224bf71dcfe7a2995381265c60b346edaa0a80f1de0bf7e3120a3f4b38af5759

Analysis

max time kernel
149s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 1.7MB
Sample260804-ahevqsdm9v
SHA256 224bf71dcfe7a2995381265c60b346edaa0a80f1de0bf7e3120a3f4b38af5759
MD5 23fb87db023262aad4ab6df2e0af906e
SHA1 cf3a9be50ab14d80b2f046fd16dd15910f4f85cf
SHA512 a51b98bcfae6f7acb681087a4a4caa3b711494fdc5c78b79c3f25b896014a194daa900fb1112aeedc71b2c350373db33197e916b59b474615a05eb31ea336092
SSDEEP 6144:3kKd+50eQf7Y9YrBxkgUg/u5UlFwYAHAAAwAVmcy2Heey:HK4xkdL
TLSH
T1B985C7F2A6F90C3D136F59C680493B8D7457AA37C6A72AE4F267474896E4FE0230712D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4336	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302759652256592"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{B6EF23B8-B772-4593-B336-FC49B4D16EC6}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6064	msedge.exe
6064	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe
3412	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3412 wrote to memory of 2068	3412	msedge.exe	88
PID 3412 wrote to memory of 4336	3412	msedge.exe	90
PID 3412 wrote to memory of 5376	3412	msedge.exe	91
PID 3412 wrote to memory of 5376	3412	msedge.exe	91
PID 3412 wrote to memory of 4356	3412	msedge.exe	92
PID 3412 wrote to memory of 4356	3412	msedge.exe	92
PID 3412 wrote to memory of 4356	3412	msedge.exe	92
PID 3412 wrote to memory of 3152	3412	msedge.exe	93
PID 3412 wrote to memory of 4504	3412	msedge.exe	94
PID 3412 wrote to memory of 3152	3412	msedge.exe	93
PID 3412 wrote to memory of 3152	3412	msedge.exe	93
PID 3412 wrote to memory of 4504	3412	msedge.exe	94
PID 3412 wrote to memory of 4504	3412	msedge.exe	94
PID 3412 wrote to memory of 3172	3412	msedge.exe	96
PID 3412 wrote to memory of 2496	3412	msedge.exe	97
PID 3412 wrote to memory of 3172	3412	msedge.exe	96
PID 3412 wrote to memory of 3172	3412	msedge.exe	96
PID 3412 wrote to memory of 2496	3412	msedge.exe	97
PID 3412 wrote to memory of 2496	3412	msedge.exe	97
PID 3412 wrote to memory of 4696	3412	msedge.exe	99
PID 3412 wrote to memory of 5708	3412	msedge.exe	100
PID 3412 wrote to memory of 4696	3412	msedge.exe	99
PID 3412 wrote to memory of 5708	3412	msedge.exe	100
PID 3412 wrote to memory of 2500	3412	msedge.exe	101
PID 3412 wrote to memory of 2500	3412	msedge.exe	101
PID 3412 wrote to memory of 2500	3412	msedge.exe	101
PID 3412 wrote to memory of 1340	3412	msedge.exe	102
PID 3412 wrote to memory of 1340	3412	msedge.exe	102
PID 3412 wrote to memory of 2124	3412	msedge.exe	104
PID 3412 wrote to memory of 5360	3412	msedge.exe	108
PID 3412 wrote to memory of 3196	3412	msedge.exe	109
PID 3412 wrote to memory of 3340	3412	msedge.exe	110
PID 3412 wrote to memory of 1540	3412	msedge.exe	111
PID 3412 wrote to memory of 1540	3412	msedge.exe	111
PID 3412 wrote to memory of 4544	3412	msedge.exe	112
PID 3412 wrote to memory of 4544	3412	msedge.exe	112
PID 3412 wrote to memory of 6064	3412	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffe2b0dc188,0x7ffe2b0dc194,0x7ffe2b0dc1a0
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,5766946076822419828,10155650404358970870,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=2900 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,3859684297649831519,13879721756805984703,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:13
