hxxps://github[.]com/pankoza2-pl/MalwareDatabase-6

Analysis

max time kernel
900s
max time network
901s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/08/2026, 20:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/pankoza2-pl/MalwareDatabase-6
Sample260811-yxx7macl21

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
37	camo.githubusercontent.com
38	camo.githubusercontent.com
39	camo.githubusercontent.com
34	camo.githubusercontent.com
35	camo.githubusercontent.com
36	camo.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1724	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309526624434313"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{B74D735F-2AC2-4C06-93AA-9B7779FEB3CE}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5124	msedge.exe
5124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe
4168	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 4168 wrote to memory of 1396	4168	msedge.exe	79
PID 4168 wrote to memory of 1724	4168	msedge.exe	80
PID 4168 wrote to memory of 5552	4168	msedge.exe	81
PID 4168 wrote to memory of 5552	4168	msedge.exe	81
PID 4168 wrote to memory of 5552	4168	msedge.exe	81
PID 4168 wrote to memory of 5896	4168	msedge.exe	82
PID 4168 wrote to memory of 5896	4168	msedge.exe	82
PID 4168 wrote to memory of 2240	4168	msedge.exe	85
PID 4168 wrote to memory of 3788	4168	msedge.exe	84
PID 4168 wrote to memory of 3788	4168	msedge.exe	84
PID 4168 wrote to memory of 3788	4168	msedge.exe	84
PID 4168 wrote to memory of 2240	4168	msedge.exe	85
PID 4168 wrote to memory of 2240	4168	msedge.exe	85
PID 4168 wrote to memory of 6072	4168	msedge.exe	87
PID 4168 wrote to memory of 6072	4168	msedge.exe	87
PID 4168 wrote to memory of 4680	4168	msedge.exe	88
PID 4168 wrote to memory of 4680	4168	msedge.exe	88
PID 4168 wrote to memory of 4288	4168	msedge.exe	90
PID 4168 wrote to memory of 2392	4168	msedge.exe	91
PID 2392 wrote to memory of 620	2392	msedge.exe	92
PID 4168 wrote to memory of 4220	4168	msedge.exe	95
PID 4168 wrote to memory of 3528	4168	msedge.exe	96
PID 4168 wrote to memory of 2548	4168	msedge.exe	97
PID 4168 wrote to memory of 5600	4168	msedge.exe	98
PID 4168 wrote to memory of 5600	4168	msedge.exe	98
PID 4168 wrote to memory of 5124	4168	msedge.exe	100
PID 4168 wrote to memory of 3356	4168	msedge.exe	101
PID 4168 wrote to memory of 3356	4168	msedge.exe	101
PID 4168 wrote to memory of 1020	4168	msedge.exe	102
PID 4168 wrote to memory of 1020	4168	msedge.exe	102
PID 4168 wrote to memory of 5928	4168	msedge.exe	103
PID 4168 wrote to memory of 5928	4168	msedge.exe	103
PID 4168 wrote to memory of 5780	4168	msedge.exe	104
PID 4168 wrote to memory of 5780	4168	msedge.exe	104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/pankoza2-pl/MalwareDatabase-6
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2b4,0x7ffe29a0c188,0x7ffe29a0c194,0x7ffe29a0c1a0
