7b3d915787cd883fbdc36dfd58d38f2fa022d1ef672654acacb1b10cac055dbe

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Deep Glow 2 v1.1.0/Documentation and Help.html
Size 148B
Sample260809-vstrvsaq6t
SHA256 7b3d915787cd883fbdc36dfd58d38f2fa022d1ef672654acacb1b10cac055dbe
MD5 f5cbb6cad5ed6ed5c0b90ec85e7001d0
SHA1 f2fa77a213be22ea742f3921514bb239b90509f3
SHA512 0fb5592e9dce09e0ac924a1a156fa2b2365696996abd8331ddaa504d4cc8c213dde3aa6f81078d6c6c532335f5e54d42952cde4c120ff70c801853c02d5c6a61
TLSH
T18BC08CE71C13D10015A00840D8AAEA45902B42AD8080C0C084C2C1B15218F9BC91B3CC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5896	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307693750016612"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{A6047988-E89A-4E8C-A323-611DEBF37AA0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6052	msedge.exe
6052	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 5944	4936	msedge.exe	89
PID 4936 wrote to memory of 5896	4936	msedge.exe	90
PID 4936 wrote to memory of 2780	4936	msedge.exe	92
PID 4936 wrote to memory of 2780	4936	msedge.exe	92
PID 4936 wrote to memory of 876	4936	msedge.exe	91
PID 4936 wrote to memory of 876	4936	msedge.exe	91
PID 4936 wrote to memory of 876	4936	msedge.exe	91
PID 4936 wrote to memory of 5048	4936	msedge.exe	93
PID 4936 wrote to memory of 5048	4936	msedge.exe	93
PID 4936 wrote to memory of 5048	4936	msedge.exe	93
PID 4936 wrote to memory of 3172	4936	msedge.exe	94
PID 4936 wrote to memory of 3172	4936	msedge.exe	94
PID 4936 wrote to memory of 3172	4936	msedge.exe	94
PID 4936 wrote to memory of 4248	4936	msedge.exe	96
PID 4936 wrote to memory of 4248	4936	msedge.exe	96
PID 4936 wrote to memory of 4248	4936	msedge.exe	96
PID 4936 wrote to memory of 52	4936	msedge.exe	97
PID 4936 wrote to memory of 52	4936	msedge.exe	97
PID 4936 wrote to memory of 52	4936	msedge.exe	97
PID 4936 wrote to memory of 4540	4936	msedge.exe	98
PID 4936 wrote to memory of 4540	4936	msedge.exe	98
PID 4936 wrote to memory of 4540	4936	msedge.exe	98
PID 4936 wrote to memory of 4724	4936	msedge.exe	100
PID 4936 wrote to memory of 5688	4936	msedge.exe	101
PID 4936 wrote to memory of 4724	4936	msedge.exe	100
PID 4936 wrote to memory of 5688	4936	msedge.exe	101
PID 4936 wrote to memory of 2156	4936	msedge.exe	103
PID 4936 wrote to memory of 1600	4936	msedge.exe	104
PID 4936 wrote to memory of 1600	4936	msedge.exe	104
PID 4936 wrote to memory of 1600	4936	msedge.exe	104
PID 4936 wrote to memory of 7568	4936	msedge.exe	108
PID 4936 wrote to memory of 7576	4936	msedge.exe	109
PID 4936 wrote to memory of 7584	4936	msedge.exe	110
PID 4936 wrote to memory of 2356	4936	msedge.exe	111
PID 4936 wrote to memory of 2356	4936	msedge.exe	111
PID 4936 wrote to memory of 4500	4936	msedge.exe	112
PID 4936 wrote to memory of 4500	4936	msedge.exe	112
PID 4936 wrote to memory of 6052	4936	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Deep Glow 2 v1.1.0\Documentation and Help.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x234,0x2c8,0x7ffbde00c188,0x7ffbde00c194,0x7ffbde00c1a0
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,1118703775678770078,4269661192615976320,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,14115104409829505917,5412595535727420216,262144 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2184,i,10286857856776987738,12069248895852453807,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:13
