hxxps://x[.]gd/RXnI72

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 22:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://x.gd/RXnI72
Sample260813-2vbgmazfpg

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4704	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311352358784230"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{82615B0C-9A6F-4304-9919-2588659BA991}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe
1152	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 1152 wrote to memory of 4880	1152	msedge.exe	85
PID 1152 wrote to memory of 4704	1152	msedge.exe	86
PID 1152 wrote to memory of 2500	1152	msedge.exe	87
PID 1152 wrote to memory of 2500	1152	msedge.exe	87
PID 1152 wrote to memory of 2500	1152	msedge.exe	87
PID 1152 wrote to memory of 4668	1152	msedge.exe	89
PID 1152 wrote to memory of 4668	1152	msedge.exe	89
PID 1152 wrote to memory of 4672	1152	msedge.exe	90
PID 1152 wrote to memory of 4672	1152	msedge.exe	90
PID 1152 wrote to memory of 4672	1152	msedge.exe	90
PID 1152 wrote to memory of 1816	1152	msedge.exe	91
PID 1152 wrote to memory of 1816	1152	msedge.exe	91
PID 1152 wrote to memory of 1816	1152	msedge.exe	91
PID 1152 wrote to memory of 4496	1152	msedge.exe	92
PID 1152 wrote to memory of 2332	1152	msedge.exe	93
PID 1152 wrote to memory of 4496	1152	msedge.exe	92
PID 1152 wrote to memory of 4496	1152	msedge.exe	92
PID 1152 wrote to memory of 2332	1152	msedge.exe	93
PID 1152 wrote to memory of 2332	1152	msedge.exe	93
PID 1152 wrote to memory of 4576	1152	msedge.exe	97
PID 1152 wrote to memory of 4576	1152	msedge.exe	97
PID 1152 wrote to memory of 4576	1152	msedge.exe	97
PID 1152 wrote to memory of 2480	1152	msedge.exe	98
PID 1152 wrote to memory of 2480	1152	msedge.exe	98
PID 1152 wrote to memory of 2460	1152	msedge.exe	99
PID 1152 wrote to memory of 2460	1152	msedge.exe	99
PID 1152 wrote to memory of 5088	1152	msedge.exe	101
PID 1152 wrote to memory of 1816	1152	msedge.exe	104
PID 1152 wrote to memory of 4232	1152	msedge.exe	105
PID 1152 wrote to memory of 1548	1152	msedge.exe	106
PID 1152 wrote to memory of 880	1152	msedge.exe	107
PID 1152 wrote to memory of 880	1152	msedge.exe	107
PID 1152 wrote to memory of 880	1152	msedge.exe	107
PID 1152 wrote to memory of 4044	1152	msedge.exe	114
PID 1152 wrote to memory of 4044	1152	msedge.exe	114
PID 1152 wrote to memory of 536	1152	msedge.exe	116
PID 1152 wrote to memory of 536	1152	msedge.exe	116
PID 1152 wrote to memory of 2352	1152	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://x.gd/RXnI72
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffc1aaac188,0x7ffc1aaac194,0x7ffc1aaac1a0
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,12512055068015210898,5521861494598071251,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,4563120330643851348,15777176258562084948,262144 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,15963917605973371432,1305014328889868262,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,5457268633683659325,16803974594016542292,2097152 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,8064757561124346456,6551463400728204619,2097152 