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,17906691668220110939,3119687008017006867,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14937634736912586002,15377925756091572931,262144 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2504,i,9742471886789843464,6410910555287903024,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:13
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,12814927095075476487,17732566308952033367,2097152 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,11386309095159629807,8877160224946684116,2097152 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,14201534805045288897,17381546371336418393,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,629907407460731343,14266818716333855219,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,14942849115966229118,14989752219027795855,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:14
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,14942849115966229118,14989752219027795855,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:14
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,16801038315736658832,2404465648433893433,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2392
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1144
    3⤵
    PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,7237589316540776815,8049687359036860420,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,14012046023155096173,4915262083364916403,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,375763717624266321,13872410889293432919,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,12856851532024756693,3152851617486792678,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5456,i,8700563711756842795,7368176396180525103,262144 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,2658826581419229365,16865090741492706877,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:14
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,8403563345776517237,8503581155976058888,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:14
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3340,i,5427957638624857328,2985055081996669138,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:14
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3248,i,9513583063650991351,13562325403376656253,524288 --field-trial-handle=2128,i,13224095371029417611,16839077289412215261,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:5780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:656

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c17dc8315075bb661bddf6b1efa879b9a3c39af13982f986bd287f5bc861cbdf
MD5 9573474710d1de6302a0d98890d2faae
SHA1 618b9f2079a97625be399f6137e46655659ecff9
SHA512 a345b915a4191d30d0da665ea4f78297c0cd671a5767e05c415403efb649110868fb279d22dc496792452c325e19b00f5e579f6e014a4488c9a4d6fac83d1c46
TLSH
T118D012273B0DB054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b9dac8593d827b7b825086ba5eeec776b808b8429eb90a6b645c319ec8f1435
MD5 c16a98ebe36bda7f5aece00f9ac1d0d0
SHA1 ef2e2a8775d1ebc0124f0ba983b6f20777919000