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,9776482406899196128,11170822468976573996,2097152 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,1848905019359141030,1924245572921686340,2097152 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,1989337325285847173,5584418216196933831,2097152 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4392,i,6825313123444543171,13034679878273809793,2097152 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:52
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3500,i,3013762169403691291,7278392327344561616,2097152 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,13981036359095485317,14931867760373401046,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:14
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,1914335040515047600,14404992393547023270,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:14
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,15541791692835995975,5456031434073131323,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,15541791692835995975,5456031434073131323,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6020,i,13392112294949207079,8182851832397872342,2097152 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7692,i,1108914146830597401,6006823429692064514,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:14
  2⤵
  PID:7568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7612,i,3368555849755046392,7913137171175409234,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:14
  2⤵
  PID:7576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7584,i,13379417091527918991,3685820355122630131,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:14
  2⤵
  PID:7584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,5520414768838299880,9450967349771033051,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:14
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7688,i,3535550831071504722,9818042117130609000,524288 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=7556 /prefetch:14
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6912,i,7422778167907928673,3761052564200115074,262144 --field-trial-handle=2200,i,16633180007627556946,8824676413954411562,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 17KB
SHA256 7f8d6f656091bba7b56bc6d3eb15b41a4bd2e2a1c70c1fbca1ac14b432264539
MD5 01d7d688d00b0d7a3687c09f464aef4a
SHA1 fb29446b6e38aec934e940eb7e8da33b8721f917
SHA512 568c583e2516f50dcbb2a16bbec3194df95379dc12b4be97bb7cfac58c2ed0b71e7bb63373fe0539dd4f139a50f6095763e219244f4b6b59333a1dc692d4b95f
SSDEEP 384:dPK939eOJa9ZzSmm8G5wgV4GFIErUavKmpji/pjIcsunVa+Tea2jpnik:dYK9Zzr45wghIEwaLp8OuV8a8sk
TLSH
T17682D164C068AE5F9E04F329D6A8C50EE5DFCF1830F3A6C9AC7C96F4581A65019CA1CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 16KB
SHA256 2895aeffdcf2b40639e98177fb016d2147150068dd01e7c011a68a79e0b0aedb
MD5 9cfadbf6e0c1901fb7762eb40e0e6723
SHA1 d8465f7dd2890510649014ddf23fca64a6a93ee1
SHA512 1524d45ad41c92f5e62c0d3a51371fbb0c70dac1a56f7ce056ba003b159bb229dc4843c969cc2f853baaf9bcffffbfc740df7b88d3287ab57a04586eca753bda
SSDEEP 192:x1QFJPUI6EqsZqrMozMHg74cUNRTwG4+BtyBHRiLeLitpBp4z0jNX2modi6:xmJsI6EJoMR0GttybzitpTRX2m2i6
TLSH
T1C972C5A94AE59EC8CB92A13158DA1C97B2F546034C53DF13676D0F7E10CBFCA44AA273
