d69ccef7b8e6df2a6308a53f0463f18b5d
SHA512 ea95fcd3ad4cb5ebe172ee7db7f7860bfee706b9ffff17baa9e2a9c2a19968a1e5cd9f6575e69882c4f12622b0528c09102dd0c87fd7c8b5da5ed97d44f5a4da
SSDEEP 3072:nXf7tUJdZonZ2QkkunUTWkvZARX/q2A8LSRgg:nv7b8Q5ucvwX/qb0hg
TLSH
T110A312756B4BCE9CB49F9056272F808C90AC4D429A8C1E5D305E4C3BE36966F9ED923C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
Size 91KB
SHA256 82943353c6e8a2d23b4392be98b2dc824bd0352931a48ec2bfba263092bdfc64
MD5 34edd4baaeb07ea51ebeb70eb229e843
SHA1 0272ce8dbc0be8ef0376b583cc20c194090c0792
SHA512 a38325addd2ebea4362ffb06e36fee914b04441b319f79333c4fdeb34f579e19351d605a80868c9886965e0f1eb9ba1b148d6589c07c72e615576a6151acb442
SSDEEP 1536:Cdf81B3t+GUiR239RDSE84bdj4LWAwSROpzDTo5uZg76QLbaDyQzU4Wxf31Zj:Cdf8X3t8s23jDSp4BjMspTo5uq7naDyj
TLSH
T13493026BDF3FF4BCA44745A2083B022793DD728683E17EE23851699736CC9306615BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 86KB
SHA256 bb7b514f0a2c76a75735cadad69e10517483eefde8be86db450e6ac452f41903
MD5 3d8ef3de4af41239437871b99509af17
SHA1 5aec3f353f56889732369709a5e068918aca7bc6
SHA512 1a6f7e72a8f41a43499cd4ad5ee44de19812b47eec55b46b082ccdf2832a5fefad4032219ecbf90f2277e58e25843e5e8b3b977d7dd89335f8141a86eddc3a03
SSDEEP 1536:caXwAX95d6iCWGXoKpYYSY4GC6vpfVYpsDd3GL9gff9i1W/DXIWfXrd0jsiAKUcf:caHXdMGKMY4GC6vjUsDdfz/DYWf50AiF
TLSH
T1FF830298C87B5D336F9CBEAF7AC9B81A67B81100D357560034F50B8ABE375C21877065
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 102KB
SHA256 d545c1189112e0429aa6b6a984f79f155bde712d6005abbd7852aca3433cec1d
MD5 d5658638b2d9145bbd1ec5059301bb62
SHA1 744c738e92d929def6e193c3b2347e12272c4b1a
SHA512 7af7fce71b2dc315c38c2c8546106351db44260e4ab7f0dd5baf41abd51b59424699aa6f7d9f6624e91fbc038a92c8415a92592550d6a3d7d2c89701c95d8193
SSDEEP 1536:4L5t5D/ksshYWxhDU0XHx1ALTlqLgmZSlsjD/lmDq6CJlmcLtkRCSACX193/crA:85DbshY2B1q0tZSlsPvlmc60xCX3vcrA
TLSH
T1FFA312DA4372692958014EF7981F2714EEBE8C4DECFDB1A55DB96DBF3898CD04805700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 102KB
SHA256 1337220795816742f7c53dc9e802d06ca64a6e267d244471087004c34f4cb68f
MD5 05dc98fffca4942fa872a70b5699beb4
SHA1 ea5aa871cb9ba0fbd4731aaf4b76ef3dddde7c57
SHA512 7ddcd917d549154e70fae3c13470625d826275af89beea0f59f8a714debe9d5d0d16af395fc2d5782a1b46a215d2a9c34dc56f00edfd68dea5a4e21d21fd9582
SSDEEP 3072:01xhzyUfO2FU+p0Wes4Kx/o5jZjowQnwV7aP0ohIc:0jhTlrp0Wh4so5NjDMwV7hTc
TLSH
T16EA31246D3AFE5AFD308DB3940E07D9F48F81333D1622A4FA89376E126363A5D152936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 105KB
SHA256 bf449301ec8b6d69025247eb06d8b465c83956207b58fb31ab87e6d1385e7122
MD5 6a76dfb1a8a42e3b7fefd7a5f7324349
SHA1 59c5d73d58b30101d4cdeedf65e410d6f447740d
SHA512 f78bc60353851dde5c2ca23a81bac6d18eb52ef8ecfbc91c0c4fdca28145654cab20841f5ac4a984091c9f45fd34830728e82a6d2f94fb01d07e519a4e62667d
SSDEEP 3072:J8RbjZHRrOO8lkkMlnV+AlAVHRFvip/HQ/LLD0Ob1bCC7Q4K:JuRrOJmkynV+A8nvgy0Ob1bUr
TLSH
T104B312160C32C8DA776136E5726BEB9A2FB310CEEA7225196FC7617975F36185403C70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 000fb68e70e25e56a0219b00b02248eac23927c6d1924733022d058bb305d0c5
MD5 85b2dd467806a4985fe7e90c1592ec23
SHA1 94c045cf4bff067acec3f2a65cdb478b036e5221
