hxxps://secure-email[.]e-customer-service[.]com/formpostdir/securereader?id=plzsGUm3-f_ib3weDK_oAeTzDG_tOjq4&brand=5d23e89b44127ee82

Resubmissions

30/07/2026, 22:43

260730-2m7vvs1zft3

30/07/2026, 22:32

260730-2f7ara1ydv3

Analysis

user interaction
yes
max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://secure-email.e-customer-service.com/formpostdir/securereader?id=plzsGUm3-f_ib3weDK_oAeTzDG_tOjq4&brand=5d23e89b44127ee82
Sample260730-2f7ara1ydv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4512	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299243619558993"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{78B1D713-A8DE-42E7-BE2F-D1D0041A2448}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5320	msedge.exe
5320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe
2144	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2144 wrote to memory of 3748	2144	msedge.exe	86
PID 2144 wrote to memory of 3508	2144	msedge.exe	87
PID 2144 wrote to memory of 4512	2144	msedge.exe	89
PID 2144 wrote to memory of 3508	2144	msedge.exe	87
PID 2144 wrote to memory of 3508	2144	msedge.exe	87
PID 2144 wrote to memory of 1576	2144	msedge.exe	90
PID 2144 wrote to memory of 1576	2144	msedge.exe	90
PID 2144 wrote to memory of 3204	2144	msedge.exe	91
PID 2144 wrote to memory of 3204	2144	msedge.exe	91
PID 2144 wrote to memory of 4156	2144	msedge.exe	92
PID 2144 wrote to memory of 3204	2144	msedge.exe	91
PID 2144 wrote to memory of 4156	2144	msedge.exe	92
PID 2144 wrote to memory of 4156	2144	msedge.exe	92
PID 2144 wrote to memory of 1196	2144	msedge.exe	93
PID 2144 wrote to memory of 1196	2144	msedge.exe	93
PID 2144 wrote to memory of 1196	2144	msedge.exe	93
PID 2144 wrote to memory of 5080	2144	msedge.exe	94
PID 2144 wrote to memory of 5080	2144	msedge.exe	94
PID 2144 wrote to memory of 5080	2144	msedge.exe	94
PID 2144 wrote to memory of 4996	2144	msedge.exe	98
PID 2144 wrote to memory of 4996	2144	msedge.exe	98
PID 2144 wrote to memory of 768	2144	msedge.exe	99
PID 2144 wrote to memory of 768	2144	msedge.exe	99
PID 2144 wrote to memory of 1852	2144	msedge.exe	101
PID 2144 wrote to memory of 3952	2144	msedge.exe	104
PID 2144 wrote to memory of 3952	2144	msedge.exe	104
PID 2144 wrote to memory of 3952	2144	msedge.exe	104
PID 2144 wrote to memory of 2420	2144	msedge.exe	108
PID 2144 wrote to memory of 4868	2144	msedge.exe	109
PID 2144 wrote to memory of 1816	2144	msedge.exe	110
PID 2144 wrote to memory of 6084	2144	msedge.exe	121
PID 2144 wrote to memory of 6084	2144	msedge.exe	121
PID 2144 wrote to memory of 1580	2144	msedge.exe	122
PID 2144 wrote to memory of 1580	2144	msedge.exe	122
PID 2144 wrote to memory of 5212	2144	msedge.exe	123
PID 2144 wrote to memory of 5212	2144	msedge.exe	123
PID 2144 wrote to memory of 5320	2144	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://secure-email.e-customer-service.com/formpostdir/securereader?id=plzsGUm3-f_ib3weDK_oAeTzDG_tOjq4&brand=5d23e89b44127ee82
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd9b3ac188,0x7ffd9b3ac194,0x7ffd9b3ac1a0
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,17792817216173518022,16213905354211223906,262144 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,11307028001887336785,8051731222280266204,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,15930512176406678224,10166257508474897388,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,3416056159361480834,6566168428026549069,2097152 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,8372912922631505738,10314463114418263295,2097152 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,5992071275103585059,17898717368550985215,2097152 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,17835494578795631877,6917960876013616702,2097152 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,6685724207171225385,7853355762527073631,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,11944943257425180957,3352031460133760530,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,17317559127852238298,5372363040736725040,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,17317559127852238298,5372363040736725040,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4940,i,16749864332644656845,17897142225289667768,2097152 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,4521519870443064544,1212171315755462568,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,11267539103148176156,246158302333230358,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,2997757738656938916,5846530951289029037,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,3548304131194725845,3362723458079134293,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,3205009089130422421,14429237808441670614,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,3005866258577023280,16877332465280880938,524288 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2156,i,9127537419997685730,2441395609496966893,262144 --field-trial-handle=2308,i,8938812637846514160,4502652164888358181,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5320