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,18121599444109413183,16899818004336415418,262144 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:2
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,15138487209909326452,9396797752472581298,2097152 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3556,i,6444531192076606508,10276197738375748567,2097152 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,7116113769941147891,15780386532581541709,2097152 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,13490878465555768252,9103456406564402175,2097152 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,16120223224521691072,13097784083054283984,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,1206747118870807640,16412844501245832177,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5724,i,7094696323169782954,4819712623321013686,2097152 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,11226710904394412927,16704950130040345397,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:12
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,6350832127007070101,7785200298777436590,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:14
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,6350832127007070101,7785200298777436590,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:14
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,2069441343499570405,13713322671999841544,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,10960435230338795984,17752773739546918671,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:14
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,12331606765702636823,4501436589186507677,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,13495306054243197676,10891409572085092007,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:14
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3200,i,3660470797129715570,12783606682511259246,524288 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5632,i,10571173820174419452,4649122156196200965,262144 --field-trial-handle=2596,i,5820117105572178167,10873427175422504830,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13232919-808c-4223-971a-123d92516ee3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13232919-808c-4223-971a-123d92516ee3.tmp
Size 38KB
SHA256 612070f3de2a1a6b66d142b4923964b6f2589ca5b663aa2192e200d0fc32214b
MD5 01e43c0038efae272d1c1c1f0eb77ed1
SHA1 a59eab2ab43382640b5a65ee0bb1efcc01598810
SHA512 39e127895b3cce99e16f958cec5e11490d9b5bdd95aa1eddbef61e8e33a23743a8457aba022e25b6f2b4ccb05b0457ca23982ff25ea3eb0b41a5693508be2f7f
SSDEEP 768:6rv+4UNbds3nDDZIO0BoGRNzc4ReyIsXCeVH1S5D:6bsbS3tqtc44bsSEH1Y
TLSH
T18B03CF32A8788A77ACF66785B54772533EF8512B82981AD0C5DE2F0C464B1DD030BA27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 127KB
SHA256 8648ccace1ce12782cd12e438de75d265636feda470d6d0d2f12e4fed2ec89d0
MD5 dec0f7d8d8f9b3b1fe4bc990f7c877d4
SHA1 ea6c05bb92b510ca7be2c8a6251908497819c3d3
SHA512 65802531e9808703726f5fb5c33a1e4e8d1346c31ef248fa758474faa88b4936c3b007ee84d25012763119d9ff5f672482ae043a78bdde0a79298169b7043040
SSDEEP 3072:qkWFY0fzYXGHCk27mcsNZSGn8/1HTX9G48:qkwhzOGir7mdKVH7U
TLSH
T1F8D31366C1359897897D4A125F8FC845A0DB7B4A8A770D0FE75B07BD08A5A23E03D84E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 1024KB