SHA512 1b9d79b468473a325a61dc9935abeddd81f3ec199ec5d62feaa8daa0dab47de6daa5ee1e772a884a6bcc8cd04bf043d34db12042b985d0811e853f25ff290b03
TLSH
T1EE712B340B526FADFBE11E72E8E147057432D32DDA73FC2D6060A6BD6107727602A11B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c917.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c917.TMP
Size 3KB
SHA256 6a10f09fbcf06220a0569c0c36bd3a75bc4e3596f54ccfea998e5fa87fefba67
MD5 2a1fab945b77251444956b0717cfd250
SHA1 083ed5a228de688d13d1d0a2421e68c2317d1613
SHA512 d7f76d4531e06a23361ac01bcbead05b2b14f509301d652cad7c95abf58cfc4d4e912be956ab815edd98cdb20f43715a8950b0f6920869247d659b3813649be6
TLSH
T19E611B340B526BADFBE11E72E8E147057432D36DDA77FC2C606056BD6107767602611B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a76b19c037f8a4209bd31cb646d21a067150b6704f85e5b25361d4c1adab7328
MD5 11d817b9f4d05ff61456e8fcccc5b71c
SHA1 94a35a17cdca1a51fa736790645f2efe05c48606
SHA512 80453e120debd79d0227aa8e520cce97cecda4a02b0f94354cdfef64f42f81f14ecf6c27de9da1a83a872ac6f7e886442b2687e2441f3013ef7b089feee83158
TLSH
T135616BF7C7E4836EC82195F4AA54BE1ACE2E055643383C16CCD4AF4BE3E1961E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aadcfb266594862e8fc85f5c4fb3d644dd264ff3ded01765034c4a5efed9a0f5
MD5 c7f17cd4facc5102ef5a8820eb704c9b
SHA1 84345a9a00024469a7afdcbdcb1e9f56cfce5d84
SHA512 a2f2f33f68ce83cdf8bd6175b53e65bb3982563ec4ee11d72d20e5373122954cc821e02faced906ca2807bcf3f9f5d2d38aa5fb644f0138025ec6e9535cde992
SSDEEP 192:sxZKRFyM/jK1Ml8Mko/fwsdM8IdpVaHW6+WN6JO/YL81WsIgrJ:sxZK3Mo/fwsdMlQHbN/D9
TLSH
T1E252FA166A345977CCDBD209BA51BF53D6F90472D2910E84A9FCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fe0e900752486eea19187f6ecd322346df864578fd136ac1077085b47fd569b2
MD5 9278693fff640d33451787c20e9dda97
SHA1 72e69f431264fa05161e78c7450b874ba08459bf
SHA512 4ead6510e3ab19f243b02300013be367a17feb1873305da9fdabc02bbc83115d24016cfdcece4bb81d36f591ff8c0d52c1572dbefca1f2ec36fac24a4cf12c83
SSDEEP 192:sxZKRFyM/jK1Ml8UQOko/fwsXZ8IdpjaHW6+WN64XXYL3c1sIg5fJ:sxZK3qlo/fwsXZl2HbRX4v
TLSH
T1A052E9166A345977CCDBD209BA45BF53E6F60472D6910E84A9FCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b5db2d8ae8918f9d88dc1eed2e1290802be37547fb6496e4dee421d7e692b131
MD5 253fcae2a8aae76f4594e3736fa1ba7e
SHA1 26ce7d12933d6430e33d78d8c62291cb8fdebb63
SHA512 27607a3f611eefd3ef6dd91e694545f2317882131b11b10763cd0f99c3e686efc1c7c71c4ec962d935d9349e3f857d395c213099b753696737050f076d2284f1
SSDEEP 768:n/s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNwroiG:n/s6pD1WvxzWju1jahILIsNbiG
TLSH
T123D2FA3B680CCB7E4F841E5CEC2A6E967DD801CBAB98899447FA444C03C77EA51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 14347b66fef53545a41a687db46b9ff22fe542fac7a5ccb2403965e57ea0322b
MD5 04ee6ecfc0dc1a075a34265d663a1397
SHA1 13ae24838a33184b8d7e1ebb6b8f1d4e4fd0adde
SHA512 efe21ae9094da2d4cd8a1b51b9fa83079d60de81c5f0a21849e77b65ee2df2f386ab52cebf8c83bb6d130fe46e645140ed49192800626682bc48037ec40192e8
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyhoIrKVicPdIxK2cUjy4nIZKYIsg:KUAAKtePiogKVi2dqK2c6bneKYIn
TLSH
