hxxps://westpostva[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://westpostva.com
Sample260804-pgjjvsem2x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3208	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303195034566496"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{5884CAFB-3114-4020-8448-BFFC1D67C577}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
632	msedge.exe
632	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe
4912	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4912 wrote to memory of 4716	4912	msedge.exe	86
PID 4912 wrote to memory of 3208	4912	msedge.exe	87
PID 4912 wrote to memory of 552	4912	msedge.exe	88
PID 4912 wrote to memory of 552	4912	msedge.exe	88
PID 4912 wrote to memory of 552	4912	msedge.exe	88
PID 4912 wrote to memory of 5108	4912	msedge.exe	89
PID 4912 wrote to memory of 5108	4912	msedge.exe	89
PID 4912 wrote to memory of 4184	4912	msedge.exe	92
PID 4912 wrote to memory of 4196	4912	msedge.exe	91
PID 4912 wrote to memory of 4184	4912	msedge.exe	92
PID 4912 wrote to memory of 4184	4912	msedge.exe	92
PID 4912 wrote to memory of 4196	4912	msedge.exe	91
PID 4912 wrote to memory of 4196	4912	msedge.exe	91
PID 4912 wrote to memory of 4744	4912	msedge.exe	93
PID 4912 wrote to memory of 4332	4912	msedge.exe	94
PID 4912 wrote to memory of 4744	4912	msedge.exe	93
PID 4912 wrote to memory of 4744	4912	msedge.exe	93
PID 4912 wrote to memory of 4332	4912	msedge.exe	94
PID 4912 wrote to memory of 4332	4912	msedge.exe	94
PID 4912 wrote to memory of 4072	4912	msedge.exe	97
PID 4912 wrote to memory of 4124	4912	msedge.exe	98
PID 4912 wrote to memory of 4072	4912	msedge.exe	97
PID 4912 wrote to memory of 4124	4912	msedge.exe	98
PID 4912 wrote to memory of 2812	4912	msedge.exe	100
PID 4912 wrote to memory of 1220	4912	msedge.exe	102
PID 4912 wrote to memory of 1220	4912	msedge.exe	102
PID 4912 wrote to memory of 1220	4912	msedge.exe	102
PID 4912 wrote to memory of 4884	4912	msedge.exe	108
PID 4912 wrote to memory of 5076	4912	msedge.exe	109
PID 4912 wrote to memory of 1056	4912	msedge.exe	110
PID 4912 wrote to memory of 4220	4912	msedge.exe	114
PID 4912 wrote to memory of 4220	4912	msedge.exe	114
PID 4912 wrote to memory of 632	4912	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://westpostva.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffcdd16c188,0x7ffcdd16c194,0x7ffcdd16c1a0
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,1972929531174642261,17523254134102989840,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,122478461981649631,14061878110161181052,262144 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,1718245263020895513,17552179294024030358,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,11213298474753464398,16196780756860516375,2097152 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,1779668984897287466,10105604763920149611,2097152 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,18150401841099363982,11413274857410755220,2097152 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,18229575094050282796,6747549176446522871,2097152 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:2