SHA256 1fefd2483bc63c62a044da867a7202a7519267a24e84726b357c4596777d01cc
MD5 62b8842a4935fe4f02816bd143a6b324
SHA1 2e476b69601f2113e5a02131925fbc970587e5c1
SHA512 b3bb1913e91c8864abc82bc7fc833a61364a225b3dcb204213c1f96c46979cde025884b66035ae7e86a89404f39c4cb8d9d0b0701f24b7c137f9bb4bed1e1fc6
SSDEEP 24576:SP6PWdEKFi4CUG/tR/Ql0ICqKRqI+BvkLmXDEBqJS:KLa4CUa/Ql0MKWB8L6oBqJS
TLSH
T19F25335507CB1097D880123170D65FAA7332E879F22BAF1F479A3D941E506A13EBB9F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 1024KB
SHA256 7859994f5be0db8bf20bf2df49fc477b44d703292fbfd7ac136da8edfafee9f7
MD5 b8347722b6060affb121ec164e719b9b
SHA1 bd94344b50d67964ddde0005ddaaa3de5ef5dfc5
SHA512 44fd48d400b736522c53f817d8746a78724127617002e886923f8b34242a89932b6e4d3fbdf73f580bd25c762ba2c83b76a88b6cb4898cfcb501f9801741fcbd
SSDEEP 24576:wyS3XRq7ej/zsEY6VkeYaiq8zDhjYdJWoPhY63sa0G7TPGZvp:wTmUzxYGk5JDhAWghzXqx
TLSH
T1E525332EEF7A3EDE5D1418B686237D27C8653201D401EE7E40690A58F2EB6DB84178DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 63KB
SHA256 2b1d2cd65b7d43f59473b61557635ac71deca39f5ef38e035185a587b5303129
MD5 400f7353e821a35b56f1e49b6f8ee91e
SHA1 ed471e99745a9714256e9d2dd0c7fe26bd2831d3
SHA512 74e1d0e9c4d8f095f5b4b9ca41fca745054831c6b4d5e733f0ad08ef0efcf16059a5823a1eb6ea3c3a3236bfb30f2321d01f2641bd10c6e59199579d85f5ca05
SSDEEP 1536:sMuevbLnA1urgnBERH6LwDGZri0MnLT/y+ReeupIJ7uS:Fxvn+nBEh6LwwivnLTNOmhB
TLSH
T1425302218973632AF3874839B5CD74FE8D224B6C9FA5B2F61F5ED1122261329CED4099
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 95KB
SHA256 e357146bed2bd01f9206dfefe7eff48ead5182b88101e3f81d28331584db8ee2
MD5 4675bf3eb17545b1031ba83e2acb2fbc
SHA1 bfbe390305d5ca72d814693e1901aafdd1ef3776
SHA512 c3a880f321133b2923c24b073c6cfb6c8c27638eac0da760ef54befe5294132a857a46f2455f7825382d8ae26593007f6838ef9e0731c66d6b89bb65f477b6bb
SSDEEP 1536:gYW7DyW0MPMo+jka2xshXLoDFRVBJqnIlzzYbLwNsWT6D7hwgS+S7RQW7C1VCHOO:LW7DTFU9jyA7oDFRjJqQY43WObRm1VKT
TLSH
T10E9312BDEB2A3278B92D3CC3D200ECB9CCAD9235EB542B51C61743461213F724A2B275
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 1024KB
SHA256 cb225350757cfe5c967c89a3586affe99db0d2c2d756350d88ccb7f75563a95a
MD5 1c380757d8982d756915e34def7f79a8
SHA1 ca391ea0c4ee3c45e63445df45b0509628ffd1ea
SHA512 2b51b600722a9a4840f53c356de821d0dc2965358f0e036c7c5cd56e6bf92edecb2b0ec8ec4a335c265c917e4a84d4cfc24aba7a901680b20573e70f7f764100
SSDEEP 24576:Goz5lsVwqI7JT0CiygAvWFu/abVTxL6vynhL7AeUmHN7txp92PS:GoLsVwrloCiluSz9HAeUm5jp+S
TLSH
T1432533801B87FA2CBAAE47A9A34C70C4FBF47769B9C451A0F1DBB2C176B41BC5C51198
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 1024KB
SHA256 970027841098493a10b21e5037b94225df5ec0118ce2138b2752571f007f1408
MD5 edee1517d98c984e349e2ef377aa5187
SHA1 82747b54f3471813780e9df59b100599ff4366df
SHA512 e8cfccf34d5c6e39a8ad83dd44443288ff45011fb6cd41d214678b608fb28b099656515a9834afc0a4e86494a32f9bba55b855ebe33b866fc046bee78bb233db
SSDEEP 24576:5tkiSq5KD1v6q6qt2NYjfph99mEZnavFSE7oDDQvsOtIrt0:5uiFF6B3YE0vFds3POo0
TLSH
T1DB25337AE6D22C0D748284AA1AD6F59AF7D34E7BB405DE430D303A095672605FE332E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 395KB
SHA256 2ad0bd5a11fa4644214192c30887378d78b43faed3635781c451ed18d787353e
MD5 0b8cc91ad5f80b81b969200226b24d8a
SHA1 249c51c208e32888b2f2aee523b43be29bb3190f
SHA512 fbfb3d068bf1f4e4785247397d46d977fae96cac0f9ece7cab2721c4c3e9f13c4dac39a1f8bf07983ae68ec1ec47055c8401ecca91f61adfea48de73391c7e47