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 861b221a9e1df3ad3deaccef10c3eec07710ae3281d9e974d7084409ef861bfe
MD5 39dd74da531a3faf51ed449ba297cbac
SHA1 a49b892fd1e9c3df3b264aaa5223fe0c99db2ea1
SHA512 b8eb08429c449f1d2c9c5762bd7a650a052d8978953636d18c539697d528f6341576e8b27ac15e406aeb32be0763ad5340ed55c33df8222f64354e7ad2baaaae
TLSH
T1A7B011A0003308A2EA0823B0028A0B02A3A28C830BC20203A2C20A2088B2E82CB0022A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_pluginevery.notion.site_0.indexeddb.leveldb\000004.log
Size 24KB
SHA256 dd466e0e821107225e322b604063760ec10fac093cead663578ac75b2a1c576e
MD5 76d37656dd339128655182ec9bd87194
SHA1 b88d0969b4fecdf7732d7e50beb971450a02365e
SHA512 48e37e5aadad8ad6b68c74a0e6f8185067d60e1a6847e960f80c032397197176454061cc4cdf4435278562b5048bdc2dadf779c307f29addee411a5803660417
SSDEEP 768:9EK0uMqsNm2q6G2i/ohRygYYYYYYYYYYYYYiEkRKHwm5P:+h0TkRKHF5P
TLSH
T1E7B2D9DB1720ADBBD35A1835787DFB81E2B1BF346C85950BE1D476ADE2B2806D4B8007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_pluginevery.notion.site_0.indexeddb.leveldb\000005.ldb
Size 1KB
SHA256 80bab0268ea41e1374608f77b14e8c30804ea1dd2a36a8d8260b5073a3dc89f8
MD5 de1d05b4a7ffa8da1c45b20bd4260c57
SHA1 2bdc7782e58f94e5b132c3b48ca54c924254cdeb
SHA512 87f0515b75ab2e8750121ca8855608ee633d40c7d0b8200da0f3d2f9290b7aaa611760d13be66287f4d9a96731071c57352b3add5fbb3c463c6a10c5a5e612f1
TLSH
T19911B56A43DC4479F95A0337E1F602EA47F6F5417A9C97492601730E44A9A020DF320B
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_pluginevery.notion.site_0.indexeddb.leveldb\LOG
Size 694B
SHA256 ff61a078ff808ef3f8d6b0558564e354ba619e87a89a1bb68539266b5c8967fd
MD5 fe32ee87607cb31406b265b7dd2a7a0c
SHA1 b374a75217ba9262ca13825217b0a0ea6a9442f7
SHA512 399fba8a756cfb6dbaa2d8d70cad755569840d3268219fab63caac4adf7a06a5ee316320d030608314e7691cb49d078cb525312410c3a76bab79078bda2e52df
TLSH
T1A001D09D498986E509C1D0E390387B48C5A7318ADB48FB445E54EE8C6A8100E91DB574
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_pluginevery.notion.site_0.indexeddb.leveldb\MANIFEST-000001
Size 71B
SHA256 4f487a9d608552d18c1d5f01a766435da229914590cd9d22460ef9526b71ee28
MD5 0b81c9c08a8a5d0476ac9e2ee058d03c
SHA1 be49c0446dd6c238ea30c117c3e10a469b6d52ca
SHA512 b8c3cafbaac39c8c15cf37fb87265449f466a9108332c71e1c86c6f20795960e82b5280f12c51f96d77ee2ace2166fb1862030d445a25be5246a4918ac5f1889
TLSH
T154A0223B820002B2C0282A3C88BB0380EF0A0080030BE3003C0E0B3000C0B000C0A88C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 a78730d78af9d19095c0171a280081ccc5ce799cd4ebe80142d29152dc49deed
MD5 5c11aea66f50e913755417c92ccfe6a1
SHA1 a8d84fc951f67864f2d326969149ebd60a8691c3
SHA512 73c5c8837c4833fde5689e1a06fdbb7081eeee9b015d42a08ddc29422f05980c14dc545f94b1801b9eb7e0d69f93150f53833dc26636a6294a8363efe4258114
SSDEEP 96:DkOUxHVaaiZjhIzBBm3h3Xpj61tUkuTGewBiU:DvUxHVaaiZjhI1Bm3h3Zj61tRuTGeQiU
TLSH
T1FAA18DF782F4863DC91289F4B7986F1ACE2D0565435C3C9AC5E4AE1B63F2471E18168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 daec1726b1524cedff434ee1908ba2a4a18dcd7301d7d3abaddf0074ac4990d2
MD5 e41140d7ec785eec33f6560824e4da5a
SHA1 f8be9703b5df2a2be4fb21661b276dff927c0ce5
SHA512 85afd36f665e8d5ebbd8ffe60ee0c1987e1e28be204fcde155dbefa5f26cb550e55990f19adbc8acaa2ca32163ff9d279e848ad84270dbd5c376d93be0ad5252
TLSH
T11B319BF7C6E8567D8A0185F87B143E1BCE2D0854432C3E5AC4D4AF5BA7E1471D28094E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e3e48c5a1c792cf5a6c16b9848b8ae4cd2a6e248933eccde7152f9517c347042