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,7656397325981023216,3544451217037486671,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,8499083330278206536,16279846228554085075,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,10094008046938457189,16106020050079968320,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,10094008046938457189,16106020050079968320,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5948,i,5602263074065794116,8444854679111144469,2097152 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,9526732683636471967,10189995777658980515,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,13774617502927723376,6776330311289012928,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,14686325992128260795,255333542658839546,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,1990834063972584342,8180314624971296043,524288 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=744,i,798510769582481074,10511368248349514281,262144 --field-trial-handle=2304,i,17966931966817304680,5406077831507121425,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:632

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 19770e7fe2094711e80964a836e60964de6a8ad16ccaac3d8dfad98369019638
MD5 44dad74e010b183434bee387e897e5a5
SHA1 1e8cd1a25c1805f95db825d1abc631a4dc4b3528
SHA512 4bbc70e7b7329e93d20b196e728888ea0151b121d95738e26f908478d84bd38ac8410bda7f62d907ab7d1206a6ca2df9c6c71f59ce1ad6ea772dbae5c26236d5
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1CEB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 67KB
SHA256 25b05fb02fedfc6cce6cbb542030d8ab4e66c10b4d7ed8f3f309e7fea4ac9963
MD5 c6d0f9252d7d9a57f18b99cbdf8083f6
SHA1 fd0c5ebfb986e45d9fbc2ee61a563803e6dd4066
SHA512 745f28a5222771f269e95f323e4161fe2b9cefa2eb31675dd2b23cd33508734cff9c4d4290f57f1221d9ff953d834e2a008abb31df662d3720e23f35f2872662
SSDEEP 1536:QH5HZyBokKeTWIgCgEP+MuMtoVJDuUEMNIbU6eVKwuWvz:Q9Z1eiIgCgEluLfIbU6qfuWvz
TLSH
T13A630218A5EBE63A4B1405E4476A804F37154FBC20AE2E6F88CD760D18F17F59EB8C5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 405KB
SHA256 bb90ac8097da7c793676be5885f5cf00b9e5a27e30a878296c59d1b4ba27bb62
MD5 0af3640643657932c2b1de637482ecba
SHA1 363c3fce3a60b5a7149203ef63197f6abfafa9cb
SHA512 cae198a924008b8171580f9753b9c89e629875359b354ce62707e97429dbbdc00121af35aa083c14944cf274b60c1d103a123df475b8c5914834e1067ab5273b
SSDEEP 12288:ube26/DCSTYo5pgiLGQ8ktPC5SRP8l3xri6gXc:uK26/eSVx31t65Sp8rVMc
TLSH
T1AA9423D595D7CAD1DD9B04E6CAFFCCC1983072360E0CA1EE1B12B9AD493F96469B2309
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 d1b57c102bbecb4b14e92a46725a6335ab8da7decadef502c844d732b9ca9a2c
MD5 8d131cfcfeccba569bb3fd7870e200d7
SHA1 d38ae1fb93fd0efbe147bb32a2c6b00b9c4c493f
SHA512 595eaed615e17d00a1af2390fd6bb745d49541780cbd9815a6435c38268496a7fb851c89bd5008aaed4b081450e878cfbca0f5705d80341cfb2b49068817acd7
SSDEEP 96:eI0g7iGtTbTFscpfMGnfr4qcXQhQrtCvfZwhoqy9u92:fZdT/ucpfvfTciQrwvfZ8y9
TLSH
T15DE1203805D505E3FFFB0335F2F40EAA2161E0952A929FA70FC0A5ED746FB824492699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d0937b9bb7949089a79544d1286936e9e10667a70562a5ea9ff0a54ef96a9144
MD5 bba0acaf8ed0e95e696f3762ce6553d3
SHA1 f3b710e13e8b55258743ea984c494cad47cdae9d
SHA512 743c38a17a3d2f3e89971bc90e3f9b52c4b134e03f1df7bc99cb0665e6aa2e86e90742da3faae3b04d89fd55e32dc5df3a391e5a9da881478aeadbed1747b9de
TLSH