SHA512 148affd9dbe6aaee9070c22e41bc916df527cec5741753ca2733855f500e4eef0a257445d281d79c2449f8265c41b54dd53ffe57650802594b1211b0db611349
TLSH
T1ADD012273B0DA054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

66b5dd57-bcc2-465a-830e-d2a2e0dbf6b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\66b5dd57-bcc2-465a-830e-d2a2e0dbf6b7.tmp
Size 31KB
SHA256 bb38d2843fac1676545fd1dbf46602eafc3617f0c3745aa49a1031db89ab22d5
MD5 c258ab0ffae4e902108528daa451bbb7
SHA1 94e44101cf4854bc8266cb0bf62310392e8e9398
SHA512 3ec692d2f7ea16ccdd85ca60febe9a9af8d14ee54e97dc94bcb3cae8992bb419a44865ee591a8d960ffbbb2f42a725ba3cb82349855708e5bfdcf7a2377fc549
SSDEEP 768:wQAKq8y028bWRmj1QWT8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3L4Ll/f10EMEroSO:wQAKq8y028bWRmj1QWTu1jaKL4LpfiEC
TLSH
T1FFE21B3B284CCB7E4FC44E9CED276E8769D802CBA7588D5447FA494C03CA3EE511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 4ac797368719f2651cf709ac94909b8f045834ab84336d074c6fc4eac82dfcf5
MD5 032f001259765b4c9668fe2ffd60019f
SHA1 39698846bb8cb55d43d770b7bb7d21dc02a4a519
SHA512 0dc7e7727815c317780b000b4efbb6a4a1045102f3ee7530eedeba4b5c8cbffa1703a738b9bcacc5e62aa4525761296042c9cd54ad6bc496a7f49e2dfa55502a
TLSH
T159E0268904C8C39EFE4064C791F8630D92C0361FA6E8BA5E5B00C88C30058D0E7BB9B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7a7665ec6a62ba4d9aba682970c62b6b94463d1fd06d769ae41d88c6899c660c
MD5 48ba06e311c3d7515c5b4d6181602642
SHA1 851d2199d89014af0bd329e9894ab9187e2e7448
SHA512 e84d1f73ecb09bde7832856d3546ac8f8c1ab0563b3e0fd2e583a81ba309bc5c82a5fd94e19342f111cfa2200fa4206c0fca52b6c39436d52c7c705c61c846ef
TLSH
T19DE0268846C8C31EDF4064CB5678430EE280361A9AE8BA4E2760C888F045180E7ABAB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 ca786c29d84d0c1cad3d3ce14c94d37df78f23c9680a25c2da7b72b3d7af92cc
MD5 a534ef4096ad3169cb285f17c4daada0
SHA1 c3d55fcb97ec8a6cb02dbffafb16ebcd7475f022
SHA512 068f60d0f14a8b3f6a88eb10b6d9a85c07eb3639476edf655357680aea75877131fb71197af34d5e5d1013940c25a3f6b3f787aa809ee8f0e532f799cef6fb81
TLSH
T166E0DF9905C8C31E9A80A98752A4830C8286360E97E8BEAE2B10C8887009184F3EB6B1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 fc25ca58952a398e9df695545e9d18eabe98daa2e78df4b20b57e30a0d891ffd
MD5 194d3682c14dcf7d1dee7ccd928c19fa
SHA1 5200377ea5fb6564670d7e06af1e6d8f08291807
SHA512 c4b6246480277193ea05f47363252c89d51f412fb312a8e8480505050c854ab5b6d34b1c47913e65f2a6ace1a199beaa62793a318b5c001a1b6ff40fb86d3ebf
TLSH
T1BEE02BA9CD61A83B08FD272950505785E71423971B81890F3B3CD10D8FB173F4645C5C
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 ab455916a65374e9fdda8f2d04c2099d75a7c91f54a33d58fc8dcc2b02fa3859
MD5 ff11dae23ba69ce867774ca318020a91
SHA1 04771fdff5c8e301ecef239c8c90450e7ee3b688
SHA512 874ba236f10f325077fb84ecc86227ee221e09d2a65f616a89a8283f0d8b4eb2f9be308c8e245765c05d9a4eaead8b09ee58e23f4b8d68a19012d7d949db7d72
SSDEEP 48:ZGg4qEy3Vasz+czjTY7eWv6EpHj/touICNewQnCtN9a7FXQFzMO9KrXRB6Mk1/97:Zhp3jP3TugCH7muICNeVNQFWrXR6riDW
TLSH