SSDEEP 12288:xL/xvxfW/ORfPFFN1pUeCuttx5+bXGKAf:pJxaORfPDfppCCt72WKm
TLSH
T18E84238058E7071C540B8EF055641BF769ABE43D119E9D383FEE04EC4A06ABA5FD618F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 87KB
SHA256 d6708e2d112002eee165f047513e1af12c812b6e4de075feea282c98f1cbbd0b
MD5 194b368aa230a7ebeecfc4f1852240ea
SHA1 91eda29c4ab45774f69c062559e4e6a5797a1e02
SHA512 b3be2396a22656031a8bc535c07fe4d948a61f1cc75ce6f35d2e7ac8fe0dd8ed39c126c0c900f4867322bcea2cd6243043ced818697f0d0bfb9fb1e54a5806c6
SSDEEP 384:RViK79XH6RcQKTKpKmMdmq1c+hBwWjUkeQ9zo:7iqccGphf7+feQ+
TLSH
T149935BA53B544727D2281BB14AF243013338EA5597A7DFDBE6592B111CDA3C53B012FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4b9f88189b31b7dea1ea684ef2cea55e12c2155ee930b8f3199494d0491f209d
MD5 864dbacb85efb5a75e45a3186916f55d
SHA1 108099e1fbd5cf1a684de118b6e7551877a55b64
SHA512 cd8e6da4d336d6b7d265a0c015c3c4ffae7e5bf1b8904c09dd537c87430a2b841960156a43f3badd2196f8d073a6198cd4c39622cce2d4d9a960443e360e4eda
TLSH
T175614F090B121EC2CB2443BA59D028DCBAFDC8C503876A4080ABED3D7883F1B5BD122F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599745.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599745.TMP
Size 3KB
SHA256 d04a5480e9a4ea25515184059018ad41cae2bf60e02bf4c87b01873822a43a7d
MD5 16a873e3ec4955c2208d6776134f2cb5
SHA1 8bf6f9020bfdeadbeb6553ee6cc9b6da8a1db06b
SHA512 7090e1c8e5f770f0c7bbf401c9869647209812b851712b1173ec4aa38ddd1c3db07729b5382bb510d322cf29a4890bceea714463139a9242cdb9509275125b7d
TLSH
T166612E090B121DC2CB6443BA59D524DCBAFDC9D503876A5180ABED7E7883F1B5BD122F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40dceeff-5e46-4f2c-862d-5720c39feef4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\40dceeff-5e46-4f2c-862d-5720c39feef4.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c801887e4bd3541fa4b4f29791013ac04d13f1a8d7fb4c6f16d1b0fe7f84e380
MD5 c3840ddbfb4206b287d731518a8598b9
SHA1 95c878789d567413c9b9f3dd56fbba32dba031d3
SHA512 ab1f81b37da23b91551a18a2d039112d332c1e5cc21ca2a306eea9741753b1dedca7c06cbd5fb48398d34ec142eef66eacd5c40d9073922cd3905950b9df110f
TLSH
T1CD21CDF7C3E8A67D890182F866183F1BCE2D0854832C3D5BC4D4AB5B93E1471E240A5E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 79c7139e3cdbcb4bdd4dad232b472ef32e241952d600b679804fa77e8ccb8d97
MD5 86e4ae66c684c1ff2d5d6f714898c06a
SHA1 0664e3efd6fba09a29b72a8eddc2086f47b446df
SHA512 84933e62d924e31cdf851abb8be6acfc5e40ff89eb89cd41124bcd11487d59513e1035e4f552ee77ff9a10a72403bbc8ff617798f7bd1a30ec01a30a00708e8d
SSDEEP 96:D1OZoEJvp5zi2zMePxiVbTy0ZLKA4vwBBU:D4ZoEJvp5zi2wePxipTy0ZLKAMkBU
TLSH
T117B19BF7C3D8866E881156F0AB253E1ACD1D095A42283C5688E4EE1F63E24B0E14129F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 3747128ddd73c807cb9b41d9d79eb5be19e5c4c0b41c41da8d26fd979496717d
MD5 3a26fb7885030d44edf7208c6fb897d2
SHA1 b380fbd792f014689052b5fffa31ae5a8d3af927
SHA512 0a83bab80849ce6853c69f3bc8c08b1b51cf133efe03d11e81b95f7d6a6b9fc6483a74a2c11ed9875aa9efbaa5c567a3ccd2ba09f1ccd715b1797e19ced42052
SSDEEP 192:sxRwRObo/fp+skOprQ54zoA8p43/g6+WNIYn8zhgG9IgDkJ:sxRwKo/fMskOc6/5ITFVU
TLSH
T10532B5156A68B87B8CCBD21DFB55BF53E6F91032A1D02E58A6FC9A0C04E76DD620740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7d926f44a7109917847540516ea46aed6f5cd469ab48b1d9681bda15d57899a0
MD5 543ba38e89be568f88ee4a98a3a42a09