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a8f93d3bcce67e58d435db3b23d49faa6b9aa9daf7c5a7f2e19cdffc2c89b78c
MD5 00f320d4adb085e7e4340cc2af2e135b
SHA1 3387e36aaf8723bda31cf9d1cb7c4dafe7322ad2
SHA512 43b7a430f30fcd3446784adcca13b7b99dd4f1772a91bf3365f307fd30a29df18ba402812145a4a5e2f4d917d52c3a3adf3971d07501f97024cfce5112b5f784
TLSH
T1BCE026C486CAC33EF30168478278439CD2E0365FDAC8A94A1B008CAA7201040A79A6F8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 5397adf818e4ec5d2ee37f2bf09e70ddfd18ee751df6ad4e8031108db6d02189
MD5 aac32fa275c78fe8fb9e33145cb911d5
SHA1 92aa6c261927c697e83d820ba46983d77758da6e
SHA512 c845c0ff89341c02e7ff23501f34ba027160ae482ee892bb8363f5bd5b27a045ceff364769bca61fe024202b78cb119fbc262b617987f5e0f86cd4c421aff792
SSDEEP 192:NTvFWnpzsBQDAK1VRundDuAZ/mpdg9dPmAb:enpjAKondyAZfXpb
TLSH
T134D1C43904E28CBCFB344A731BC148D568A1B3FAFA56FF02882499791B2EF85C157018
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 6b634c18aa9424c39e7b21e481caa16d97fbf24a878f8f0d0d8934938de0f168
MD5 4c6571b71bc530fc1d1a820e145ecc95
SHA1 2b48efe37583ac077abf6c44c43add4d7cf7f370
SHA512 9ecdf57e8db6160364ab7e26bbe83aa6b0abcd479837e4b2c2f2a0b0289d2b06dad691e9c06e5ff5cfc8206ff2568bfc8c7c6dece1171925fc009beb671093d6
TLSH
T124519AF6C3E6816DCA1196F09E14AF1BCF2D0556436C3D1985D4BF5BA3B2461E012B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 df71214e1eee8eada7ab1865ccb4962e507dd1fd38d8121e2461d815e709202e
MD5 15fc92342899ff85923bef3bc7948f58
SHA1 1788a4eb248fe568bba0811f61ceae65e75ae0c3
SHA512 4515d41a3b73dd86deecd8879983e844babc3fb88323546c4c9c2174ba388e4cd65414dc829af6a4731e0d2bc70529d299403e8d3eb699f5fccf455578bb2dce
SSDEEP 192:sxZdRPkN/f+s5HicIdpEmyHW6+WN50I9/YzpNXrIgrJ:sxZdaN/f+s5Hw3yHbmi/s9
TLSH
T1B722C956AE34957B8CCBD20ABB15BB53E6F95032A1D51E48A6FCC61C05E7ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c1ceadd5333f1946f2ccdb114c001c589edb9b14cbe7e177f0a3fcadec820b87
MD5 5b49b57dcda2fc689902a3acb44cfa0e
SHA1 1d40e731559e4c5eb62db2bc01395c45bcad9324
SHA512 8aec86a59b9900203605c8d16269fea908d00ad85f2d6a28509caa34f5b69439b79658d9903ab68f2fbcabb2c6ec46d36a97df1506d7633a8e42f1fd33125c89
SSDEEP 192:sxZdRPkN/f+srHicIdpEmyHW6+WN50I9/YzpNXrIg51J:sxZdaN/f+srHw3yHbmi/sV
TLSH
T10032C956AE34957B8CCBD20ABB15BB53E6F95032A1D51E48A6FCC60C05E6ACD230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 da00540f96835681869384fd04888848ba1cf5b155205a32f4263863d25bc7a2
MD5 b817df48ee6bd335fa169a21b45d66b7
SHA1 9afad33f459e600949dd44fbb962e8dfcc561b97
SHA512 d1cbb3dc2c873b78dd8358938a5c495fba5cb1055255fceb9a4383f6ea564919e44cd486c403b4c301bafba804d8bcbcad3e0888112cb0c6120bbc04eb0ad79c
SSDEEP 192:sxZ/QUnORPkN/f+sr2irbvrMMddpmMmyHW6+WNw5tWm20I9/Yz5PXrIg5fJ:sxZTnOaN/f+sr2WVyyHbWNPi/E7
TLSH
T1BB52E917A924593B9CDBD21ABA05BB53F6F95032D5955E48A6FCCA0C04E6BCE2307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9b21c9ccf5f5de2e24b99832a9439723f42f3d6cb4a07607ebd6a1a36cb9d775
MD5 43c035a38eeec43b85540c151d73d950