T190C1F53785934F58DFAE0EB254CC01257A3273600A674E8ED3949C7EA93676281500B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5843ca.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5843ca.TMP
Size 3KB
SHA256 787063b69c66b97a7da874a4ee50779a9dedf222b31f357a4bd5167d2c81dbe6
MD5 75cdea9ab356be7a911a77b89207caf0
SHA1 2f361d70914d688a956156e484d0085d997026e9
SHA512 5a19e50e826cc937ac7c752c2588eab8c0d6f00c9592e3976c887f3f56e13b2ae98d4902d7ee79649e6b17229720797af85633612e4f14f078384862ba2d4457
TLSH
T1C16171469153405CE3DD0FB358D202343BB3B3B50EA74E5990E498B7AA37B6389650FB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 836963e9b766f2250836b3b9179ae1b1edca35cf176d770742fb9c29c7f23b25
MD5 f58d8ebc8df75dbbabcce2646ae271c3
SHA1 1a60e812fe2edda765316fbebe469dc5518d23fb
SHA512 6080f4cc03549b8278c763b5b58ff4cbe716965468a034c582bcdca40b6a081be609f564d74d99329e27e82aeb2a6b86d62bf1d67467adfa1f0ae6ed2768b4ea
TLSH
T1705169F747F5956D9B0195F0AA18AE2FCF2C0510832C78A989E4AE57D3E3871E041B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 7ca6ac4892e97a472eedb5741f7894a4963a103d2f91029b61f8443b9f01e20d
MD5 05571abb4d5cc5f510add88bd8506299
SHA1 48bd7942ffcfefbed07438cd688f925f19775720
SHA512 f5a85fe15e1a22a6abc5af1ba6d202cdaab7db19903c28ff1edf78209c33daf59711af3f5ea3cea81871808b65e7344ac3d162cee07bff0217350a47b885cea2
TLSH
T1FB516BF747B1956D9A1195F0AA08EE2B8F6C0110831C79B985E0BE57D3E3871E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d61ae0885b15d08304533c00a78906325e4fc86d9d18e163eb92ee054259e60b
MD5 c7a9c2e767215165a3f68e4b65f2e5a0
SHA1 1514f31e94534338ff695f58d0d1e9c5942713dc
SHA512 1cef2e1a29ee457cf929263cdd05ba0cfb892238e88f560620972ff44cbc9caac099a1c66b30cf02595d89da37a16343b948938d5d6c1eba8326ab1ce20c6c2d
TLSH
T1405169F747F5956D9B0195F0AA18AE2FCF2C0510832C78A989E4AE57D3E3871E041B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 13a052d4e8ab6b7a82ed9bc6581456232122349a10e1d2cec9f8680c81db62cc
MD5 26ab1f570928786f3a6b4924a7610e0c
SHA1 8f63b9395c4a7bb13c4fb17366810eff69f69302
SHA512 f59af76c18e465fd1396661e2540931f58f64bec6a46cda5a959662fd2ba7eb0a1db502a1e92b4b1c90559be614c91c5a6aca7456968d559f1d9e07e49899aab
TLSH
T1EB31C2F383E4856DCA0196F0A618AE2BCE2D0515432C3D9A85E4AF1BD3E2471E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 552d913ca0ee5d5403c681db52933ba75d8a41b04181b4fb9156b078f2406c88
MD5 1c5d236e4a911a311ef38184b4e0eedd
SHA1 622ea68ad0da485f6947f3d6d6173e6220c70c9b
SHA512 f77098464c94c29e32a1a6134ff6d8d57d9143f46655e6a33a35e88664aac747a3b9c84f8232414fa5f9ef41219dfb65fc763856e2b364841a2471a0d0606580
SSDEEP 192:sxZRRjyMqZjK1Ml8MFz/fasIIKTGtwFzodpmlZ/W6+WNY/t/Y0haN5GIgj+sJ:sxZRodz/fasIIUgs/bC/5Vj+Q
TLSH
T10A72F8116A34597BCCD7D21AFA89BF53D6F95533D1944E44AAFC9A1C00E6AEC2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 f65efdee80b63d1e55f8566a50e89a4dccc21534964c82f54d49025bf1c865fc
MD5 584e42e8cb736532fe5cd62bdc981ed8
SHA1 05247026dc4228b8466ec5403a5653da15dc8ea9
SHA512 af88910da95d57c4d618db083d7470d31b2f9b3e36f087dafeb5db4d4974c2a27607df03dab729d45af35d22c1115005f4d53b372a1880e8d0cbce715529e37a
