hxxps://www[.]notion[.]com/startups

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 09:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.notion.com/startups
Sample260807-lftfwsvva1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3420	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134305685506365894"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{C0F3B189-F19E-439E-A539-F077AF944B51}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{CD54CD1F-50C2-48AC-A0D1-E94830665F49}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3652	msedge.exe
3652	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 820	4904	msedge.exe	89
PID 4904 wrote to memory of 5780	4904	msedge.exe	90
PID 4904 wrote to memory of 3420	4904	msedge.exe	91
PID 4904 wrote to memory of 5780	4904	msedge.exe	90
PID 4904 wrote to memory of 5780	4904	msedge.exe	90
PID 4904 wrote to memory of 4164	4904	msedge.exe	92
PID 4904 wrote to memory of 4164	4904	msedge.exe	92
PID 4904 wrote to memory of 5896	4904	msedge.exe	94
PID 4904 wrote to memory of 5896	4904	msedge.exe	94
PID 4904 wrote to memory of 5896	4904	msedge.exe	94
PID 4904 wrote to memory of 2132	4904	msedge.exe	95
PID 4904 wrote to memory of 2132	4904	msedge.exe	95
PID 4904 wrote to memory of 2132	4904	msedge.exe	95
PID 4904 wrote to memory of 296	4904	msedge.exe	96
PID 4904 wrote to memory of 296	4904	msedge.exe	96
PID 4904 wrote to memory of 296	4904	msedge.exe	96
PID 4904 wrote to memory of 352	4904	msedge.exe	97
PID 4904 wrote to memory of 352	4904	msedge.exe	97
PID 4904 wrote to memory of 352	4904	msedge.exe	97
PID 4904 wrote to memory of 2076	4904	msedge.exe	99
PID 4904 wrote to memory of 2076	4904	msedge.exe	99
PID 4904 wrote to memory of 3684	4904	msedge.exe	100
PID 4904 wrote to memory of 3684	4904	msedge.exe	100
PID 4904 wrote to memory of 4172	4904	msedge.exe	102
PID 4904 wrote to memory of 4896	4904	msedge.exe	105
PID 4904 wrote to memory of 4896	4904	msedge.exe	105
PID 4904 wrote to memory of 5672	4904	msedge.exe	107
PID 4904 wrote to memory of 5080	4904	msedge.exe	108
PID 4904 wrote to memory of 4360	4904	msedge.exe	109
PID 4904 wrote to memory of 1772	4904	msedge.exe	110
PID 4904 wrote to memory of 1772	4904	msedge.exe	110
PID 4904 wrote to memory of 1772	4904	msedge.exe	110
PID 4904 wrote to memory of 4352	4904	msedge.exe	111
PID 4904 wrote to memory of 5308	4904	msedge.exe	112
PID 4904 wrote to memory of 5308	4904	msedge.exe	112
PID 4904 wrote to memory of 4248	4904	msedge.exe	113
PID 4904 wrote to memory of 4248	4904	msedge.exe	113
PID 4904 wrote to memory of 3652	4904	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.notion.com/startups
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffd912ec188,0x7ffd912ec194,0x7ffd912ec1a0
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,12787578430552881493,5456526370964795693,262144 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:2
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1768,i,3468891320270268877,2948617665382805675,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,587904434300258069,9853430229639130422,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:13
