eba87afaf81ada7659a78b836690174f823255b74ab1378543370a0f449007b0

Analysis

user interaction
yes
max time kernel
898s
max time network
735s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 09:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 6KB
Sample260820-k2bbrstbmc
SHA256 eba87afaf81ada7659a78b836690174f823255b74ab1378543370a0f449007b0
MD5 c1064ae01967232292299cb3825c5135
SHA1 8055b30828ea8917a9dea3dce053571df57aa0b5
SHA512 50a95db5ef1efccb8c376fa06a8fad208a7987c237ab22659bd75630f9e8d9c6c6f9131a38b6dda723064cff35ef6a5a3d02408395c362370c8226b2dfc3d013
SSDEEP 96:JJGwaWjww1qS/4q7mqH9ZFyfTfIzrHLHMb9hOHKb6Vwruxq7KT+/0FbkVaM14:DRnMnKd7XdZFwjIHrsbOqbD710dOaM14
TLSH
T14CD19323F3D014A168664929BA13FBBDBF782A0147140F707818377EAB994F75F167A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4804	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316903360070499"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{C589B27B-BB0A-4377-B46F-86B89EBC2497}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2204	msedge.exe
2204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe
5528	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 5528 wrote to memory of 1044	5528	msedge.exe	86
PID 5528 wrote to memory of 4804	5528	msedge.exe	87
PID 5528 wrote to memory of 3396	5528	msedge.exe	89
PID 5528 wrote to memory of 3396	5528	msedge.exe	89
PID 5528 wrote to memory of 3396	5528	msedge.exe	89
PID 5528 wrote to memory of 1088	5528	msedge.exe	90
PID 5528 wrote to memory of 1088	5528	msedge.exe	90
PID 5528 wrote to memory of 1700	5528	msedge.exe	91
PID 5528 wrote to memory of 5304	5528	msedge.exe	92
PID 5528 wrote to memory of 1700	5528	msedge.exe	91
PID 5528 wrote to memory of 1700	5528	msedge.exe	91
PID 5528 wrote to memory of 5304	5528	msedge.exe	92
PID 5528 wrote to memory of 5304	5528	msedge.exe	92
PID 5528 wrote to memory of 1900	5528	msedge.exe	95
PID 5528 wrote to memory of 1900	5528	msedge.exe	95
PID 5528 wrote to memory of 5584	5528	msedge.exe	96
PID 5528 wrote to memory of 5584	5528	msedge.exe	96
PID 5528 wrote to memory of 3448	5528	msedge.exe	98
PID 5528 wrote to memory of 4500	5528	msedge.exe	110
PID 5528 wrote to memory of 4920	5528	msedge.exe	111
PID 5528 wrote to memory of 5344	5528	msedge.exe	112
PID 5528 wrote to memory of 1824	5528	msedge.exe	118
PID 5528 wrote to memory of 1824	5528	msedge.exe	118
PID 5528 wrote to memory of 4680	5528	msedge.exe	119
PID 5528 wrote to memory of 4680	5528	msedge.exe	119
PID 5528 wrote to memory of 6028	5528	msedge.exe	120
PID 5528 wrote to memory of 6028	5528	msedge.exe	120
PID 5528 wrote to memory of 2204	5528	msedge.exe	121
PID 5528 wrote to memory of 2132	5528	msedge.exe	122
PID 5528 wrote to memory of 2132	5528	msedge.exe	122
PID 5528 wrote to memory of 416	5528	msedge.exe	125
PID 5528 wrote to memory of 416	5528	msedge.exe	125
PID 5528 wrote to memory of 3808	5528	msedge.exe	126
PID 5528 wrote to memory of 3808	5528	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8c95ec188,0x7ff8c95ec194,0x7ff8c95ec1a0