SHA1 484795a6d93aeccba000f9d6884bb3dc949e10df
SHA512 ec042ab9d3179dec659a5757c2fe1aa0dac0a6ed9949e213ce81d325329d094a8cd13355e5a1889c245fa029f99393414ac158621033a541d2d89ff7096c9c39
SSDEEP 192:sxZ/QUnpRPWON/f+sr2irbvrModpmMmyHW6+WNBWm20I9/Yz5PXrIg5fJ:sxZTnpwON/f+sr2WFyyHbhPi/E7
TLSH
T13752FA166924593B9CDBD219BB05BB53F6F95032E5955E48E6FCCA0C04E6BCE2307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 37014c06ee414c23aebb9fb71540d6fe418317e0c7df229ed288d989c061a6d2
MD5 0432488f03e909396c8c1eeb6279d057
SHA1 7c076402e279e437abec813058d02657cb9bcaef
SHA512 770a21b780623bb1515bde5116aaa00c53f477d89a5d2be6993ae325d0b91ecf98dc21472a53388d74e1f49a36d080fbe73542392440b1d9f3afedb9e20156bc
SSDEEP 768:r3k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBIroyLYU:r3k7u70WvqiEau1jai5LA3BzjU
TLSH
T1EBC2E93B740CCB7E4F801E9DAD566F973E9802C7A6988D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 504B
SHA256 794a40142c81d192cc96a868ea202a6c8b7882c5d00c26a785338eaf6b795d6f
MD5 08e9bca3177479cbe1ddb5877e28529b
SHA1 e871c70b2a6d24747737f29134be3fd1de21ae86
SHA512 6156f4cf93bf6ed1aecf3ea023ac19c56faa635f27ef1b0fb064b6069f5ae2079dbb0f3ef9ec0d0492b11fce4be5f84529a404cdfeffa0c3963a818e179ca8c7
TLSH
T1A7F068554F90542ADBA449F324BB14E273B1CDED7272C85B083C7CAE2C66398612B188
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 3KB
SHA256 a83f72f24203eb1151737ea7ab89d4c5fc2ee10952b1ef90c66509ebcac0ec1f
MD5 0386b4bbb4478c3235fa1319b263d6e4
SHA1 6c5425ddeb463a5eb3c32837a8aa683876d9f128
SHA512 ba29e58104f1da0af7166ae813eb3040aa294683c636b839821ee63dd56bb38836f2411cb187f1cc83e99cfe0ca8bab6be1394506eb72140d3960e81b7c7e26e
TLSH
T1A851A74E4D4B7FA7CD9D14B328F71886333164FE46848B07959CE9307CC32252D6E959
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58aeb9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe58aeb9.TMP
Size 504B
SHA256 ee485af693201f89a3540bab93602268944dbefddf8398b5479f2c13f99e5727
MD5 9a717c490ae84daf49463f459858bac6
SHA1 e31d74a3b1de223753477424c5d45991f80ad676
SHA512 01151ba4b9bc8921e854b02e3a6ba099a93fb0ef684c715a0f4944be3333e7e49be3f3bf050525cf35ce98daa908ccce65a03abf7fbe711b4cb6418e50328900
TLSH
T11EF0C08587914407EA2009B7159504E6B371C960B171E8826439B82F2C757C8A51318C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 47686d85a79d163d0479decf97162b5998094241a824572abb613ce69d9ca821
MD5 93d1db0e7caceccd8ed73e1c28a6d538
SHA1 362a024bdab44a69bd99ed0bea1cf175b23d4935
SHA512 afc790c08e9e23e217e166c69faa8b4e573f84af6905b993e0674c64c1b74523ded4ed0e9f8553e4539d354b6ea56032d934c710cf304af0155c3e7f86da3a6c
TLSH
T190A002148BE00115C11291B3565727423740C894A100574750A10484CC50C908D8100C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 221f53a5d2b7ad99e2c826fc70b15dbbcff0426c20dfa158ee40fbcfd8264ed5
MD5 0d776de05304ade980ba5d7144634b19
SHA1 6c9d728d8a4f8c612b4ec37f3d47c6a487c9c6ef
SHA512 318a9c032c4407947e23e5fca8f5188cb4edeb0fed5d80df24002d3b52fd0e32e294b6560852181b0db2cd69c5233c7d68190b7708d39ccdaab41dedb34d5837