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,6432430963600759651,9610098639528872919,2097152 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3668,i,10021600046250739182,8121532629923453826,2097152 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,5574232696985933592,13205572625142796609,2097152 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,120077828777387363,10644866860545095143,2097152 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:9
  2⤵
  PID:352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,9013109619416794812,7549205973900085608,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,9546649419430669223,6128211006162240186,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,4389278307556441408,14524350578543411542,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,4389278307556441408,14524350578543411542,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,3922653281886874256,10037685780688002895,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:14
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7172,i,2667358282161045131,6402894036270111904,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:14
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7180,i,15430835611383636962,6283667028853354668,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:14
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7152,i,3516071955186924113,445510625180102471,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:14
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=2132,i,151072019090187170,15631988645107609226,2097152 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,765735028347826262,10377020214480117216,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:14
  2⤵
  - Modifies registry class
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,12151075367113127067,4125193993346398584,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:12
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,8268831219445306996,15923896648830927371,524288 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:14
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7496,i,6583369654431662542,16698423408731961762,262144 --field-trial-handle=2400,i,3851206170548586495,2579894026194662815,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3652

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3044

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 17KB
SHA256 7f8d6f656091bba7b56bc6d3eb15b41a4bd2e2a1c70c1fbca1ac14b432264539
MD5 01d7d688d00b0d7a3687c09f464aef4a
SHA1 fb29446b6e38aec934e940eb7e8da33b8721f917
SHA512 568c583e2516f50dcbb2a16bbec3194df95379dc12b4be97bb7cfac58c2ed0b71e7bb63373fe0539dd4f139a50f6095763e219244f4b6b59333a1dc692d4b95f
SSDEEP 384:dPK939eOJa9ZzSmm8G5wgV4GFIErUavKmpji/pjIcsunVa+Tea2jpnik:dYK9Zzr45wghIEwaLp8OuV8a8sk
TLSH
