hxxps://philia-inc[.]netlify[.]app/

Analysis

user interaction
yes
max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 16:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://philia-inc.netlify.app/
Sample260804-th7ejadd24

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5100	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303330934271602"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{585242B8-D15E-40EA-890E-C78ED9657464}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3392	msedge.exe
3392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4148 wrote to memory of 1444	4148	msedge.exe	86
PID 4148 wrote to memory of 4396	4148	msedge.exe	87
PID 4148 wrote to memory of 5100	4148	msedge.exe	88
PID 4148 wrote to memory of 4396	4148	msedge.exe	87
PID 4148 wrote to memory of 4396	4148	msedge.exe	87
PID 4148 wrote to memory of 1844	4148	msedge.exe	89
PID 4148 wrote to memory of 1844	4148	msedge.exe	89
PID 4148 wrote to memory of 60	4148	msedge.exe	90
PID 4148 wrote to memory of 4476	4148	msedge.exe	91
PID 4148 wrote to memory of 60	4148	msedge.exe	90
PID 4148 wrote to memory of 60	4148	msedge.exe	90
PID 4148 wrote to memory of 4476	4148	msedge.exe	91
PID 4148 wrote to memory of 4476	4148	msedge.exe	91
PID 4148 wrote to memory of 4480	4148	msedge.exe	92
PID 4148 wrote to memory of 3872	4148	msedge.exe	93
PID 4148 wrote to memory of 4480	4148	msedge.exe	92
PID 4148 wrote to memory of 4480	4148	msedge.exe	92
PID 4148 wrote to memory of 3872	4148	msedge.exe	93
PID 4148 wrote to memory of 3872	4148	msedge.exe	93
PID 4148 wrote to memory of 2744	4148	msedge.exe	97
PID 4148 wrote to memory of 2744	4148	msedge.exe	97
PID 4148 wrote to memory of 4340	4148	msedge.exe	98
PID 4148 wrote to memory of 4340	4148	msedge.exe	98
PID 4148 wrote to memory of 1068	4148	msedge.exe	100
PID 4148 wrote to memory of 1532	4148	msedge.exe	102
PID 4148 wrote to memory of 1532	4148	msedge.exe	102
PID 4148 wrote to memory of 1532	4148	msedge.exe	102
PID 4148 wrote to memory of 3108	4148	msedge.exe	103
PID 4148 wrote to memory of 3108	4148	msedge.exe	103
PID 4148 wrote to memory of 2576	4148	msedge.exe	106
PID 4148 wrote to memory of 2796	4148	msedge.exe	107
PID 4148 wrote to memory of 4784	4148	msedge.exe	108
PID 4148 wrote to memory of 3732	4148	msedge.exe	109
PID 4148 wrote to memory of 3732	4148	msedge.exe	109
PID 4148 wrote to memory of 3392	4148	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://philia-inc.netlify.app/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffdf873c188,0x7ffdf873c194,0x7ffdf873c1a0
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1728,i,9625124185380446389,2136584722859325086,262144 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,1085741888018663415,7132807310001388229,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,6462940286500946986,2661768050268409126,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=1956 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,16329053981487736711,18021529849051691489,2097152 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,11800862159659259192,2626398776466820243,2097152 