SSDEEP 192:sxZRRjyMqZjK1Ml8UQqFz/fas3EKTGtwFzodpmlZ/W6+WNY/t/Y0hVoXGIg5X+sJ:sxZRoqQz/fas3EUgs/bC/5hB+Q
TLSH
T1C872F8116A34597BCCD7D21AFA89BB53D6F95433D1944E44AAFCDA1C00E6AEC2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\84929e18-7031-4aed-9651-196b2ec11ecb\index-dir\the-real-index
Size 2KB
SHA256 c3285aa35a23ce789488f53d2f10a7de05209ad0875a6fdf5b958057ecb0f5a3
MD5 f259bfb32e7ac86a8c8132f1d27cdd09
SHA1 849f1059b8aef81841ea5a5c339a842568517e91
SHA512 0df50a51213e683d082369a54583322d810c18d72361ff4850660c57695cc02ae734a2747091ccd9a128038081169db0c3d69f52bf27eb7216e86a353565b6a0
TLSH
T13441954E8E518DAFD968407708B21CA833349CEC4755AB6758BC123A6E473AD294B2AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c7ac5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\84929e18-7031-4aed-9651-196b2ec11ecb\index-dir\the-real-index~RFe5c7ac5.TMP
Size 2KB
SHA256 c47f98170f465deaebc453d48c967289bf343b4ef3554bd4011caa02dd62c3e7
MD5 b7d45d97b37cf594038b175c2fe8aaf7
SHA1 4d6b9b7bc120b7e3c6c69721138345dad1a768fd
SHA512 04719a5825e8f242d9f9fbcb380fae79a4bfea84fe91f75bd424a478bd5f6ae5b3ba6956cd1cb09b04783568562c021c1721699e38dcab4c4c402aada036cd1f
TLSH
T13241C9894E818B2EE89440770EE3B4B87339684087157B4378FC523599927ED2E4D0E9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 497060ef3b0c1f153c5c00ef8dd779391133ff50a6b6d79d8afe56381b404cee
MD5 da11ebc5b0a1f76c6e1bc177940636bb
SHA1 bbac488e80275146e240676fe081099ced05540d
SHA512 1298f235d9fd36d9e6d7c0c5f82cfd37b7977936ca707c2ec5ceba6b4bae3a7b3e321d38f8034e6587a57bcab7e230d4514f631546f4ec85e13a1251cb661b26
TLSH
T140E068FA2CA72824F86B93D2183280A601023C50C544BCCF205EF59360B13143599C22
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 22KB
SHA256 f3c62bed51b648212a852f73afe835050d1e7799b3cbb6aae84dbef9ef1ff6fd
MD5 7495404587f9997202c1e1e2794d1895
SHA1 28aafb51b85ca4eb6028b3545c841432985360fb
SHA512 fdcec280fc5468bc7e15e6e2f70cf29fd0cab486aa34d697908c1c8799def2f8cb947e7ce6d7a3083245624ee416d83105e7db46c57d374351e07717423b9d8e
SSDEEP 192:GD9R5VJhn/iVJnZFGVApBPisTE/3oNloNPSF53pVWFQ5xfSsD0PnY9JFlPtv0F50:GZLVDJjEDPV0/ZdE95
TLSH
T17AA25B1232FA02023C7D3908939697675A41F2A37469ED3F7BA900B54E67E125EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 56fc915f65059d1518b6f79766cc0729e71524b214a03c854db80f33989136c3
MD5 efde9dd9c74b0297e025ff701b311287
SHA1 50778c0a2a408da7aa18ceb814931afa81df4f7c
SHA512 6788a67cbf022e4eb6013e98248d3cdf7c51c252d7433b7fcdae98c78786f4a8ecf7823099b9eeda48bc3257fa453b95cf17e1dc1eaf49030ba6fb37f19a80d8
SSDEEP 384:n5iFACcmyWCx38N28TUNTUlIRgUHPm3ek32nn9hNbuSuf+8GaTjKzxwI4Mk30tys:QFjcpx3dwgCUvKekmBuGmMk3O
TLSH
T14CC23A32ECA4CABBEDE64ED9E65A3603DEE04163C68C5AD4E6DD1D1C009B1DD134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 3ebfb7417b08d6b23881eb927adb94dd37bce6c24783ed0f892325756edb1320
MD5 e4a1c33b7681884301ea56d716f7056d
SHA1 9eea5f6ead6341d5e76c570ed2cec048e4ce4c58