T17682D164C068AE5F9E04F329D6A8C50EE5DFCF1830F3A6C9AC7C96F4581A65019CA1CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 b084605dc0278439d0e7cee0e34fa618f9ba6936b062fc0f9e02caf3e3018dbc
MD5 305bfe54eec0104e36ea1900a64f8a9d
SHA1 7800b72eb56a07e736407574e89607cb6a1b2dfa
SHA512 3ee62aaadfb6e2995ec824dff1697ecfa913948a55714bc54ea46734dfb0449f8c544f9fd158dc6ae3d0d4b844cfc4e54b2273d477361c10c2d866ab11c3dcfa
SSDEEP 96:JaMo3m/WU/3oxFautsJrPK6fN5LnYdyGo6eQZqJDZ7eiL0oniiGmvs33fEPWt5:U0WQQBCf87oTQZqJphniiGcuH
TLSH
T18E02EBD5929946E2CB515071F6D918BC32F0A46E25073F0A47C21F382763F8CA9FA26F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59e9ba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e9ba.TMP
Size 3KB
SHA256 3509dffbbcd1ea7ba2b0e3d1bf6faa25b7032866e086c7d132b665ce42cf7dc2
MD5 504ca169f602fc7b539ae925e8e1b5da
SHA1 2344f8d0ef47ba3ff451f4791df65210d0aae453
SHA512 1caaf6b1caaf0690f67379896e46087a96c7e3806bfcbdb8d7307c959a8380089c86b08460cf38e7a2fd20f9e2c20b0eeeea498a9828ae27abdd72c327e1ba50
TLSH
T1DF61D996C3224BF7D72985B235E944AE31F14876390B1F02905B5D3948A3F8C29EF173
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_app.notion.com_0.indexeddb.leveldb\000004.log
Size 3KB
SHA256 be62c06b86ae2eef43204f0a7bc0a2743b50cdb672a03b3e5bbe1b08efad1928
MD5 51fc1efd3c2d51be2c5360316efc842c
SHA1 ad4d0f46f0a821e086ca43483053b6948e6db4c7
SHA512 1835cb5a5d2aa90c44cb079276ec01823f6dc58007526e3f95f1c688b53989b6dfa96dbb05baa86c58f14861e3b482f90c5acb705338163f5f86454f462558da
TLSH
T12B817D6F49A85A27F5FA4F355961AB86E236FC8CFC41C70E92C4721FC832540E9B4B15
MD5 SHA1 SHA512 TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_app.notion.com_0.indexeddb.leveldb\000004.log
Size 4KB
SHA256 e8ff9ac77f4435f844e6b4967246ae9d65b1e43a5bd152e0745dbd870ea3a819
MD5 de99338c8615c61fc26cbffff91b74a3
SHA1 2d9683a96bdc66aa1df433890748f7d4b7c221c7
SHA512 25984bffb467569239409d19f25287fd0090350827c6af56bab8f3f19f20455bcd44ca26cef0f1135460a66e34791ca62251a9f2e90942ecd574815844568485
SSDEEP 96:eYojZzQhKM6luDT0gdq6WdtlcKV6xZx6LCVKA6d6w6t947:xSc8r40Q5WdtlVExuD3dWA
TLSH
T144A1AE7B49A85A33F5FA4F355961AB86E236FC88FC41C70EA2C4721FC476240D9B4B15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_app.notion.com_0.indexeddb.leveldb\000005.ldb
Size 3KB
SHA256 b26bf4df6b3b3bbe01848c2809b4c14f38f7dfab029f62b6c7442212f9b497fc
MD5 1b76d979839358e4e0bdcec91ffc19c6
SHA1 9a29e65635e8c87640b9aa3d13b497bcf88e22f6
SHA512 67d02eaa173aae2db1a5430965b45c3a0703a7133d92d227f19bf16066b8c196eee0664799c6961efd77c685963c0cb85f39c284151f0c99f98785dea71e7f06
TLSH
T1B761B562A71C5429D83A473BA3F529DF67E0B80C3E6685DE3BA1232D1D2150A1872A06
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_app.notion.com_0.indexeddb.leveldb\LOG
Size 671B
SHA256 16c91c176f0483c99f7383390bdea8de8bef6a587e51df0470747b40aec4c391
MD5 c76a96efd02e6fb6e4548114a87c379a
SHA1 a42da201611aa9404696e4aaa9f0f4a42f639b34
SHA512 85e0ba069b520f10f2a3d2dc1921d2fce1ec924d36b785717d38e79137873309c096004307ef37a1ede7d7a4c55269c524c64df3a1e614b8089566859495aba2
TLSH
T15C011BDAC9D0C62B7000907B92293700CCD7708BDE4CBF94EE40F990AB8280AA43ECB0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_app.notion.com_0.indexeddb.leveldb\MANIFEST-000001