T1C46129360E5684B7F3A81171F0F4066B7571C18A2FA7EA761D10DAFE311AF1280D20EC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 ba86494ac1564c1fa8ad2dda7bfb72f610fa6bf858811d2dedde21db871f2448
MD5 4ebb9c53b696242ed5e972929af3bf3f
SHA1 0671aafd139558e1a7c5fd193bd1679d68d2dbba
SHA512 4b679075f7e1436a9aa0aa04e58ee2a9d8ed3787bbbc82b186aeac781af8e3dcc343c17986d192da63a1938c7f8173e173023426e8820a4dd0036f0a7a644dbb
SSDEEP 96:D+O4H+6+NRwrzBH/6U7SMftMrpKjTGjcH3H/Kc/twBGO4:Dt4H+LNRwrh6UuMfmrpK/GjcPKc/tk74
TLSH
T146B102F3C3E5822ECD0196F09B146E1BCE5D0A65436C3C5A84E4AF5B93F24B2E25168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 850952ba07973fd213cd6ab170f42f20beea84cd6c02ee7799ae3c952fb65027
MD5 3586fd5659422f11999e917b22a46e40
SHA1 c02459d807d4c848e07c89a7407c87effecf048e
SHA512 aa91318fc2a80ff472051988294684805afa6914ec0ac5278ce3e869e6f67f88549cbb124b5fd8105426ed4fcaac120e0bb35652107b62369de84e5a8687b2a3
SSDEEP 192:sxZfQUnWRYyM/jK1Ml8UQLWOn/fesM9tem/bm6dp4rXHW6+WNBV7KMNXYHF/f0I9:sxZznW6qiOn/fesM9tPKK8HbfvXbY
TLSH
T19F721A126534197BDCEBD219F9027BA3E5F914B2D6904E44B9FCEA0C04E6BED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4d3b62ed28778f430f2a7d627fe90b3d696dffb09adfc648cfe6f81dc272e11f
MD5 2aefa3944b7ab2d6f5716c0cee5b587d
SHA1 803918dcb8f6617f1be061e88efb367913efbe40
SHA512 ff800f3d460606bcc792ae21dbd5bbbb07be57274632c707f76ece65f5360dc71584d01906bc7af14d5e8a2932f74830426fd05370881a4a380c35a24290322b
SSDEEP 192:sxZERYyM/jK1Ml8Mkn/fes09CYIdpoXHW6+WN3ty/YHIoj0IgrJ:sxZE6Mn/fes09CpeHbE/19
TLSH
T13E52F8116A349977CCDFD209BA41BF53D6F51472E2901E54AAFCDA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 117a55eeedcb5103b89b0b0cf23d9e36fe19e5095bcbc16fadedf71ab61bfde8
MD5 0739f039fc69ab672e963b1694337e72
SHA1 53ff20dbffa5d8fb72619ba6eb050050d492a768
SHA512 52d9281ce372119634796e19c0ae30fb7123cfc648f3dee08190576a8df7bab58ea6126ddae800a58f5b59ae2900a8dab9fbe3759ff1c3eabaadb77fa3c2f538
SSDEEP 192:sxZfQUnWRYyM/jK1Ml8MWOn/fesM9tKm/bm6dpmrXHW6+WNBV7KMNXYHTUj0Ig52:sxZznW6uOn/fesM9tDKKSHbfvXaY
TLSH
T19F7209126634197BDCDBD219F9027BA3E5F910B2D6904E54BAFCDA0C04E6BED2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b87887100adf601688c4716d02cb48811014bc17976148cd6eee754059d0e04e
MD5 548bc760e9c895206dbc6e94361f3de3
SHA1 5144c053857ed515c382adc9d0308710cbd046b0
SHA512 cde900fb1eaa75eb09c47bbc4fa6dff9db029f58930d11159f2aa513442925144799713003ce760a3b7bb79d75531db94a74e79f4fbd18e37b9038887637368f
SSDEEP 768:uVUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RFroV20p:uVUZYTMWvg0Pou1ja7eLZmR+Hp
TLSH
T1EBD20B2F280CCB7E4F844E5DEC266F963ED801CB6A584D5447EA894C03CB6EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 bd4e5232a48796b4110a8e4ba35b0d18c0702062f6962e8c40554cafd785001d
MD5 77255d41bb06c8e120ca703af1ee5734
SHA1 c639b8ab87c35f5285f8aa6d9999577698a3e8e0
SHA512 964060e259ca8a344b656357b1b50581ee0f0aeb3cfda9610bc551d642332336f5ee3b7b808fe8bb4d4a9580ace20f73df3dfaef9d0b32b6ca1c805c9fff9fd2
TLSH
T1E5A0022207801005D85621B5155307451300CA101205A71B90971049DC524C14E4118C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 8469673a24dfef1ba6fd78747c12bdbf5f409431ead083a77b870d2fee0f0cd9
MD5 4de24b73c72c17ffd94a06b2d4fa5d49
SHA1 6ada7fe84818da07e3d4676482402d64009da89f