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,17913041944866920500,16832728940637892745,2097152 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,7976972530869637095,12685162572400499806,2097152 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,10161777410683133914,2862053772233787414,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,10216625192503280136,7519304955165560346,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,121521442998662205,9734998954124856034,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,121521442998662205,9734998954124856034,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4496,i,594173035710936583,15264323542337772643,2097152 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,7468189303512163236,12269123579326616998,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,1576185987496428134,7385232799959604686,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,2831091829383434825,14621322397255594860,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,1532967379425576833,7902388043833118926,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,14244556557596147958,2985993996894036068,524288 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5512,i,2265374632977363525,12325141691545217501,262144 --field-trial-handle=2284,i,8759095814222532016,7569685977666958366,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 17d500b4417e92837c05a8187f43f060e09191612c25892f2c54e786bd254c36
MD5 ca52a84f03e904e79c2a5651b273e5fe
SHA1 61ddeaf1850d81986389db97ff9470b67eb8cb1d
SHA512 d1f489b74d4da21280e354fdfd91d6569edfcb1abc7f4f6740756bbe744f02bd51136d5ea47c7a6a1842683dc3eba0d2608d4d46e5eb8ffb5035ffeb98f9c788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7G:fwUQC5VwBIiElEd2K57P7G
TLSH
T1B9B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000bd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
Size 1024KB
SHA256 908a3b60b0abee7fcd774cf1c886697efeb7d029cf6b4d17481bc5235772b185
MD5 42d493238a2baa2d095ca005fa60fa15
SHA1 f28db74ac495a78a059bf3f4cfa572428d921b16
SHA512 ccc83b016c6ea318b9665e9fc755175e37c92caa8765847a006749005b2517472d6c7e2998bfe489342aa7895fad5957ca8d8225bad4fafa61c348e7c790b9a6
SSDEEP 24576:0tshpEwNv1T/59zYk2YTH9H43NQRe97F8IucPxe5qqoadBqy:Us/RNR5v2dYeLZxRlG
TLSH
T1EE2523CBC2B45D4DF7EC91160EADBE802D770B0588605AAE5F67FEDA304D9ADE822414
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 1024KB
SHA256 a8ddabda603a471ad595b77bd10c8e8048ed5b1734fbdd3a79966ac1ad323de2
MD5 a256aba0b3fda200a837e0dd6f9080f4
SHA1 4de38204c30bb32dba6c05cf0587a4d77967fe04
SHA512 329f0874498fc35ecadb5426d31c69901ab4ffc812351b846f96b8d7b50cc610de5a0ca04d47cd23758f484daaa284871fbe0b5a3c55ec671a10d3615eb288a1
SSDEEP 24576:7y0TbBTD5QqWDRCZS58MB0zXCXgJUKvv0w:7/TbBTDCqgRCkeMqGfdw
TLSH
T16C25334A4EC76421BD27A59DC056F5FF282179A0BF50DDF0398C8A60B33E34AE0DE995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 1024KB
SHA256 92331f504bfdd18f03e4526f922cdbaaf243877bf7c40f1a128a2d31c2bc508e
MD5 d7d6bd6f899ba2b01e727e2755634183
SHA1 ec40a03a844a42aa75cff4f18587c30debd42008