TLSH
T11AA0022852C04555C1129AF139D6364122628D1006171B1A41901844CA5094547811BD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 abd9eeab6d855b44b7d8bb940327c44271121c47b384d0153b2ab5133c3963e3
MD5 05a3253c70c57083a827a875fce850b9
SHA1 04b9907d1191fd470b0d132bb9a3b863932cca1b
SHA512 b1dd5b17816b4bf6b40955e77cc7892313659303d630f69dcc4c267d232ca172093b47335092eaceab7f89e4758011ce1a1145538f10c3510a702b77e7bf63d9
TLSH
T121E068BB2DFB1C24AC6F87C138B068A0818538188500EC4E3427A29730F2351280AC21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 55b170731d65b1e97aca376ead1cfc2e92c597d7ce41586560d420f288c65012
MD5 0b51be470b45570833b26d4c429ba4ca
SHA1 11927d38bf408da78b8a99e78a61f747f3af9eec
SHA512 f61c26ae149fd4157aa97537dcfa5b05274e7cdfd938a21aaefca22b562260d72e6866c71b01c800fc26030b9028af32d6b3f3b767b0b260f9f4bd4b2f90a66b
TLSH
T130A00251DD4DA409D91516702AA671513FF048FA06863201869890A98C9368461C1201
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59049a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59049a.TMP
Size 48B
SHA256 74e5bb3913b280dacb1100125daa2c66c25c90ae32b39060757521f8dd6413a1
MD5 8b694e75f712f332af4787f36006495e
SHA1 25e7c25e186e5c347aa659cd4c91df052a0447b1
SHA512 ff7ac59e92c258240da8d06ae6ff886bb15d53488930e0c93b6c0ad3ff8d4694565f028e610205f70024e46c7c1b8dfc9b7ce282c9c69810788ec2eec561f80e
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a93c6042b9203866c188209ab8760521c3f66fa3e25ff26e5efe228f0abadfdf
MD5 7e81a04966a5d3e3f17a293d985af576
SHA1 4f16aabb0076a468ffb8bec484fd230c6eaee1d1
SHA512 17aa9591d4341e8a2d5ccbe9fde0fe8337a1336051d98e82cb92853c5690d339f51d061504a4815b3e3258847b31f0ba635f16bc32c8f82a6d7d55e22dbf5f57
SSDEEP 96:KIbCKc3/WKQouWF8BVr/7gfH6z99gKV19jgxN9qDHnSKUIl:sSdWF8BVr/72H6B9J19juN9qDeA
TLSH
T19F918759303B06413CBE6888969685368E8271A73855B46F7FB800A24F27E179FFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1f39f6f-4e27-45ee-8369-7eb2d2eea356.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d1f39f6f-4e27-45ee-8369-7eb2d2eea356.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 20a9db4e779cd228155e5c987573ecb5c61229dd58ba8c20137f38b15a8b7466
MD5 80c3bbb4682bbb3dfce7454e5b17db48
SHA1 7318e8c734575d257473d4c96ffcde0e13e6e6d7
SHA512 1a7dc615373b30b33ed16727f5e4c6d73e1f76053d13951c28daa0429a982a294aaf665446111eaf6265cf08a9c2950e64269d98436fde59003f4f9820e823bd
SSDEEP 384:5ZcIhsNLIKbv9mEddm1Q8wuOObjI9G6w79v:Rh2hrmQ8wu29Mx
TLSH
T1C5929E32AC345D3BD967E112F08A3A176FF4817BE7C81B44A6EDEB0C05EA66C0306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 eb53a7097533d7a88f2bb6ae946faf1028bde505b3e561196369b0f0e7fb9a40
MD5 841493ee43f372651674eaaaf08be8f5
SHA1 43bec12abf0c1ad768e5b8c0c04481917e8e03df
SHA512 6f122efd6123b247ba054c3b8ec585a196075bfe72679e5a382533d9b8baa03a75c2b466777d3fa7a230795fc554a8843cfd09b50f6c3bbaa8a0ad853d097c3f
SSDEEP 384:VZcIhsNL2Ttbw6n2Eddm1Q8wuOObjI9G6w79v:thhPn7mQ8wu29Mx