SHA512 93dbff92aef0d842df4bd7cc76aa2f8715689085005656d58ca39f1d9bb4c19d8f7e18da9c91a741e5201475b08659929ee5dcd5890dc12d561680fb102783c4
TLSH
T12CA0021842C10003E0A352F025DA416323144A19B321230542918289C9E0565954304C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 3KB
SHA256 c0672eb3000403ee5cf1080aaaf02c7674e5ab8e94898162a14d2a7fe7c07356
MD5 6b77654b9142bfa0504654923b37f206
SHA1 36811207e96c65476ef9073374879c00b17b4ffe
SHA512 8507a571380d2f3754bb47ad6032e5f48227db284e8cbb9bf1fd60849402616b4b82dbc1cb4be825ee3384d45734bf8fed7e25ee1e0633e6ec58bfb1892a0b36
TLSH
T1C451F84E4D8B1DAEE9BD14727CFA1145377A58EE4649DE0F668CA0307CC332E2E14105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 1KB
SHA256 c741922564f6bebd2f58299b2ccb0aea5ca4dfe017aa0f5f7b829d9ee34d46e5
MD5 ebbd2975e3eddeea9db657b25fa00bd9
SHA1 e4c7c1269b6de2c0529285c80773d886d27ab655
SHA512 d7f6ae26d4049be09e2b23347349e31cce3a01e33313314364dc62d086c1a70a58eea5688aa32a56595269bf3da1abf7e537eeb9c500602d430fa1a85c567caf
TLSH
T1E831968D8EA0C99FF4A480B21176A1A47770C8CC0B25B7138C2C3131BE2735E390B5DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5863f5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe5863f5.TMP
Size 1KB
SHA256 9d781c3eb6985cc8002a7ea80f4726ebfab041e3dc2811c41bed078d2a80927b
MD5 a7fde581868826e60bb516bd8457b376
SHA1 6c93195bc6db97f0a788c52e2ed6065af6bb9728
SHA512 9e62ceec6e584bd451cc25eeeeb26472335653c3b6e59daf88de40926896d2adb626e9a23f51c5492aa7bae364ae37d61af3655bbe8aeebfea87316dbdc5601d
TLSH
T11B31424A4AC08D1EF4C4507B0E67A8B8733588404321B793A87C62399D25B9E2E5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 10b1ea95fdf905a945e42ef64998da1ff67324d3f449c178ee198e393f014a59
MD5 2c4d5fecffd814249819de45714adb54
SHA1 8ce0b27558cac59e8044b74d674683b0875a9da0
SHA512 fed967162e46852ecbdd9a050313d1cbe3ba8e5f22e550446ec6542116f1b789802baffd035475c1c06517471abdf1550d0b82d929e4ec67a66f0542e4a8f022
TLSH
T1ADE068F32DBB1810AD6BC3D74471A4A4010178A8C68CAD8E00AAA2A310B2310290AD22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 7263d84ea7d8c1de98fffce61ac79f75c29369d76166de48f7a30ed90d96beb3
MD5 949cc2dee60f77f576314bcc732eb3d7
SHA1 e803fa3df2d31a65c4489c36201caf81a2ac0fee
SHA512 abe210fcffa1d8859dcd086f565f4188e0bdc99fccc30fec5236ba4404898a4e42e0aef971dc03237fdf42f510565da99974d780db3479e6d8834097d61de988
TLSH
T187A00222C9D48081D25206709F6161846A95CCB86A06231153AC5194887959486E2585
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58baee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58baee.TMP
Size 48B
SHA256 7f329ef2695c3251f7ae441966e7bc7393e8d687c77589376552c26e3012a3fa
MD5 f975b5e1b48b36ac7cfda075fbd68cff
SHA1 885705a0cef38354c6ef389f80420d0136459ae1
SHA512 b1de13add7cc13e3e0d186f3e3829b36a99724e4dc3621ef34a15e2733212143c0f37ad178694b5a8f43d3d2edaa33805826c5e2e7289ce2a0b50fd955d198ca
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 e9b685283d1a3fd05a0eb31e729f2ccac93b13e350a5217e8a04beccb47c6228
MD5 3b32cab5f83500fe039fd42e80335b9d
SHA1 fcd523a974665c862bf9e9c84b8f8b3f1256ba5f
SHA512 99d0c0e8622b654a13b53b7c6fd48a70e03d3482674ac9dcbccfcf932368a83bf7aeeda6a60cdede630789e95fbe1f10abb9b3787667007319c2863e731b66e3
SSDEEP 96:KA1eK2A08AK92uywgK1WKN2KeI6SUwKJGR:EuvzgxDS
TLSH