MD5 f9751f520afeb23fed2358b359d1dcbd
SHA1 f7bf033c96e777479366a1ddb18155978741e520
SHA512 09d9960f298aa65f94da962f65272b581b40748627c268e47ad2f6d3dfd5d7ae288de981f0cd5a888a8fc5a84149c7a3f6e24d45e4d23d62ee846a8bd327ba2a
TLSH
T184319BF7C6E8567D8A0185F87B143E1BCE2D0854432C3E5AC4D4AF5BA7E1471D28095E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1fd88b304d7f3c39663ad2cde61e26f5bbb77ec4abff282b3b85e8a53fb45f98
MD5 a074dc2d42fe87901b63fc5bd95993f9
SHA1 b6c65503d8a9909238a81af5d414af1c885230ed
SHA512 151afe907330bf57c87479a15836a99ced346e5a88305e48e5e71e449affb406f2569ea219fdbf9ebcb450e437ef235db0a13ce2bc620ba1ba2613498443be3c
SSDEEP 192:sxRmRabn/fxsbY8bN8LzoA8p4p2/F/g6+WNaQf8/YljZCi+GmIgD9J:sxRmSn/fxsbY88qIC/5E/qkz
TLSH
T18742D85669286D7B9CC7E21EBA55BF53E2F96032A1D01E54B7FC9A1C00E76DD210380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d73ee65399aed6bc5baf0b1a464a24d5ef8f2309c92671af40a8b1094cdeeef7
MD5 b33fcff87389d81bf449536022c32785
SHA1 471ab38cf51a6283bfd7dfebfcf8f9c220bcb62b
SHA512 997bd9c10f00dfe9bc13a7cbe86168cf5d2397465f0eca724338bdac114cd74c6341ccac43e9915f9e809f9ae4e9f19174e40fcbf613459344b6baebeda87f43
SSDEEP 192:sxRtRabn/fxsT08bN8LzoA8p4p2/F/g6+WNagYlzZCi+GmIgQJ:sxRtSn/fxsT088qIC/5lyk0
TLSH
T14042C8165A68AD3B8CC7E21DFA55BF53D2F96032A1D01E54B7FC9A1C04E7ADD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 007125d1d2561cb2da4310f26f5f8407e3034342a9f5d4f69aa1b702281851e7
MD5 a06e040fc6186404edc5ad6a1187cfeb
SHA1 c9cc54fc9771e796f36af1e01e9dfb670ac0b0a4
SHA512 4924f665acd80126c26e4a7b2a6ad7e39e9b9935662bd367452cf53fc418b9b1b34fdda1e2a16f8644bc2828d1a7a7848896ee8634706b1906e91fc96655d86b
SSDEEP 192:sxRmRabn/fxsb08bN8LzoA8p4p2/F/g6+WNaQf8/Yl6ZCi+GmIgDrJ:sxRmSn/fxsb088qIC/5E/tkZ
TLSH
T11042D9166928AD7B8CC7E21EFA55BF53E2F96032A1D01E54B7FC9A1C04E76DD210380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 216c6c0811a454b748e031d283246305c55d0e1b0a38f23112118f9314aef732
MD5 6b2d160f7707c981a3e0b50734245349
SHA1 7e7693ded857eb121811e9740f20e4f10f515c62
SHA512 1644085745b76015d6fea0c547795955a27be0005fc2db5803f975746131b0c75ca6bb6dee5ded2d2633069b1021eb4ca999a17e7e62293811713a318f67d913
SSDEEP 384:dpCfAo9fCtggCFfJJKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRR/roKMv:dofAoxWgg+fJJ8F1+UoAYDCx9Tuqh0V3
TLSH
T16FB2D93B600DCB7E8FC04A9DEC19AF977D9802C796549D4047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 11KB
SHA256 32a73afb6feae3863ad8758afacdda05bb107d154e86df9335405c7719b50169
MD5 ef08aadf59d584ff67b73838f270a721
SHA1 deeb41b3680b104132b4c45f301d8f58deb30eb5
SHA512 6a337c7f8a8b4becb9219fc1d15f1ea709b4eabb071431c3ac2722b11e950c74018f7cbcda6ff6a60983b4d24bf170f6342d21ad0538446e68ae475b9c540883
SSDEEP 192:jZQM1jtTrs4EaL1P104avUob+Df3uKWRU8PhITv:jZRtTGaR1ovL+Df3uKWNOTv
TLSH
T171428E15DE89CCA6DEBA13F089F1C60D5724C69C8344632B575CC0E1BC167432EC5EAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c0d5cb1da31230fb6bafa4d0efe36bad5185d1b893a5644194b6b43a8c3cb19b
MD5 e28f631b37055032e87133799e3ea083
SHA1 fe1ec29f60a28568ad327d61c26db6584be11c19
SHA512 dc22a19101ab781726c56f0f72d0ce8c7b2adb008062956c07ab8d7c4fce0220534e6d628e35578b1c5b7914c2a42f704aa46a203f55fdbd564ab313340aa068
SSDEEP 96:KROjyuIQAWWQVdguWK4zgsWcGONcOHHwBUAyeSIWWLbgIIK4Ng6Icoob6/9mK2wS:COjyuIQAhQVuu+zgsFGONcOHHwBUAye+
TLSH