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,10398292267529896543,5108450659399461258,2097152 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,3431853825367668954,5569218997493053543,2097152 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3624,i,2912144397737264196,10920495322381260743,2097152 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,15265538245900726946,411010673653895705,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,11808301607301275418,16184943146869134908,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9332606283291837695,11927241116818102041,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,9332606283291837695,11927241116818102041,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,11758045836833346049,13435200758077629166,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6568,i,3965756941067012531,14044373192629478926,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,301131529962239881,9493438284073739503,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6288,i,14375472950381120063,13618322161471853086,2097152 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,1236513048928984032,17005481918077663778,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,17318452292168484162,16544349453824039706,524288 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,63848308405246382,17598208162193232793,262144 --field-trial-handle=2232,i,13328134021180849925,2679752436236670636,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2352

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a2c61bea42f4792ccf2dea08f14f81a078364fa04174865bd5fe47f501381f05
MD5 09fbdba77ec7c601967b67ba7843ac9d
SHA1 224acea2cce8b12dc63a4f7d4b68711314212956
SHA512 9682cfb20b9727c724e2f6c18b20015553a95fc07e89c07b0ae43561245b3ffa4b5430d5d101bcbf755b4df7ebb66db49219ad0b21ee8af6925d9223ece58841
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T1A4B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 563B
SHA256 d61798d10bb5cf29fe29742482f5f8a4e1af7bd53614869bcdcc36a22507e01a
MD5 ba404cfa12523dccac771d1225581f5a
SHA1 e0131b2b17db851e61c0f8cdbbb27bc0fff35588
SHA512 19e3ff0bd142d80c9408241643e6d19f6bbdbf7a05d3b2f3e1d8d80dc4839311bc21af2cbf156186183f1a76045dde4192e42a6a7f2dbdc9fec367988a05e0d0
TLSH
T11EF08B4552D8E7A5AF825287F285720CE8E4B21DFBCCFA492349B4CD74018AE91866E8
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 32KB
SHA256 d6aea5b6f61083792016976950c7dec90eb89390361037b089e46cef63384fe9
MD5 e04aa27bbed0ab26d7181f1890dc2b98
SHA1 8f84099eba472ea8209e414bf50eb699039448a7
SHA512 3c4286992ae5204f0516a7d75ae0d1c8c751caa42e0efa16e8d067ac131779e0a24958abf16c06e319b512da32b7554511231c03fddd52e701f6e1e42b81f970
SSDEEP 384:ow3kQquwQ9COt6yBhktOUU1dmUWi/pmvs8q0DDGsybS/fmlpq3/ukhjrLL:ow3yazwEI0fmU/pm083EMmk
TLSH
T1F3E2CF6E5B62F940EE3D617B0B847342580965CC6DE737CBBD90FE222861894A074BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 66KB
SHA256 54db2c42a95518c93774fa60a2149f612f409ce9a959eb9207e4604ba5921475
MD5 c8225f3beb91b7a057c1b5e50680a7ee
SHA1 84c0fc3735e64ed8c9616d6782d5fa2539210dc9