T1FBD1485670BA03417C7D2A4D836487169FC1B2A73028A86B7FAC05B65D27E21DEFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d6c8c50-b4fa-4644-922b-67f24408019c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7d6c8c50-b4fa-4644-922b-67f24408019c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 327097e81939b12a6918997a825d754cc134a44c9268577446b1edfa846bc803
MD5 4b4a06aa39598ef5be8ed592e0bc9cfd
SHA1 87604731c3ac9288f5a597b073ad2b1aac82104d
SHA512 55aabb0f37501104e95b96bcf6ed4cacc442b6bb167222e4d620539157d037ef3d8986ec19712559a76a5acef6e07d88936bd24d7bbac395a0649215e05c8af4
SSDEEP 384:eZcIhsNblmlsrRzX5od+F8rAXb/BeRs9JKgqijUrG5:ch5+5OIb/TjKgqmU65
TLSH
T129928D319838AD769AE7B545F48A32138FF49067EBD46F90A1EC3B1C009A59C631BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5d14245800e7c2ae44f1ff54c0498b6162a5cf3a19d704e0bd245b6e58c43381
MD5 f57f3e94bf14d44dc97bd68835b239f0
SHA1 8a8aa726ed90c45f579aceb28bec4ba2be049f59
SHA512 596e4ec11a2a4da65834948855cff5977c16f07404d534b9078f1397e211e41b0aec547302838f8aa1acbba456b6ae5f0fe2e238f0df878552e292b2d8ede016
SSDEEP 384:SNiFiZcIizsNl8TUNTUlIllTTlVqa2zX5od+F8rAXF/BeRs9JKgqijUrG5:SEFQqUwg/maqOIF/TjKgqmU65
TLSH
T1CED229F144D79936D9AE6B47A77D2D128EBCD067F5806A90B3DC2A0CCC460BFD30A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 74a9cd26c81ec68706733087dfdd6e8db2cef0ef342de6f4f1364e22d37a8e69
MD5 4c09dabcdd39383a0efc193a1fca7325
SHA1 696050ef2d9c6603ba0fa26d42e716e33d028826
SHA512 d20e148e56a9cdfb3926e894cb24fd9f9414c096b490aee2fb5f2d9bdfe0115c042b97d7ec1c6d5a32dbe3ef5d528b6077d19b05f0b5d8f9b6f90b64431cf69c
SSDEEP 192:yONr61VWQmiUydQgGX5Obd+jVjzorr+/ag3GSU6:yONr6WngGX5od+F8rNVSU6
TLSH
T1BB02D93568687CA78EE2BD49B48B37135FE5206BEA552F80DAEC1B1C00D769C2356C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 24da9a469367e20a0c3d7ef47873f25112e01de3abd998a7e72f9387b20b44ec
MD5 a7bccc3ae85138d1472a45988959a59c
SHA1 569df1f7f1af2c3560232bf68520a003cd55e5f2
SHA512 e597138a7fa8380e89256782d9c5c60b5270cc855b74d31459c7733f4a0ce9d4a16de0ad876298db353749ff51a864adaa515d3a1d61ded9066d4bb43da306d6
SSDEEP 384:VZcIhsNblTTluca2zX5od+F8rAXb/BeRs9JKgqijUrG5:thojaqOIb/TjKgqmU65
TLSH
T1EB928D3098286D7799EBB545F48A36138FF49067EBC46F90A1EC7F1C009A59C631BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b45a470fd7e887a6d63cb6aecf4cd6901779c3c933c554a3732f1483605ede1d
MD5 0752b8446f61dff15de5abaff0e07c27
SHA1 4c42202c9aaa95d132b25c23d9771583a1fb3099
SHA512 3e72b52fcde6111ccc6c2ff0f322737404d982f6d08a38c6cde62fceaf499027326318dea3561b169913ec348f1a6fc498e74dada92045fcd0432e3625eb024b
SSDEEP 192:ZONm61rWQmiUygQjGX5Obd+jVjzorrAXKtjJCq/U6:ZONm604jGX5od+F8rAXc/U6
TLSH
T122120936A468BC678DE2B545B48B31138EE55167EF847F80D6EC2B2C00DF69C535AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

935f6c6f-09b5-4c51-957d-8ec7954071e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\935f6c6f-09b5-4c51-957d-8ec7954071e9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6c0c0c122bbc4ad68987a2abfbfbfe5b34aae2e74fa9eb246fe1420d9fdddaf5
MD5 557daf60cd372f8c767bde8c8f856c72
SHA1 d73ebf50f590cd1bcd249c8bedf93fb760988182
SHA512 b682d491071dadff6d0521c113e93b38a19154e4ca2ab29d7fc03be8b04f27bcdf173d5358b07ad9ae82bdddb5921421fdb6e81cb1492499767a4b7073ed1df0
TLSH
T11B412958B6E91148B3B37E1A6FF7A86E887A79271E46D45E10110E4F0A63B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download