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,18386540699952740254,1984058368633208664,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,17651034886138769973,2212892521621875895,262144 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,14421574396012571789,17747713287669213862,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,16157586765948117678,15920965991557145164,2097152 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,3687058012044479626,6365229909756277622,2097152 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,12200060604391547056,15047247251486680404,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,15379310773320917526,16558832332702603209,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,5278766408990213142,15866835859704497918,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,5278766408990213142,15866835859704497918,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,722534741935756860,11066117167322299759,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,11570945757268253281,3609171967934149421,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,15422423456101407215,3834902353773568942,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,11909864126425803092,9392497643717424453,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,9446714036552005313,8277489399182578427,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,8933479158113852551,3636354663065058327,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=776 /prefetch:8
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6008,i,3083979015555525244,9647416636065070919,262144 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,6002229441067724462,3410558631376465647,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,11599761842444948486,12655774121527837371,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,3754477497043208926,9081603064819549870,524288 --field-trial-handle=2164,i,15189590937129921623,8409167787214413064,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:3808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 20f2ca7f2dd5c00d66443f9ba4524d275f049655d3898e32d75ca187630e84ba
MD5 77e1dfc6a9b96b2420fff36df28346c6
SHA1 c0bd7d9496e7a732fa5c174c96266258b1091e00
SHA512 7c4bfa9886ec178001884021514d03c00f84c77c810cf380f20b2e1156d6be359982af00df67cdb298bb8173106e9a033b7fb704a38d23cf7091326bc40ddabf
SSDEEP 192:Rj05sEEEESSSSSSSSSSSSSSSSSSSSSSSQQQQQA5h:Rj05sEEEESSSSSSSSSSSSSSSSSSSSSSg
TLSH
T101F1741686E9C3ABCF0551874D6C635E70743B0EDBECE508334C9AD9344FC9AE4616D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c94159171becf614ea4937fb250ad4d7b7d74c49dc970de5995e1169642afac6
MD5 40876d8287e2e1e5ab1887bd37345de1
SHA1 ddb2e2ebbe27668890ab15bdd2fc58ae69ebccc4
SHA512 10364aa821c5d0ba071c7065cf4724b0a247e49103c9009d06b99d5da9e7114de08f44695d50f3f4a4b3fd1d176946ac94ac66be35a690e0a509dbb7c9bf99f2
TLSH
T191E07D8446CCC22FD600B54B536C530D9281360ED3C8F98B770886843407C40F7C39D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c794ec9ea4cce6a7fd7d33e6bd3f02767344e1a67ab27a871995c119763a19e0
MD5 54df315649d1ee02aea426901950f97f
SHA1 98bc2d7ec24b40d5e423c4ab55f26d9152df0f5c
SHA512 11de51176f2927a08c0f9b2b39567bcf93e0c289ee9078d4f893fd59f7ecadc1f4b5510fd78b3adf4a2d97e87eca925eaefdafe34b6059544596aaf083e33188
TLSH