T148B11501317E0242783EA60D85B9985E968279E1B067E97B7F9A01B60F6BD014DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a0745.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a0745.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 bfec5c7c0dd824751d724a19c5f100833d9e8492d87cdc2742968a9bb1dd524c
MD5 187453d575a305da8f2bba3b2d838119
SHA1 ffe4549e16d21d4e874eff79b49a0583829f5327
SHA512 9213c9c097365f2a580222aee6a933b0098847ee691568018259d5541b8e5baf9ea6832ef1ac2da2f82772ed00ae94bdb6be67572027e718a0305d737ab3cdec
SSDEEP 768:YD3THohiJhSKIJkWRNHXmTWTbc+Hx2ewBKZON0m:YD3TeHJkWHeWn1R2evZOp
TLSH
T19FF2C0B19CA59D379DE69684A54B77479EFC11B3E4C42998CADDBB0E008364D130BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a4180095c353156166aa3cbdbda94c3439c16d267e1d9b29fd5870ba9ac1ca66
MD5 c4a23a16b5ac34d89be1712bc6acfdc3
SHA1 c01e1fda50af982d5ff9ce8d83a722afdf67023e
SHA512 7656d6c8185a7cd3aa5b188ec75e83e3cd9704f27ab3fc2e54c78fc38e2ab194be8f18df7ae0b95a62138d9be97a449cd488ff87a7f36c60b6d7f66c78265bca
SSDEEP 768:8rv+4UNbdc3THzhiJhSKIJkWtNHXmTWTbc+HxEw8:8bsbu3TtHJkWbeWn1REw8
TLSH
T19B03C071ECA9DE37ADF65684B04B7A437FF811A384C41A98CED97B4E018758D130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d81d93c6408f402778921dfd21346ddd80cb6c32ea182358bf956f92d91143c0
MD5 83ef9e1885fd2d82c3efbc9db1e3fc1d
SHA1 71fee9524a9926175a4411585f8810ebe6c2e93b
SHA512 1c9f7d80b5bd743573091fdd7fa3769ffe636252dd2d39721b598f71e9ad913eb873f07533bb5a14c900e5b174d16e4b999d1acce48ab2c951de1db90e77cdba
SSDEEP 768:4rv+4UNbdM3aoziJhSKIJkWfNHXmTWTbc+exeVH1SvyZ:4bsb+3HHJkWpeWn1qEH1dZ
TLSH
T11F03CF7298B99E33ADE696C8B08B76477EBD11A384C40A94C9D97F4E018758D030BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 bf26d06962da5f5b284ae75824167e350125623a49767e93019de8896f7c3b64
MD5 f166784d2ce5bfe7017635e46f0b2a86
SHA1 9b1ff3826872117d7695da2291c34344e714ad3e
SHA512 272b41b0e556eac23180cc5d0506f3ee21f4a7c57ebe9e42d31bfc0c8b8c94048241eefa7102819bf77b6ec0243bcf4614075706c9def1db68a1d0a016a2286a
SSDEEP 768:DFQ83Swg7HohiJhSKIJkW1NHXmTWTbc+Hx2ewBKZON0m:m83IeHJkWDeWn1R2evZOp
TLSH
T13003AF728C95CA3BADEA9B84A54A77479EF811B3D4D42998DBDDBB0D108318C034BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 20aaf1221e00cfbc575d5a273e9e5a418f736497f01713881086999b5708475d
MD5 6038ae7b913acd71e6c5bc7d32d2b714
SHA1 c02ad532dea8e862dcf8cec8683defe42bed7612
SHA512 8147c31a32149d37c2ba10ca5136cb22455e8aaf4ab8f3a3a0d45f8f27d33dd8b271984aa9167a29a0d590b8ad8fb909fa44cf03e3ba1626e72a747a365d8804
SSDEEP 768:tD3aHohiJhSKIJkWRNHXmTWTbc+Hx2ewBKZON0m:tD3aeHJkWHeWn1R2evZOp
TLSH
T1A1F2C0B19CA59D379DE6A685A50B7747AEFC11B3E4C42998CADDBB0E008364D130BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 557996a12efd0eb8afb1dd2cb9d182e76822f6ca22ccfb14dd3445f93b0f26fe
MD5 bc02ec635c401812a68a6d6bebf82445
SHA1 dd9b0bee54b61ab8c0a7fde40dc4ecfdf6ceeb8a
SHA512 97f914ad7e82d344128748e33a9754110e6ce399a35b3ee808c9b1677f411c851ece892ed43d8d16b1cb2f715946728e1c87c6ee9290d46bfbb6f7aa179fccc7
SSDEEP 768:arv+4UNbdM3W0xiJhSKIJqNHXmTWTbc+/heVH1SvyZ:absb+3hHJWeWn1ZEH1dZ
TLSH
T13503C0729CB98E37ADF69788758BB6473EF8116384C40AC4C9D96B4E028758D130BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46181221-3c6d-4409-8263-27fb8ae4fb30.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\46181221-3c6d-4409-8263-27fb8ae4fb30.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download