SHA1 410c76fc6c72fdaf54e3a0387789575b23789298
SHA512 e76ccfb61b55289d92234784f7dcd80487d63b582035fa1ac6913c970f419dd8789c13dd8b3a7a1296b279cf21a0510e47d79cf006c1a5609bddea75a5b9ada7
SSDEEP 192:sxRwRObo/fp+sksprQ54zoA8p43/g6+WNIYn8ZhgG9IgDWJ:sxRwKo/fMsksc6/5ITzVu
TLSH
T1F842C6156A68B87B9CCBD21DFB55BF53E6F9503261D02E08A7FC960C04E7ADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 0bee608a187afa89b0ceb0c8f0e62be22a271266f2f53680679fc4239256708b
MD5 12c034289899cfcdf3c1334e40a81106
SHA1 62fb35c66f1c029a8cd385a8b65403f6d8904c03
SHA512 6252f02a4b248efd64e8d80ed7cd2da16a10b53700901f81d64ecfa03d829dc84de6b701c7595a0ab71757d3c8f2f33d268206edcdd0958c70d3719628457dc0
SSDEEP 192:sxR3RObo/fp+sXOprQ54zoA8p43/g6+WNIYn83hgG9IgIJ:sxR3Ko/fMsXOc6/5ITRVs
TLSH
T12432C5156A68B87B8CCBD21DFB55BF53D6F91032A1D02E18A6FC960C04E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cae6be1c3a3642ce530bb6adf26067b5d9746afda7d9554ad892392fe0724cec
MD5 05e9d9e4a4ef965c1fdba9a93dc0c5d2
SHA1 cf61b09b8a03cc98f3ca66fa65fac88992cd3ca0
SHA512 d5899881515110b0444c996423bc19ba5d09887d5fe7c52154a30cc81970689051e985abca4454d3759da8c33f25ef65a997ba68e1d301a5bfaf8d610933e22a
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRParohMq:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vy
TLSH
T1BDB2DC3B604DCB7E5F800A9DEC19AFDB6D5802C79A948D4447FE990C03C77EA51194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 94238e3e80f07907bf08c69836cf372d99ac8ed1a09b428cd10c72d49fd0e67e
MD5 bce2b6b8b9e557249a0b5ade1459d867
SHA1 217058cc5d737a60f50e5f774c938075aca62d5c
SHA512 dace9e3bd0f16cccaae414f9838c28ee923d97d9e3155e6eb9f9ef9a2ae6f016b89ec6cc5424312220fd1012db35af6ce39c740564a4dbc7969072c4e9e904b7
SSDEEP 768:/83oaWDZIO0BoGWNzc4ReyIsPEojKgqmUCX:/83o7ptc44bs8fgRUa
TLSH
T17CF2BF30AC75E9B7ECFAA685F5063653BEF48027C1D82EA091ED6F0C064799D131B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b98fb45d767bd4114a5f498fe0b90b5065cdc5f3cc6e9cbbff78652698fa8fde
MD5 ca1b09a66d7bafb8b4f907f19427a71e
SHA1 f784a84a188623420bff16c1804ffa8e5a91e0f0
SHA512 dfca5b5ed0d2150718d833da3684fb433500b9e2cae7b56a127b95d4bc7acc9223909e7edb8eb3fdd593fa147847a756d592ba6dee8d8294e566a855328a456b
SSDEEP 768:B833aWDZIO0BoGWNzc4ReyIsPEojKgqmUCX:B8337ptc44bs8fgRUa
TLSH
T1F4F2BF30AC75E9B7ACFAA685F5063653BEF48027C1D82EA091ED6F0C06479DD131B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 65cd44d9b3b3f3f104500a77aa8d540f2101260bce76fdb7f5b3c358a7fb05f2
MD5 0001732df3180bf25ba7a77db1b6f240
SHA1 80bf2ba3b52e279bb9e9fae0ecdacda0f6ab0ee7
SHA512 3055e5ca75245a3799311642c4863782f300379a9c8e5a00224ca53074d22227c6573871046f32aab314616afdd9f9e5678e4ab676f0b6689638a80b1d71f084
SSDEEP 768:i73oaWDZIO0BoGeNzc4ReyIsPEojKgqmUCX:i73o7Ntc44bs8fgRUa
TLSH
T13DF2BF30EC75E9B7ACFAA685F5463253BEF44027C1D82EA091ED6F0C064799D131B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 20f73313d5f49c5c3962ccc8a9db66c1cb446b27e89635efdb1340b990db88df
MD5 fb32f70f619033bb466ff1f30c01970b
SHA1 5ed023eab3422e78484d79c0973a2a43f3e15cd7
SHA512 bb29495bf240d3dedbc33f080d8d7a854bbc14fd115bbdcf0124e5b548e5644a1261de1cb775a45669b41aac98c0608decd94d05b3aeda16e475239281cfe3c8
SSDEEP 768:Frv+4UNbdr3IMWDZIO0BoGUNzc4ReyIsPEojKgqmUCo:FbsbF3IBxtc44bs8fgRUN
TLSH
T10F13BE31A828EAB7ACF6A685F10736537EF8401BC1C52EA0D5ED2F4C4A4B5DD131BA53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download