SHA512 6c1798b4d6989effa8cbab4ceb2ac39c45d420a9ddf47c9906d98f1a37c5b9ffd2b33f98a5f0ebe85fa0127721a6d2e085e2e1625e2cde00363a1950df50883d
SSDEEP 1536:ZXiNKHw3TTrPukqKMxZelVa7P5IVvz+B2CueI:LCmPKGkIdCHCs
TLSH
T1E26302F756C4E0327FB5A1E9BE855353FD12C3C81A13F910C2708A7FA183A299B49A75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 22KB
SHA256 fbee815a405e1092f41d645ecd4fe217713b2db600668898bd7a2414e20824d7
MD5 341ab8876249f224831193c3b3349d41
SHA1 82046711fff83909c5b945cc95c0b168720ed228
SHA512 4e22b1c4c88788816c2d2e048263576911d51ef9ea6b2e6e73530015769533590781f4e8957bf02e5279f0e7351f2fbe3e3977303a8cc7faecd26ed775569775
SSDEEP 384:Zx19r+89sMWjtbL0Ov21lbCm4pHadgr0fB1nsqx9RDGLtsUfu9CdFu5:Zx1Au7WjtbL0i21t4p6C051nLxr+CYs5
TLSH
T1AAA2D06D4AB2C09197A30AB76186A0D3D6B50B369BEE1B1D7050850DDBB3E79D323E4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 66bc74da9e723e49c4b6d51cbfd262728b9c668d81a364553a753d7f0b7d6da4
MD5 7702fd6f0c50e1766cf9d8f8115881b1
SHA1 2157fefe3b9243f5db689159b071ac5dd84af3b8
SHA512 3ad79ef772d2fa6fa3cb67e0a249f7d2a4a9a185962cf2370999c5e051bc123ecce9595e67c506effaad0c004380ecf40e99f00257357211fc8c8959e2d16f1f
SSDEEP 192:ic7PctAJ6t1TyG3qMaRH681QWqYsSG3EUpIwCVKNEdq8yiAgLOB2yAM8zkHFuy+A:lkM/aYNtk2glwA
TLSH
T1F1D1D754469924F4EB145B31D0A10D1CA67092769D675BE338B8FD3EF62BB830B25836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9145002e94ab99305843486bc2d8ffae8fcc763a343f0f625aa1d62745fb2209
MD5 cf5a2b99bd855bd9fa8ac343d5c3193a
SHA1 3a35be4e6a38be29274a06456e3f66787b4859cc
SHA512 9d3c0f2d0e85e2e361143f33c8071aefbe261b237dce1a5b4e2dc9beb455688f1c4d750cce6a56723e49af6bcad607ec0b66b707497be4a2cffe0df5fab1e16e
TLSH
T1ED618219194E14B5F7611B31E4D10600F9B043B90EB72ED336F8D97EFA2EF23802559A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589eac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589eac.TMP
Size 3KB
SHA256 9bb38a6f72f947893fb2fc5ad241c52905fc9ab7edf7974e71b9638366214a84
MD5 9a240caf6118d8a506ff222d02047c8e
SHA1 6df111926db697d66bfc12416b037fe9c9ea16b9
SHA512 4bd7c44bce62622e7ff0d1eba23ec7fd40526de20ae09cb801120737ac14ab6c56cb8e40c09ee8d3c1aa5f1380d464f6fac6ecfab4c239916db286d52ab61f8a
TLSH
T167618119194E14B5F7611B31E9D10600F9B052B90EB72ED336F8D97EFA2EF23802555A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 906263797776064ec430da74b84423dd00df030cfc680ec31104435350e89847
MD5 6efb49cdbcf929c6fa330135b2270cfd
SHA1 6abb64c192ce2264392cfe9bb0ee4a79a262a01c
SHA512 51373974467600b53ae82ddfb7c3880deefdc9b965394304fa8509e0523c40568bf1db7ba18c31f1fdff784ec46cfbeb2425c40ccda8785bdd616c53312343bb
SSDEEP 96:D/oOuvj0xgOzgCkMUJwBcGOOcZReGz/HdtO:D/Tuvj0xVUCkMUJkc7OcZoGz/9tO
TLSH
T15491ABF2C3E5862DD91156F0AA146F2BCF1C0556436C3D5AC9D8AF4BA3F2871E121B8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 64705d5055a3f18b1a177d06ac9484f79996cb369e8587232c34438adaba6e8d
MD5 64429f667b3184a9ed28231efec52f38
SHA1 8c14f3e45f315d965a4b782a737fa7667b3c874c
SHA512 29d94aae08ceeee53e978eb3d32645e73672a99e6d0279eb9a0b9bc49cbe5a3752ad5babeaeda20b7b2f6efea0da2db92fe16dbf6bec493ac25f09c74d52444f
SSDEEP 192:sxZ1RiyM/jK1Ml8Mke/fHsZpNLTIdp86HW6+WNU1z/YLhySgWgIgrJ:sxZ1UMe/fHsZppMHHbq/ia9