SHA512 ce8722cddbfd192bedef9650df95c0bd76ebe61c683504a0657e7bacb64fd5d76ebecd8d6f58c61eaa8cf9db197a66901ba4d64d95cbb25d553d04bb66e4bcb3
SSDEEP 384:nZiFTZcIP38N28TUNTUlIRg20Pm3ek32nn9hNbuSuf+8GaTjKzxwI4MOOPrXLpe8:wFLP3dwgC2AKekmBuGmMOi9PLld
TLSH
T1EFD25C71E8A4C9ABACF78ED9A75A7607DEF04163D5CC5AD4E6DC5D1C009709E030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 4a399326abf3bbd461166ed1b524922a056f867a29cd117cd6635f8d737c0af2
MD5 e379476731229ce86f62560737519cd6
SHA1 46cdf0d35f11f0b25ca05e0ea60653cd27e0e735
SHA512 35b7d7f3384dd14c7ada452023b4c4d24db9ce2db8c1dbb8d0704d7d314c4a5da7c29dfa6b1c117eedba81efd96234398b22e19aa4798a954ad3c053348801fd
SSDEEP 384:n5iF9CcmyWCu38N28TUNTUlIRUUHPm3ek32nn9PNbuSuf+8GaTjKzxwI4Mk30tys:QFccpu3dwgCUvKekmbuGmMk3O
TLSH
T122B23A32ECA4CABBEDE64ED9E64A7603DEE04163C6CC59D4EADD2D1C009B19D134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 ae77489f2d53e60b7efefbdfdbe2afbc1848b6810d344365c30a05fb20413d3c
MD5 c1faee4bac63f98113568f89e52505ab
SHA1 baf3a1f7bc3e8f08bc9c3bc949e47e3d847c32ed
SHA512 a990d44fb4b86d9d4aab4bebe07d745bce12b12020ee558cddffab5b5a7cbb2d8f72b055ff1d9bce24b1655b82f6f868fb26cc26272099bd31b6469fd37a6865
SSDEEP 384:nZiFACcmyWCx38N28TUNTUlIRgUHPm3ek32nn9hNbuSuf+8GaTjKzxwI4Mk30tys:wFjcpx3dwgCUvKekmBuGmMk3O
TLSH
T1BAC23932ECA4CABBEDE64ED9E65A3603DEE04163C68C5AD4E6DD2D1C009B19D134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 666aab5323559ab41f8328d2f7148dc9e0da6136faf31a6f56fbd3a22e16afdd
MD5 6d70a31e2abf01be025116bea28f7b41
SHA1 c74d92113077023142c6ce3f2c0cf5e8353525b1
SHA512 583ee462bebae354629246158a8b61f614e69f272b4f78f12f85af17d4735438fcfdb0012d9dc3254d373860946431861fc498dbcfd1b96f2c1acb8bbdf97e97
SSDEEP 384:n8niFTZcIT38N28TUNTUlIRg20Pm3ek32nn9h9buSuf+8GaTjKzxwIz6MOOPrXLF:8iFLT3dwgC2AKekmpuG56MOi9PLld
TLSH
T11AF2E5F198E38977E8AE8B97A77D2D0299FCC153B5885984B3D85D1CCC960BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 5232635fe82ce2158a051f5f3f2dc3c4e1760e5c4f901dba669555240360b34d
MD5 1d2411c079ed641e4b4ff821cc7bb32a
SHA1 5666dfe6584e1e8733bf23afbe69dae8b27bf7ad
SHA512 e01884a352d6b17407d776d9c6565ec2011338366115cd010f6653be256630b062ab1edc1feb619b82aeb5dc8e5389cca759048366d64acf139f66cbbaaddb8b
SSDEEP 384:niiF9CcmyWCs38Nvb8TUNTUlIxBPm3ek32nn9BTQQsSuf+8GaTjKzx6se4KV8p0J:pFccps3GbwgPKekmLbYGMsI8p0J
TLSH
T140B25A31ECA4C9BBECE64F99FB0A6A07DEE01263869C5DD8DAD81D1D009719D134BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 68a6dd6529cd6ae4f8c463e770f8897b0180717b3578bc1aa05a3c17db9979ac
MD5 f12a90f081c2a8916868b31898e8c5ac
SHA1 40c3cd288dc030e0ac038200102921ab6e4f173c
SHA512 209abd5da2f090ebb1331fa9280c4d9c7642cec4f999a5463e970c2298a2037dd0b1aec7f6b8a54b9a6449fd5323baefbcccf5bf3525996176c8df482fafa822
SSDEEP 384:nciF9CcmyWCs38NK8TUNTUlIxBPm3ek32nn9IqjSuf+8GaTjKzxwIGMe4KV8p0hX:HFccps3twgPKekmpBGQMI8p0J
TLSH
T100C24B32E8A4C9BBECE24FE9FA4A7507DEE04263C68C59D4EADC1D5C009719D134B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4288-352-0x00000268C3B40000-0x00000268C4B40000-memory.dmp

Download