Size 95B
SHA256 3c33288853a4becdd9efe361871c419285b84ed82e1add20513c0a3916f0631b
MD5 f0960dab674378f2fdb11aedb6ce71fd
SHA1 473e418df0eeddea109f86711ab57d3067f634ae
SHA512 bdc1d36a588c137c7f67ac5f7caf02fcdb6a4e020973d29e8d22a1b484eaf2b5330452e4adbfdd25bf4451044ff25ff94920e529be66bb1b74127a51d26b6d5d
TLSH
T19FB012A043095AEAD4791438D46FA001C5243E4D0687DE13B008013D00915408D25119
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 0546019d560123f4fd26de885ed2e6689e7b31c3f40134feb52c0689d8a1117c
MD5 07ca2bcabc70168757ed3ef2fb43d080
SHA1 13270fcb6b2ac6572168a657a85c2414e2d147c7
SHA512 585ca20a1c4666e146486969e3c3955c14f7233aec484dfda140dff11022f398ea2923145b928f2a2c2ee264d2f339a2a26067116d17b92b860b25c36b027780
SSDEEP 192:D6bFnbBYmiaDeiJ1wE1WS+r3SklvtGRNTo:D6bFnbBYmiaDeiJ1wE1WS+r3SklvtGRy
TLSH
T1C0C1BCF3C3E5922D9D1216F19A15AE1BCE2E0A14431C3D2989D5BE4BE3F2871F14275E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 03209567d01e2b26d1cf2105200b1c5ac422e2edf2dafdd26c4ad916da3c531a
MD5 a7eda745f1ac8227d1f628c1c0ed7984
SHA1 a51f77ee88f5ca90b2b24d617c72fc357365b09f
SHA512 42cd56eed15f49efb424c54693a8e3bb478f49d3b918c21cdde3b2e7f92794f66c492d1fba6ba00c6a915abc8034f3c31e6932f3082cfc3304a622f7b7b5c90a
SSDEEP 192:sxROQARNbb+/frGs8SYCbAJzoA8pW3/g6+WNjlGC/YEWm3uGpvIgIJ:sxROQA3b+/frGs8SPAUY/5hp/y2Ts
TLSH
T12532D6566928AD3B9CCBE21DFA15BF53D6F85033A0902F18B6FC960C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6c7a86ef10ddd5bf946adcd09565f58705eea533668d1db6ea8d2f36e8c2b68a
MD5 b9b05bb7eeab4e2d12d7cf7e8932d6d7
SHA1 cf26cb77f278351f6b601772ddfea4a19a4e24a7
SHA512 24ef6cb17196a6729980972dd1989ce6104592dc8f5f0b7d859841197728c8f0edf8af8625c4f29caca5c81df6f2a1184bf86d8b834e662960329a6a9bf76550
SSDEEP 192:sxROvARyOb+/frGsSlYCbAJzoA8pWC/g6+WNgkAhIouXYE23uGpvIgDTJ:sxROvAvb+/frGsSlPAU1/5oWXKT5
TLSH
T15642D7566928AD3B9CCBE21DFA55BF52D2F95033A1D01F58B6FC9A1C00E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 cd918fb891da41316f1803028199c9da8b398602552b0ed8c8edea28e5c62286
MD5 28188084dcb698b17902080ad92f1cdc
SHA1 345cb515936f3082afe3679edaf85b1a905cb77b
SHA512 42b2889a2b7a001f168f211d2412069899b1d239aeabe5fb748591ff0f68c6a06a086e163faa5dfba761fe80e17784a14ae4c13a3798c04c66ee7d9f623ea38b
SSDEEP 192:sxROvARNOb+/frGsSSYCbAJzoA8pWC/g6+WNgEouXYEL3uGpvIgD9J:sxROvAqb+/frGsSSPAU1/5BXPTL
TLSH
T1B442D6566928AD3B9CCBD21DFA19BF53D6F95032A1D01F58B6FC960C04E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 e8600cf1011c3de54b171ab777df1ccb7220f271dc12d1cb5ddd2b111ad8f446
MD5 7c8aa90a8d121f64b202ceec9d42a798
SHA1 a964555bb48c96297ccbb449892a1d4679c425a0
SHA512 9a6ee0c6f8d035a001ef3b502e01037f0e9d951a68ce8d1f6d682abd8242085b27367a7854a4d4d7a8bde526a837ebfa92db3733496e118e4698b684771d295d
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVl:40Dk6DJQD810DbWgQ6DjfIQDF8F1+Uog
TLSH
T143B2DA2F640DCB7F5F804A9DAC19AFD76D9802C796988D8047FE990C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 4KB