T105B1171732B602423D3E3A4883D58B678E8272633119A42B3BAC0471DE66E21DDFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89ceca57-d816-4ac2-8bc7-8b1a54f4cecc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\89ceca57-d816-4ac2-8bc7-8b1a54f4cecc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8db4050c1bbbfd2813e664393b7359296d7742be21baf2be2c168d71e56cd2c9
MD5 fccb73f13962d9a395c44cd89dad8d8b
SHA1 d7a2a739b879aef1417f8cead159a8a69b3e6a45
SHA512 03d0eaa67a750a969ca4e1987552b01208734c28f0c594559783335fe18756e3c37831c777cd20b18877475214681448ca95679a18467d073031721741856f8b
SSDEEP 384:RZcIhsNGb1T32WT4vua91O+MzozJrM3IOObjI9G6w7mDK:5h/3/4nHOZMhM3I29MF
TLSH
T13A927D31AC384C769AF39101F98B35175EF5807BD7D92F84E1EDAF0D019B9AC131A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 579edf797695938c4af4dbc8463508b519ddc827f3bc6fed753beffa5fe01116
MD5 fe178c61f549a6cc4e7d9f1167771210
SHA1 791db9fc7c8c4f00820d749b490825c590241b0f
SHA512 e23413ff7605738293dca3dfe7b8b240bbd92450d2d7678f8361b72d56b535de4736fae2441704a7f9d386afe7a54afaddb2c3ebff73f9143c1031f6926c8231
SSDEEP 384:/ZcIhsNGm1T32WT4vua91O+MzozJrM3IOObjI9G6w7mDK:Xh23/4nHOZMhM3I29MF
TLSH
T1A5927D31A8384C769AF39101F58B35175EF58077D7D92F84E1EDAF0D019B9AC131A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 0626066301a32f0ee04665d7eac9389270bc0ed6fe0b5005695be13329dc0542
MD5 b7a5ccd1e3113085ce596bcad20e1d16
SHA1 8a9f56940005e5f6a27768b1058cd51d8ffd73af
SHA512 a6b981d1bc26542881b9a81354416f460bfe837239674aa2f71527616ba853435901c2cd5aff375d369af14cab8a7563544569dbbd837cf71770bea0f3bfa95e
SSDEEP 384:viFiZcIezsNG8TUNTUlIlm1T32WThvua91O+MzozJrT3IOObjI9G6w7mDK:6FQ+/wgW3/hnHOZMhT3I29MF
TLSH
T1CED22AF258D78836DAAE9703B77E2D134EBDC067F6955A80B3985A0CCC564BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 948ed60b976d0170c0a7d6d365cc7bb5400c169ba2e61d0d9c7849f980e57e0b
MD5 8dd6c8a075bbf1273cfe08583656f741
SHA1 bfda3822639b00add5d2e9da863eca4ec3f2ddec
SHA512 9712396206a37013b0f7076eeeaab5a8b790cafc33c6401ee65c77a934e0ffcaa93a7ff7eeb7429a73a8b455d7c2fc3533829c0b2e80346c7637b9bd5ce93561
SSDEEP 192:qONQ6O7+3hQmiUyG6Gttb0IO25h2sgG3Sv1U6:qONQ614Gt91O+MC3o1U6
TLSH
T1F502D93568386CB75EF3AE45BA8737235FA5112BE9962F84D6E81F0C00DB65C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 83a9efc832c5220103dbf45cb8308de563c6d0c75bcfaf17dc215d9d2bfbb664
MD5 54d2c5639d38f3e29001321cbb3d5045
SHA1 d810f985a2d8880fa34ed021cee19f1e4d3d5a4b
SHA512 48f513dca527649ad3c07999f748131301dd6a75960228e83e2a14878da9c042c8b2a04abf4376a7b1de0915be64f3ee29fa966a33fdca2de66f0e9b8f683bdd
SSDEEP 192:VONf6O7+3VQmiUyJo6Sttb0IO25h2zMZF0SJrscN3ZqIgrU6:VONf6t+VSt91O+MzozJrF3IU6
TLSH
T173122B35B8289C775EE3A545F98735139EA54127DE8A7F80D5DC2E0C01EFA6C234AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2255df6a-165f-4694-aaca-180c9174adb4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2255df6a-165f-4694-aaca-180c9174adb4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 380ecb310fcb3c0741c10beadfbbd544904b29d344b30f3ae669a28ba2775c96
MD5 2ea218a88bf54c1c34c136ec0acbf198
SHA1 a6e0d602dcf430ae66408bdd504fe822a6c61a5e
SHA512 6b69c66b2da404b720863d3459a937ccafdde68f19d473a0cb93ebd5be4fd4c571d1fd1084edbd0e127962fb6d3a3a75f2585596add4ca881896916e98560272
TLSH
T12F412A98B6F91148B3B37F596BF6A86D447FB9671E0AD46D00110D8E0A22B40CC71737
MD5 SHA1 SHA512 TLSH

Submit Download