SHA512 322f004f53adf2fc38578a679e300a4aac32fca887b96c056a91b3f7accd2a6e22aff245d9cca5e6632a9e83ec4c41c6161e1d7bdf37da83870dc73e3beea882
SSDEEP 24576:Q2Ad6WFBQIiUTowQpjBpLwjcBq9C/uwMDD87oSIFwnXfkkdj:Q2As+BQIDJQpFp8cBq9ATMD2hnXfRj
TLSH
T1952533BDF1D2E8AF40A8DFEF90FB7115656187037CF3A40944A0A7F261C5A621C52E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 1024KB
SHA256 51dae8b8a6b84f598038a3880c7c07ea92a323e5675eec50f016b472b127620a
MD5 7cb53ba836d0934de8077d59c2db09a7
SHA1 239f795ea7a41fc5f58c36842c942a22d313aaea
SHA512 2b7744067a2f644a6e9b1863744a7655f29e3263db04ae70ba62d2446fdba8133d369ba2f98e583533c8a387ee6c2c41bfc7158b65cbeca0c9b31b0ffb597c52
SSDEEP 24576:/owAGN3HzpJPyJUKF+A+rFMkAytj9hJskG4+TvyChba6/u9X2T:/owtN3TpFyWE+b3t9rnZ+TvyChbB29XK
TLSH
T1262533B1A3B98243792FCF702CACA5D56F246AACF9ED09FDE7203D09A10B7D3541A145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 1024KB
SHA256 33b4477e17054aa4a79c5765140c127683d6cb877483e9bb81ba18c8cd12c42a
MD5 5991b4d803ab601605fab4e55f83f3f1
SHA1 9fc916ae9c7cb1cd90d818c4df94da5d8d313dfe
SHA512 13a0e631af9f3da00905f65cafc0c63dba22f586fa82d39b671dee48c8d32292345f7f06daf31e70d827738b65e0bef807f402a1ee279ddf6064cb66954ba3a4
SSDEEP 24576:yPTCsPw7IdgvAzOFU6wgz+poj84GTRwps+s4S8G8b/:eTCso7NIzoJZqWps+s4zz
TLSH
T161253348D0364F4BA872FD6ECB1E87F669663A88260A95520523C264756203FFED7F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 748KB
SHA256 d1a88e5ca536205814b648cbe986fb41e01999de4dc165ef27bf093ed66e79e7
MD5 bf0acc30370ecc2fa5b5d11b71de2b69
SHA1 8c47061ddbf0afaba42dc2b462b4e2e365a6ccdb
SHA512 a94b0e96f930a5aeb24d8e89deecad4122f795ae79702a08f3daf1921c1a30e8232106a6558e1a258d1e37c60fb70007c2c7a605106f074c62fa8a5299ec33f5
SSDEEP 12288:h3z8k3WRC4wFCelf8j974PNFILymzvD5MdY7qb53oJ5nJgTNiGqs4qswpWO8Yga:JhJ/KZ74F2F37qbGs6sEUr7
TLSH
T15FF433E28E4EB577358B048130A6F083E3F85514671BD2EBD697485F6F1B12B9368372
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
Size 1024KB
SHA256 46a75c96e3caab5bd6bcfec9149bb3ba2e09dfea8b31e447365dd1c4b40d3c13
MD5 31e00e5a23650f19503468768beeb2df
SHA1 71c19ea0dc73cb54f13140d2eec8b0de5f6d8d78
SHA512 a8de7ac5ba2104f50d6b0cfcb21a90bb0f70828ce87703b35798f59834776594848d1d59c1786352901a0f635066fdad66411efe82e4c3e5914b32aadb1f3fc6
SSDEEP 12288:hxb3pFUQ+qGTvly8EepwegpE+K6j7prR8eyIC:n0qGTvM8IpV7HyIC
TLSH
T1AD2523078E879AFAF618F2B91F14E3645577496ECACC3A542CF0992541E394397333E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3e137b36c0c5644a16852a4a814ad574f37f218c1b5f6c5af03c7ff7fb68fad9
MD5 01c55b86ee9259dba1fefbb363c5a192
SHA1 07a6346f6d4834bd79ee08bfbecb34ba087f3305
SHA512 0eb574be93cd07e6a7b047636da535e150a7875af3ba1838f77b29dc7aad0ee4c8a4f82e10f78d13a79736122dbd9f6c77cec8488465e5c78462a5cbc9b1dd01
TLSH
T1EC6109250302065DF3719372E6F31D65F9FC81C51B6F8E96B056297E7A39BA3481143C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f7c9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f7c9.TMP
Size 3KB
SHA256 8eb6ff0a476e077dcc7525de2356188dae987bca3ae2ca2a2a1170ad9b9e62c3
MD5 52754203b99bf55297b80da2daf2a0bf
SHA1 9628113ed2730432780b104d66e44e6be77407d2
SHA512 23a73d2c66b04e38d7e6492a949e0b8020d072ae181a63b1545e1eaabcebb48f9611493544320a8a45ea09257ba597aea54dad5e93eb41aacc762b4d12d0ed9e