T145E026C444CCC26ED600B58B52B8638D9A80370BB3C8FD0A2708868D3612E40F7C76A4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 68e0aac79e740976d0d070446c6bf55060c964bc81c106eedb7b98c851dde7f7
MD5 f3b17f95ae7716a25023d45f2547265c
SHA1 d70485879b36ed0d1b1400737915e8fc925dc71c
SHA512 42f3e2dae7781247aaf0f2c0ec1c6b808352af854659bb5a95e67bd91a2faf736b571adefa62ceb364ac182c2e0962ac7850d04bcb76a79fdf2e910f0c060372
TLSH
T167E026E448CCC2AEE620B647516C674CD2813A4A93CEE90A2F1089C4B802C48E382590
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 151B
SHA256 638fc7e45a745683ad16c83c4be835e65031503a39b5c456ce140c71d890910e
MD5 00a76bdd21b71faf50b8ecdd6027696f
SHA1 1e4e7650207c1941c05d1eda32fed3a6de831ad4
SHA512 263500319a5bd0ee03b7aa67af740ba8dfc0c9724a4ccff796526f04be4f699eccb58c2cd738fe74cb967c8096a9d5e6ac7d4ebc11dc1c72a2e721a58da4a4f2
TLSH
T1E3C08C7938DD681AEAA8287AA34AA0040FB042052022FC2642B8EE847A815A40A5A124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 6428d027949be89219f64d5e3e2e44a71bfe699be3de6fa41c14439b735964fb
MD5 fa661945473983ffe71a454fceb49bf0
SHA1 c04586f0540f335194db98c6d0a2fd3534e0c59a
SHA512 6c10d027c14f224383778ca912c0dde64bc584eba3b3ffb5dc8d645ca24bd8c782a41e8383c87071a459ff571e82934c33786642e066c5d8b8c1c87eea542258
TLSH
T1CAE022A6CD26FC2B18FD1759A059865AE74123572A40894F3A3C820C8FB462A46CAC6C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7372814ec41d1f6221e7147e82eeed7df24916edf36a4585b6e62bb5ee9dca65
MD5 b810f538bb9d2a3f1c48badf2ba0ee81
SHA1 8207f868dd802cb77e105a25d69512ff63c6d2e3
SHA512 f07a307775209d9d1c6a495eacc804d1ce0a4696639d427e403503d2997be68ab4e8f7f50589c21eeaa747986ee6812069040abc1ad336cfc365bb4c98502187
TLSH
T1E931C0F783F4856ECA1196F0AA18BE2FCF1D0511432C7D9A85E4AE1B93E3471E042A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4ddbcc926446396f7a003cd67e70f1a88361f6575f17ada4a5b9a28b5daf96d8
MD5 017b104e84b5d2fa183ddd09609ba053
SHA1 22e311974db3fa494be89001aeac713485db95d8
SHA512 1c579ba305456345d62526cd4ab1b3c299af8f189a0e17e08921fe1e6f776363555abf757c380063e36cef83db8565eee3525c3b1678e9f1555ff0c89d447f45
TLSH
T1FA31A2F783F4856ECA1196F0AA18BE2FDF1D0511432C7D9A85E4AF2793E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ef98dafb8779aa024463eb0e614b529fd341bd9b9abd1675475362d4ecf9cae9
MD5 5c500464bad619d1a0c549026a6f630c
SHA1 4402b4ab3b780cb80266e8419c81421123938050
SHA512 13b3421610b90d71540d8cb34d00a6aa9cf38352818d03de3f922fda1499ccbd363766de694cf2a18b4f56a3f5788ae7a9aa4d150a60a406b9a8e7a733fcaaa9
TLSH
T1B231C1F743F4856EDA1196F0AA18BE2FCF2D0511432C7DA985E0AE27D3E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 75b12a0a654d6c3212a9f34c2b5388c74e167ff5d3a4781c0e610d3aea8ac76e
MD5 1b81220c0c82977416a9e24997bb14d6
SHA1 770790d989904f41989e00e583405eeb5ff73a73
SHA512 dd3cebfaec7577f94a83919a32c7f88d0a1346faaf0ab4f4ada14775ee4e31d05a8a1cfaa1baf01c1afd87d2522ffae24297d174220cc90f8204f3e6a3376880
SSDEEP 192:sxZJRgyMqZjK1Ml8UQwkb/fyxsoBZdazodpHZHW6+WNGYvx6uQHIg5JKJ:sxZJNqDb/fisoBzh5HbGum/G
TLSH
T16362F8156A385A77CCDBD209F685BB53D7F90563A1944E44A9FCCE1C04E7AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5f1f6713369b5877f3eb4bf5f098235e372203eef1cece6defd2a47b25a4ec19