SHA256 0cce207ab538c708ed3fd06033c57e2de6a84cbf43c0183159725dbb9ad69c1c
MD5 97d5d21571a0c972de3390f175e9546b
SHA1 0edd48785e3d6a281868104c4cc083e1b13fc2e8
SHA512 130dc319fdf1133a26ab03981d3c071291a4a0ffb5294b5f170bd61dbc0bdf9ee3af28ca1b501da736d5a7ab6b777f9b64d2c8085092f6cd3dc202e1e9c1e667
SSDEEP 96:I98Q/7Lg2YNsNMrnBAOWNxA5VzkkrL7NjrJ:I98I7as6rBAuHzn9jrJ
TLSH
T197914B2483C0886BE96641F8B1FBB14D7FBDE7252241636310B29095FEBA353CD4C266
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 4KB
SHA256 4f08681a8bd77f82b13914064f6bd0c561aa9986b0bb4e9ae5916a985b9a4c82
MD5 a971e7a7749ab902f543e6b137f2a2e3
SHA1 4ebde43098b2d88d0ecd9c539e8fbb3954779181
SHA512 e740ec96d7f4100edd085b297bb3afe1aba982551443542b5cf941ef6fa38f64c1a47914f1cd1855ec32bf155b1b5613d091ec63eae8844530e7e29aef2baaa0
SSDEEP 96:N98Q/7Lg2ZNsNMrnBAOWNxA5VzkkrL7Njr9:N98I7Ns6rBAuHzn9jr9
TLSH
T103913B14C3C0886AE96641F8B0FB714D7BBDE7656241236710B39095FEE6353CD4C266
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 2KB
SHA256 6c991cddf04640ab13cb38bcee427ec7ee933f9766bda7d2e1d851f2550c1ca9
MD5 3f5b93924874cfc11a0cc529fe5c4da1
SHA1 b8c50b12961393a89632eb8fc255abbf13c4ca90
SHA512 72df8ff9497ba138cf7bd2b1d1018d5b68db7003864971106627fe8fcfae2f0a9346e8cf2bdb7fb98ce686b558b3e31e53d7eceb95135b4835ad4edc026a6df5
TLSH
T1FB51A35534BE16813C7E650D917DC81A46C3B0623349B5AF77AE01A20FE6E135DFC8D8
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\d5672fcf-4add-4710-9799-600149ab62fa\index-dir\the-real-index
Size 72B
SHA256 67cf12bf070a2c1834dbdc73016f25b0327da08dd14d46fea0d80983962e1de3
MD5 cdb746bfb80eeaa57098cdba31a4346f
SHA1 7904ed588c8c09109c2795744c8e255c9b1fd35d
SHA512 26d783d0c3d3f7e21c2e84969efe8286cd2eb147a886ef84c9c7c32ba87b009aae403bc6123639aff66999be9795256674eb93e124247c9cff6321afcb485aeb
TLSH
T1E0A0025083D56051D010377460854FB23710DA64551507C3449003CC8CA43D55A1501D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e035.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\d5672fcf-4add-4710-9799-600149ab62fa\index-dir\the-real-index~RFe59e035.TMP
Size 48B
SHA256 ab400d99157c90a96a1ab3151c134b0b363d77c4544c4912d85ac2dc22c96ba7
MD5 711545d4da8f1e69f085f1bbb326026a
SHA1 c7cb7da7693bbc9515c688ac0f8b831808011837
SHA512 4eff83cc791c2341e019b95368330c9d687124f6c420f11481e6bb09bea6ea768354a6e71930b1eb9f34dfecc1e6105dab9b99bed0ce4c9d47fb9ebbeb6a00ef
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 90B
SHA256 3090fe32afd2a5acbf910c2a01c320f5035c5e61c2aeb62d91248c7556615759
MD5 8a5fc0d84a2b0cf6a8619fd4de76eb06
SHA1 777f46b28cc452cf8dba6f8567001be289f22bf6
SHA512 6317dc2a3cdda4c483806e4031277e8b10e40b28e2e556b726e999fa880cabe6d909e1e406c45dc150b9861f009517ab149d1139bd29576ca11e3d334b10af07
TLSH
T1EAB002BF114155D52EB139F7000571DDC47332C99C80FE9C84711154331497E2003C34
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5997b2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5997b2.TMP
Size 177B
SHA256 54678c809aad323b2cbcc5074992b716b102c686d68ecc38719a330fb36dd74e
MD5 4c30b7d7286c588996b99661a5e77d9d
SHA1 f7df08a8e332b6c9dbb5addfad9e9d344e5d8fde