TLSH
T11961092503020A5CF3319372E6F35E65F9FC81D51B6F8E467096297E7639B63481143C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 4ad2b59d5e669c50b2bd65c86de2951c58c290ad68992070c97a2071681de1d3
MD5 a9a570caeac916e4434a02f519bf3099
SHA1 06c50ed18238ab304ff5254f5b06fa7afbd5172a
SHA512 51fbbe99506f12d1f0ede843161acddbac1ebc26b406778e9f8b4b05ed1cc895338a2851071a55b77d510c436d51cce5fb559b406004d7f0ad64caaf84942c78
SSDEEP 96:DWOHx+jMmjMK/nz1WkuGjm/zjMxjMojMnjMS5jME4jMIjMBmjMCVf1xwBjMGJ:D1HQjMmjMEn5WkuGEzjMxjMojMnjMYjj
TLSH
T198B1BEF6C7D58D7ED95316F0A7207D13CE29051583683C4ACAE8AE0BB3E3460E541A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 37f340f79f1d6a47cb24d016e0336d7b756fb4218c35ef4893e8cc6a42817eea
MD5 dcdbf974c7abd475fc93e3e39e2cee3c
SHA1 7c54c1890ab4cb76dc7b58a027cf75ea170c1e00
SHA512 508db76b1edf6a7b04d01ba47a6d60f902c8cbb9f9da13ad67a18194a6d6a94e1511576edb68d92b19a7766806077e0442ba5349b104f281c3272d29ba257b86
SSDEEP 192:sxZwRNyM/jK1Ml8Mkd/fAxsjQmPIdpj/HW6+WN4qx/YHjW2j1Ig/kIJ:sxZwfMd/fAxsjzgzHb//MFss
TLSH
T15852E9156A34A977CCCFD209F9857F93D6F9147292900E48AAFCDA1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9991b57f7867a9e3169f9d83cedf46719a43f37a27f0e3cef1d403bea90e668e
MD5 19b7eb9492bc08e53aef4c6157b0228c
SHA1 26fa2e340bdeff0a739b898212c9eed9de21400c
SHA512 d35af61e4aa005e080bd8671a034863edc183e9e81f98e70b0bac1a02c8e2621812ca234fb53e3f6dc7b0f35f7f2c7fa38f44eac9f21ca5ff929131694434bb5
SSDEEP 192:sxZwRNyM/jK1Ml8UQfkd/fAxsfQURIdps3/HW6+WNhr/xXVzGxXYHPR2i1Ig5sks:sxZwfqMd/fAxsfta6HbhkXDUds
TLSH
T18762E911AA385977CCDBD209F985BF93D5F9147392904E48AAFCDA1C04E6BDD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9e652173102a5c61f3f8ae4fdcc8281224bf218c7c7796220ae48d9797d67625
MD5 85e91b6dc87eb0c1580062f6a4d812af
SHA1 1b6583dfe7915fd6a961be86b6ab1f6da7421d6a
SHA512 98686d4186176861098eb055ee269df1cddbebf29c91e3fa2064330415dff6340a5488d6feec92f230c913ca42e44e75c820f34970f81f8a742fd6719e5eed35
SSDEEP 768:6BUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RhroVp0l:6BUZYTMWvg0Pou1ja7eLZmRawl
TLSH
T133D20B2B280CCB7E4F844E9DEC2A6F967DD801CB5A984D5447EA884C03CB7EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 aed7d93800bd21d13a063408450515775203ab0142c9ffa6034cf9b2cb3f43da
MD5 8589c5f6abd2943a778d3e29284d7c63
SHA1 a405ee28cf92f96fdd62b1ed01b8a211de254adc
SHA512 1704262436157705e6aa98d99a1de5449303aaa7661080d4540f5c6d4249d423ef403cf55542063ec4642cc830589cca24fb2d05ec296919f58c73dbe388d7e1
SSDEEP 96:KA1eK2AkWcKjCGm7mKM47iQKDKq25mKy46:EGbdzHFD
TLSH
T14CD13B5270B7D2123C3D2B0896959767DE81F1A3701CA4AB7B6D11B18E2BE209DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592f63.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592f63.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 12fe3fa8e95939173f3162b2f9cd8ada309aa8c8b9ee3b525f4bbb832c27cf83
MD5 95885c6596a08e2d525c8b481cc13dda
SHA1 d6ddb94a5dbd6f6cdcf8eed67e759ca23c605194
SHA512 5b550fb3b4c2c8837153418c7de309d0b455edefff89f880f187bc9c4fb71f662bdf7c2e9021c0bb267731a7fadd342c0c51ade9ab355a9159b1cc293b2cf837