TLSH
T19852EA116A346977CCDBD209BA55BF93D6F9047392900E44AEFCC91C09E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 51ddb8a3cdc0dd2a5c8820da0bfc9fdbc8d4c19473c2b20e140998922d202923
MD5 8368a43856884b46f802fd23e309070d
SHA1 c8bc7fb9605d1ee4a4aa11c907445b5a9edc7220
SHA512 f4006232bc73ee38e2410349c1c6b40f7303180aeae5541f3b873a0ceda6ca49576c515de88b0f4363cfc7de73a577a1417a59a32adfe331c6e02b65e204a59c
SSDEEP 192:sxZ2RiyM/jK1Ml8UQqWOe/fHsOpdLexbafdp4e6HW6+WNjY1zqFK8/YLyhtWgIg0:sxZ2kqbOe/fHsOpZbb4Hba4/P0
TLSH
T152720811693459B78CD7D219B945BF93E7F8046796A40E84AAFCCD1C08E6BED2213C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 765ee76854ebbe0554bea7fc02708086f2a094dcc0855e584f7b23b02c8cf6e6
MD5 f5cec166e8f4d2760640484f130b6c8d
SHA1 56c342ea9a6f9f712c45474cd2955fd4102c68a3
SHA512 80d0f7a029ebe58ac4f1ff30051d99b13cf79b2062ebadd046dfefc5783b598bec5d761855149888a1a4c703b31c41bc7178f157d9846828f2fadd7f8e1e2376
SSDEEP 192:sxZ1RiyM/jK1Ml8MWOe/fHsOpdL5tUdp86HW6+WNU1z/YLsWgWgIg5/OJ:sxZ1kuOe/fHsOpZsHHbq/30
TLSH
T1F452FA116A3499B7CCDBE209B945BF93D6F5046392540E449EFCCA1C09E6BDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 87d7f1a87f5e233b44113929d615ade9267d9c2c71a3c7d8214826567b3354c1
MD5 3cece22e3812aa4b553586d7de334341
SHA1 98777ee6d54896d1bd8785f3da097a7067963a70
SHA512 7d41bfedfbb43a3b754ce2f67c2ecf24ad237ccfa3b827102f535822ee68724d4d8523f10e9ae2d44fb3ad0e91a8074752365288c991db5b4a91087af7c7e6c8
SSDEEP 192:sxZ2RiyM/jK1Ml8MWOe/fHsOpdLexbafdpme6HW6+WNjY1zqFK8/YLTWgWgIg5/a:sxZ2kuOe/fHsOpZbbyHba4/u0
TLSH
T10962F9116A3459B78CD7D219B905BF93E7F90463D6940E84AAFCCD1C08E6BDD2217C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3ef22b65b86880bd1be07950947a66e366549c6dbcb7f23dce0cacf65dc2dafa
MD5 8cbf9717d4c750830f1d40b4e4290905
SHA1 29fc4414f6f0492b53f0476b8fe36417f0d9db38
SHA512 f016ecde8c687b8d3f6b1790d294e7269b8a4daf03ca3646863d207940d31d39fbffd78ad1fe7bfed88e85062ffc519769ec05317eb0ec112eef44448024f457
SSDEEP 768:TTs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNMroRV:TTs6pD1WvxzWju1jahILIsNXRV
TLSH
T17BD2FA3B680CCB7E4F841E5CAC2A6F966DD801CBAB98895447FA484C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 3KB
SHA256 359376a68a5e267a5d6a26acab7422141d36d5f0b3a516c3cf05bd68c19b3752
MD5 a2bb2856a736a8990fddb40c6dce5a6c
SHA1 3ccba504385bf374553a5b29155c30afc3dcf225
SHA512 9d85de2427277d31e1a63742acc851d11482cb221adf165cf34d166811648233528dbb2ddfa758e9d60086e0adc9a25c1602f03fd1fb29c5ff90cdcea2124f36
TLSH
T1DE51B50E0C875A69C86D01B21CFA18503779BCDDA6D99A57726DA134FCC333B396932A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 2KB
SHA256 497918791cb70086601f55d703d590824cad1f7414f5467d855f5f9d552be472
MD5 85f8173e2771383c645d2f7a904590d8
SHA1 37196792dbacdfe70349317848271f6112759e54
SHA512 f55c14942ea49903817e032ff60d031cf8058e2034f3b09275bf5693be6f7336f6dd19e7a88fbe68ba6c2feea735cfe0742167235016355aaeb21575e297572f
TLSH
T17D41C88C0C518B5FE8A841B31872A4943770BCCD5B655653AC7C2135BD1776D265B3EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e25c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe58e25c.TMP