SHA512 d933cd7d8e7fc8b717229125edd535932b76c8b6236408dd5c9e08bef55df57f19e85328b0fd6b26dd0cf0a58e33d9592c10548997fe52fff2c3abc80cbb207e
TLSH
T166C0807B1144D5513FB954FB110571D4C8373FC54CC4F64C441131553230C191002830
MD5 SHA1 SHA512 TLSH

Submit Download

f99a37c4-a25f-4551-9606-522755e834a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f99a37c4-a25f-4551-9606-522755e834a9.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3e9aa28bc0f7d7065e2a9b4c3059523d3c0978b9286f7549bc2c305bbc04ebe6
MD5 1adb780dd0bf0bbd09ae4b00ec9f8928
SHA1 680cde3d3d35902a5e497943ac8c1b8853ae07d8
SHA512 47fbdce5d9784cdfa196cc268f9c522028f607354302653250cec978198f5fdc77f203388dca502bcf204b165752961e48c31d7284b85b9578cfc4bfaa36452b
SSDEEP 768:krv+4UNbdJ3FSuwZDTd+ZoH0JeX6+qTko0u229a4vsTj/E:kbsbH34urpIvVTVKa4iM
TLSH
T1C103BE32F8699DB78DF6D684B10B72436F7821A3C6C81B64D9DD7A4E014F0AC270B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 e1583d0dfc26380ee9b1b31a1c8242107000ccaf47031a0f566460e9a8c7d1b0
MD5 3bb6cc8b083c74fcfee43335f8b30831
SHA1 c3385f3b7ec951a02e482340f9eaeb0bfeb8b6a1
SHA512 1fc6bd26e3be93f37e7557db16c44fbcd44dca5228d9c613a7bafaa95a7c62b399698dc26ed06b547325d60cd5b97caa4a91cd7a122638a25de8cd23c074d766
SSDEEP 768:6FQJ3DwgkSXwZDTd+ZoH0GeX6+qTko0u229a4vsTjtg:hJ3xXrp1vVTVKa4i2
TLSH
T1D4135AF298D38977D9AE8783633E2E028EBDC163F1842654B7DC691DCC1A17FD606816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 17244e7aac458f61821431e4822d3390783f48246f0a82674f302100b09576f6
MD5 819959e64f888dccbb9f28f50441bc16
SHA1 aae61b7edfe2819d535787320790435b77378cfb
SHA512 160db8acf7973202d9243996813e00772c766f94a72c4b4a10e255286324f65431af3d7c15ef39be9776a34903f49428432a9ef42694e2ca705a1d52b90db4e6
SSDEEP 768:Am3FSgwZDTd+ZoH0IeX6+qTko0u229a4vsTjtg:Am34grpnvVTVKa4i2
TLSH
T1C1F2CF31B8609D7399EAD7C4721733479EB55273C3C82B5899EDBA2D015B16C2B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cd480c4c5e9294493e01b77b4b1267d9ca9bb8fa208e6487ca36449a83570e8c
MD5 ebdbe3adf441acd300b4664b20a04563
SHA1 22d70841443e63835f5d4b843996eb3278c57616
SHA512 a4bd278ef146efbea238fe74964003ee65965598f6df3a7c229c2b78fdd16bd858026f1f1efe1d7662d44800bd79dee90073d219a63adff60ba66ca9785f59b1
SSDEEP 768:Ym3gSgwZDTd+ZoH0IeX6+qTko0u229a4vsTjtg:Ym3vgrpnvVTVKa4i2
TLSH
T1E2F2CF71B8609D7399EAD7C4721733439EB55263C3C82B5899EDBA2D015F16C2B0BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 4dc85ee9fe16f60679feac8ecc77bfdaefff6ace803b5823054c86e4ffaff0b9
MD5 7a23b4d0a6d1a52aef64b2eba8133643
SHA1 f049dc4e0c6c3ca3d18edacdd0e4c3806e502fb8
SHA512 c31bc7037107a8a9b66718d0eab5e619dd64115bcc43575f62179512b8ed2d19ce828da34e8e205e5b01442d146a7e02cdbf9e1f66277faabae0212d042f37c4
SSDEEP 768:prv+4UNbdG3NTyDTd+ZogeX6+qTko0u229a4vsDQeVH1SdW:pbsbU3RmvVTVKa4NEH1h
TLSH
T1B403CF32E8698D778CE6D784714B75472FB92163C7881B90D9EDAB0D029F5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e0bae32-9649-44e1-8cf4-a1b58909007d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4e0bae32-9649-44e1-8cf4-a1b58909007d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download