SSDEEP 384:NZcIwsNNJ9HQ6GzX5od+ndiV+DtJrdKgBeRs9JKgqijUK0:VwataOOYChdKgTjKgqmUK0
TLSH
T1CF928C315834A97699E6B586F48732574FF89027E7C47FD891FCBF1C009A5A8130A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9f3677c60b8c2fc1b67e4e1beb012327f10a8078970b8ebc4b5bfec1eda2e79d
MD5 9fac4caf12306db67961842bf7631c90
SHA1 cd098bae93bfea233be7dac118b17dd5b4945bad
SHA512 2d2b22281ca0518cac26f051932f5d540c2182f7fde8d897ac0e4b8bf4a783592f41cb366cb689d2345d7291cd362f726241de7788bebe0aa1557bf6952f01c3
SSDEEP 384:hZcIwsNNJ9HQPH2zX5od+ndiV+DtJrdKgBeRs9JKgqijUK0:pwaUHqOOYChdKgTjKgqmUK0
TLSH
T199928C315834A97699E6B586F48732534FF89027E7C4BFD891FCAF1C009A5A8130A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ac7417181bad2de5f122a953efd522ced8b4e7d46fca818a050aef6f8ec3237f
MD5 75d59e0f2e00243c9d709063e3bab2d5
SHA1 cf390d5307b9ba211b1656aef3883b11eb3dc6b9
SHA512 cdc6d60ff4899942ebdca8c07bec0239d450ac106da61171d9b701bf782dceba16094a4b872abd37a50d6327db0c3fd77c6e0b1924448629bf32baead656040e
SSDEEP 384:XiFiZcIHysNX8TUNTUlIlA9HQ2H2zX5od+ndiV+DtJrNKgBeRs9JKgqijUK0:SFQSSwgcJHqOOYChNKgTjKgqmUK0
TLSH
T1F6D23AF244D79536D9AEAB43E77D2D424EBCC053F580AA94B3D85A0CCC561BFC306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6e5653338040f46e9409ccd2b12d9b1d0d450eb3954e3f6930bd1d400670bb2d
MD5 b12035fb17e2da67edd919197c56c93a
SHA1 b68d4b5294ddef898eb9314fa7dd7982b6d81e36
SHA512 081dc2da3a218e7407554aabba950d05c560cffb45e9ff906a804db48b23b5a122ccb8d7122832a37eb0603b5d6fbdd401196d983f7946e66c80eb60f0254938
SSDEEP 192:yONR61VWQmiUyaLgGX5Obd+jA+Fdg3ao+j/aKK3jsU6:yONR6WDgGX5od+ndiV+mKysU6
TLSH
T13802C73568687CBBCEF2BE4AB48737535F952067EA952F84D6F81B1C009769C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5bdf9c43bd124cfba3ef659fc0ea9bba98f21918e81b8c007c0f6bd7d30b3036
MD5 b10ace1b55957732a282186cf5e7500a
SHA1 3347324c565547c11097e87b8a10b45d05a77c19
SHA512 7591d071ff0cb67b4baea9d41899032b7de276c43af4aa50ce895f8c70949bc81c2913248da569eda8e998395c5df8c693361c19d5b2714a686607347e59c872
SSDEEP 384:4ZcIwsNNA9HQPH2zX5od+ndiV+DtJrdKgBeRs9JKgqijUK0:GwhUHqOOYChdKgTjKgqmUK0
TLSH
T146928D315434A97699E6F586F48736534FF89027D7C4BFD491FCBF1C009A5A8130A92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cf0929a7413e381dac78fb6a72035096a58227b41dde3dc40f0af1e68e46b7d9
MD5 480d5f098a777d2ea15a8eeebe15eda3
SHA1 df390b5e828377fd47370b5a0fb3a523748e64cd
SHA512 a7a5b18f04b2c40a22a752e4ad42726f46070fd28da507c5adbd213f7b395139d3e3af67740ff9a8308c443bc2cac5bb49a14c47a2e52e23a8683c44a8e9927f
SSDEEP 192:OON461zWQmiUyvALSGX5Obd+jA+Fdg3ao+d1ySJrzjJKYqWU6:OON46o3SGX5od+ndiV+DtJrBKgU6
TLSH
T10812093264686C6B8EE2B545F48731539EA55167DB897FC4D2FC2B1C01EB6AC130A817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8e6e8eb9e2881cee3d7cbfb4b05ee7a1f61511ff97571e5492215f29e057032f
MD5 c94ab376c41a9a4e9b09ab5121f74a02
SHA1 b13c865649c842c73fc34bc7e0a1732f16791468
SHA512 8ab056c48e7c8b885bca47115f006e6ef939875c282b5a4215ebf12b2e7a4c595ed8918bc995bb701a39525b5d2d378d746a6779ebf6e4d783a5950ef57643fe
TLSH
T1CD41F858B6E91044B3B76E5AABF6A8AE487E7D772E0AD45E10110D4F0922B40C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download