TLSH
T192929F36AC745D3B9967E112F18A3A176FF4817BE7C81F44A6EDEB0C05EA66C0306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 38a5f173856422413ae931654e07179095d7cf70d6886231f8891e94c4a78fb8
MD5 a9ca0115db562ae2c4f8167a2730ad0a
SHA1 9c4ae30d464ef41677037648a9572143da22c775
SHA512 38c80fc04468df3e189a233b9589173830289b3cbe5ef9e1ca8703a63690354ef12f7d9db34fcf403447a84e044da2dcd0ce4a7b66ee947d6f56cf8f4dac941c
SSDEEP 384:ViFiZcIozsNV8TUNTUlIl2Ttbwan2Eddm1Q8xuOObjI9G6w79v:cFQU8wgmfn7mQ8xu29Mx
TLSH
T1BFD218F298E7893AD96E9703B77D2D065EFCC167B6845644B3D89A0CCC961BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 698b7c5cb8f5a460106110fa649d97ddbd4723e13b6efd236b7377190d7ff265
MD5 dc493ac0beee86dc1e29e544383b7b5a
SHA1 0daf5ad0f90bff8385f7b6de7731496f489b97a2
SHA512 e7d70b45a1b7e097ad20f7a385ede0877585f42964928e9304bd945321d867124562fe3105498c90a46d2e2b438180f2e9cb9989458032345f96dc7e9b7dff0d
SSDEEP 192:MONE64BAQmiUy11UW5GBPKrs+FdGGm1/aD3V9U6:MONE6eA2GWDddm18fU6
TLSH
T19002E934AC786C7B9EB2AE45F48737175FE8113BA6955B44EAE82B1C00D765C234282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4bacdc6d1f74981f064edfa5e9b2e5387c26b385b79a40ad8b2cbd847f98d4e7
MD5 fda8c82dfb684552e4904b56dbcd73d3
SHA1 72ae3a4c5068b7f938d04d26f6277a945bb923f5
SHA512 a01b9d93bae3fa87fafb26b7f2c14f88c2f041298fecd02acc06ba9306e1ebebd3edd2010c7573f46a8814e5f57c9319de5fd2fb8d91a1c24cfe45bc02bbe214
SSDEEP 192:uONO64BZQmiUysUy5GBPKrs+FdGGm1pFE8IWwjqFU6:uONO6e3+yDddm1Q8uuU6
TLSH
T1B2121C35AC78AC6B5EA2B541F48736136EE5412BEBC56F44E6EC6B0C01EF75C2306817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 46c1d9b9043f1b74f06eb64ef8c4d54ed8580c48ad5ad5b8eba52ee3ef305f82
MD5 3e137810f88e2b55da6d20fb2f97cb45
SHA1 8d588d212c9f77821969e595802333a8f779e5f6
SHA512 b43cfaf23ebc813620891597473795e297eff35a4dbba197c07c1cf194e4b2d561e007da7b8d810b67690ed2f80948505c459d9b0533bdc817358a90fc27e78e
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe591033.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe591033.TMP
Size 392B
SHA256 7dd19021844fa2495c5432a0a569c8fc1364dc25efe94214933f2b53379fb98d
MD5 4c043908bfada9ee8f13b266b281f66a
SHA1 c05df466fa395409f858be7ee4d1be17829beace
SHA512 5494d9fb06f04e85962970769c76d7deb8980cdef94f40d8cc0fde380519d06d2dc4aa47d3b9ec5d905822030a14dfcc2aa55d0dc8ecd927322f8359bfbc794e
MD5 SHA1 SHA512

Submit Download

ce484e51-ae8d-4fd9-951f-84d97311fa3f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ce484e51-ae8d-4fd9-951f-84d97311fa3f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7847475c37be7051d7e23caa32f9e2c366af8406c119ed4ab266c6df7134aba1
MD5 38a5732eeaf6d2dfbc2545a2f2e04748
SHA1 56e70bc51b2b18e0156084a9fa0b6fb70696a311
SHA512 593aed20984a01e85021c073a428ac73f284aa297bf8b39ae35610aa2157333aa14124fed9ba66486fb2fbec049da82014ed954b31c2006938fef4ba22f87b66
TLSH
T193412A59A6F91048B3737E199BF6A46D84BAB9372E4AD49E00110D4F0627A40C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download