Size 2KB
SHA256 1471782e810d32f1f34f012c678028ec54707fbac0add873968fa8999430aa06
MD5 eac254cc6cac072f9d0b7a062868b462
SHA1 ff2e6bd8cfb859003711508b9114223f921100e4
SHA512 a4eecc9c431441808cc0761dba262a299d21d49329978157ca6784fd28672f86d26572a1d8bb76b6983d0c7a46b385d0b65d4f2c2c1bb210b184592a1d88a999
TLSH
T17D41FC594E81863EE89040730EE274F47335580087157B4778FC9136A9927AD2E0A1D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 cb876ffd32ba7b2eb17cff0b2f5294f056bbbca1567f21b3fda0cf32fa93b0b9
MD5 dce7d1b4458f70c99cefcf0d1a7899b8
SHA1 d32f129cfc02a076e4e37f2886226cacadcb8d2f
SHA512 466b8f5f4963d6060a6e07acadf528ae0597f6acf02769b593c1463688bd260185583e4c5c9a0cd98ea29b0f6e191dca045a98cf109a62506edd13ede34d0af0
TLSH
T1FDA0021E129041C9C10662F039D601492623EA18020A170543D09446C86455A5E6142C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c575eb0c-4021-4370-8d95-03811b891285\index-dir\the-real-index
Size 72B
SHA256 9e2d74b40fb2421d1e2ba4163a16df4fb4bdfd11fa1de9285f2bda826c67bb5d
MD5 6c4bd629a43f09ea90d94139afe2a919
SHA1 826a3e09f485bd1966b1223a5b036cf10f069af7
SHA512 86307ff48ebb05a4282a494735ff9f391ca65146cbdeebe0b8cf3f36d21e9f18bf4b1172aa4ee693281372be53c1143b7976883b3e801f2766e84fb06fd80933
TLSH
T178A002108BC00465C01362F2176303451340DCA55240234740A1404DEE509488D4505C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 218b921b8484a2c74b24e4585fe8dd16a05b1377d155f64daa3b249f644d7223
MD5 a03db099b2a093eff49e3c847a5649cf
SHA1 e530815d1cb0e22c1bf925e87cc0f77059e124d4
SHA512 6d6537e0c469187e4110c7571d152923c6397d9442fc9bf168c43b879d5bfeeb436e6040c2437b5741fe9b91d146db6012e29ff1647084113f9178d934a50fb2
TLSH
T1B0E0DFBB6EA76820EDABE3E72870A4B50681782C8805BC4FA86A96C350B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 b6d5569430a2095548f7ffe08c82ef693f2a584cb85d4c287a7de182f64bc8fc
MD5 86cbd23ebf22a073dfad251985ae4303
SHA1 66d35f69c1703bef8c939bd00fe5577fd634be95
SHA512 540380f2c573082f94990aa72025ec91ad63d546aacbaa4b3ca79837f66ff19a8f3ec6821cc7d8a0020fd86457b8e4f63b5ba14b223d6ebef35bde4e7239c476
TLSH
T142A00221CAA5A1C5C0800F7092E1418E221889EE1B09221945BC55AC885016352E6C0D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593bf6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe593bf6.TMP
Size 48B
SHA256 e587a0df68f2bb9a66d29166d6ca18e03152b6aab2c7b791d1fe63fc4c9157bb
MD5 b6ed983ca46c4d4ec7aa3f8fd89d26a4
SHA1 1fd822f73b0e6f675c4133c12e07ba33394d378c
SHA512 03043d3f37647068fc549d36c0759e0583ace088d3943f956fd5fadbc5c168aa535a3d447e2ca9063f2085a5f75e2d98678ac69e090eaecf29a1188c1bfa3bbc
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c16ab0c5691cb1b6081d90d8ca13edca32185619a22e9cb3c729b569bc245c94
MD5 717c0fd4508224cb48e93979cd30e832
SHA1 cbbe55b7975c2c831618649ccf37815085ea64b5
SHA512 9407548506598f1d9e577584db13ea717a2aea82683f7ac3b27d978955f688229edfbb4529331eda9267197b4e29d6d1d809c44128648aaa8b6af2ffd8231bc2
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFzIVKwEfyI/Kva4bytLIxK8IM7:KUAAKteP+zWKwEfysKva+OLeK8IE
TLSH
T1A5B1110271BB02123D7E290CA299976A5F8276633814F42B77AD00B65DA7F340DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593bc7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593bc7.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9305fb78b009c9eef095bab0882f2b60d7213264521769f4f9838f793e334721
MD5 9d9a69a389c555f5efff38626eb2248d
SHA1 25481927dc7387bcceec999a53c94ddd07c20f58
SHA512 1f0f1a317c493e90b927bf7ee588da6ca71e420996d9d01a8d45b43d99ef757019719b8dc4b698c587254a4ff3ebfab85beb8593b64e4b9745bc1d3d87812de7
SSDEEP 384:TZcIhsNEv8x/za9sO7SBYWOOPrXLpe8C/9gN+:Lhk2iO2OWOi9PUgN+
TLSH
T176928D31A838ACB36DF7A581FA8226078FB88077E2D52F84D5ED9F0D05DB568131BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6b4feaecaa2172e68cde86314f92f0411be6d92ee7efcf0bdae3d896098ad8c1
MD5 c2a33ae3d6e2daf2bf918008d3f9c841
SHA1 054116cc783f2d53d68d88ef1a488ce79b59bcdb
SHA512 a8b01e4578b6d524e4211a8931a42e23b256a08de1c92f5545171d41fca47431291ddf8549bc72492da012c4c5c1aa7d04f48437545c9ad38f53cb34dae6f0eb
SSDEEP 384:QZcIhsNECTN34U2a9sO7SBYWOOPrXLpe8C/9gN+:uh3U3iO2OWOi9PUgN+
TLSH
T159928D30A838ACB36DF7B581FA8226078FB88077E2D52E84D5EDDF0D09DB9581317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 089c4f4e4b7ae2ca1fd5e6d98799641637fc9af80a11eabc24e52e167cc80930
MD5 805d3b77df4e7c4bd9d05375b9303c7f
SHA1 a727f7ad903347740d52d085826d2e7a4b688d56
SHA512 e19d5d56c134a49e0a7e959d9409d214607e51bf90a8e444aa1f134061a0435628dc4819429d01f33686a4518a418b3b122b7de2c5baf4ddae7341694695625a
SSDEEP 384:eiFiZcI4usNM8TUNTUlIlCTN3PU2a9sO7SB9WOOPrXLpe8C/9gN+:1FQlJwgGU3iO2DWOi9PUgN+
TLSH
T14AD229F154DB9876EDAE9B43A77D2D078EBCC063F5956A80B798890CCC9607FD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 61f2545071c3a23cfb1a9708bed7fd37a37ef5cdb83423ea8248541839f29194
MD5 e380c3580309489bc67a16d7ed295e5a
SHA1 cdfc6d0e6c0eec65cdd75e14919d7f77c77f5491
SHA512 e1d2689317d13db0f1507d872fb7ec8a484ff9f1368be86ee0bab63e8618160af8dbf7db6abae048ff5909797d5e81cc118b5beb96044638e6c32d9d78e7e62a
SSDEEP 192:qONp6O7+3hQmiUyz1Gttb0RO2osgGffU6:qONp61mGt9sO7CnU6
TLSH
T13D020939686C6CB78EF2AD45F68727179FA5117BE9A22F40D6E81E0C00D7A5C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d000a05840732a3fe3f4e37ac708356f189880b0f43e3f6662f016987cf5984
MD5 bcdb86821cd8781c1de2beaedc9465ee
SHA1 a086d21c8f038750342d8540d667ec559671c0f2
SHA512 6404d8c164d4af6b2e9e8b8b3f7b3b01046ebe6aa8c2e78228af3ffc8631a8aa4282753d629a610ebe0ef6e0db28c1eab0a5fb049ce645ad0f3cdb3c7865d02c
SSDEEP 192:DONl6O7+39QmiUyzV1httb0RO2oSBpcNIqoVU6:DONl6hmht9sO7SB+WU6
TLSH
T173122A35B868ACB75EE2A045F98736078F75417BEA462F80D5DC2E0C01EF9AC234BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9003608-f7c8-4beb-aae8-57ad7f08aa5d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e9003608-f7c8-4beb-aae8-57ad7f08aa5d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c4a830cdd074c7eb6fb212732bbb1f02c315107f35a2c88e87d80292438d95c0
MD5 eff20b118573cfdcf8f27dae5c798b29
SHA1 cac6ffc855baf2f4eb202fb31cbbe46501d74099
SHA512 c9fc3df79a36c2e07b786cdfcb3203e753c20edbd6414f8561769c38682bc39f918a72dd071b1d30426e710108b0b68307c7fc74b720035b5c8b7cdb336a20eb
TLSH
T1D7410948B6F90148B3B77F4AABF6646D487AB8772E06D45D10110E4E4666E40C8B1B77
MD5 SHA1 SHA512 TLSH

Submit Download