MD5 74183d302624a0e52c5cf2c139e08537
SHA1 edebada9a4e8f4675576686166d54d176031cb93
SHA512 856d3cdb0ba6b2a7527720070ee8663d3f80304b104f6ededb1d238e7eb77c5cdc9ac131fce746560a919af7c98b79466bcb868992baf57cf6ea1853619f4aee
SSDEEP 192:sxZJRgyMqZjK1Ml8Mkb/fyxssVVaZdazodpHZHW6+WNGYvIu6QQHIgjKJ:sxZJNMb/fissVVazh5HbG8mjG
TLSH
T16B62F8166A3899778CDBD209F6857F53D7F91563A2944E44A9FCCE0C04E7AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\temp-index
Size 2KB
SHA256 b4947f9173ad410e3f8c181e1484a497393be6b3e2cd2c140fcac6f219878034
MD5 1dd880aab70d2997546ca9c8f5e56626
SHA1 4083d20d4f113fbdec42323115eda046dfab0bd4
SHA512 53d1996141f1b652bbb1c6df98ec5f66fec8e9bdea6300c3370d35b16f197275a11f09a5e56a36efb95aa5ee3cd77fd42495607a5cc82bc35511e2d1fc473041
TLSH
T10941BACD4D118A6FE9684473047110D033B098CD2B1597179CBC237ABC6776E295B798
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cee8e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index~RFe5cee8e.TMP
Size 2KB
SHA256 de97e38d9fcfa766857d6edf16616abf870109de2528ecd859ea460a22a332ec
MD5 10fcbbc13f894a9ac7e9d80c7d36d3a5
SHA1 3289d9fc45eef1cc96796858ea09ea2e5270d256
SHA512 151212282e81c1f03e07ce4a5e0a1b3a3b502d16da5409c38b7fdda753a17bab23cd9fcade3f53cf2b15e2e00c006cf72817ee83d4e6ae55345d6bfb8f1afbd0
TLSH
T1DF41C9C94E42862FDCA440730992A4B4333DD94047117F4778FC923A68E67BD2D5E1D5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 d5750dfb9e3a64ce3f2eef88e5a399502ca6543800e473e342dcbcbafd93902c
MD5 b1295a32e88aad976c5319c669eba3cf
SHA1 bfe7fa675d0814979b11f9e5d271406f6371c332
SHA512 57eadf4f5a3fa11b10e4bf36c9c7ba1cd717f923a5274e4f8b91f5ccc21d9022e6a3d43796d77213d110fb9f614ff8cc4a0a55e5ae37a384b484a8076a69e6b3
TLSH
T15CE068B33EFB1C50FD6B93C6203108A040097550D9809D1F2816B28324A13192016CA6
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 652c6724fb8607c0f7ec2cb16775c2a05449caba211b5d4f98bb7c33d46d24e7
MD5 77fb7ab63a08389dee63442f8c3828e2
SHA1 9172d4bb3f1743a718c145641abf589e93e67026
SHA512 c98ae4883b97304b25c9d2511dcc32e31cc2acf6a5785a8bc21446227c098f8b9097c9501dfa8fc7db39d283967356e0e0b231160b49c6dd2976ef136b245030
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGY:05ppxnY753RNBvRJJdt7p5J9/nx+
TLSH
T157B28B5A703E0212397E298CB39596364F4135A33058E4AF7FB814A14F67E225DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 fb1f0c3f8213a046ed04f289065f272cb8b4d084e33cf4f9ad9ff5393f06fe87
MD5 09105682e4bf13f102df0c51b6f1b0a1
SHA1 99de5283e10ba0d91bbbf881621e26f13a0367d7
SHA512 0127061c64c27a7da38ef8063186ad0714510740f678fb4b96fd5a582e112c0bfbb69ac7c904206480d00c90b43a78d8a152840568411825b07b8579a3797225
SSDEEP 384:nWiFiZcIsE3sNQ8TUNTUlI4hQckCr/cR4pvBfxGJWJ45Zcd2eRGg0ivzUHty/7Ii:9FQsE3lwgokpRuDG045Zcd2vg0iow
TLSH
T1AFC23A32DCA8D9ABADE78BC5A74A3607DFE44163CACC9AC4D9D85D1D009B1ED130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6ab952c8b9a528fc0cea35311d381556200e74a5edf66a53a681b3c0cef47abf
MD5 1ed2f015aee06c42d1200d556033c6d6
SHA1 fca4e3009ebb2066865dfc4d589835ccdd77aad7
SHA512 543fe7b1dabbac952925fb0394b6688191320455b046170049260419d88c7d6bf73768cbcfd986849807ae6adfe1ebea2a4fdbd5de9bd0471d4dc6fe15395dfc
SSDEEP 384:npSiFiZcIHE3sNQ8TUNTUlI4hQckCr/cR4pvBfxGJWJ45Zcd2eR/g0ivzUHty/7J:pZFQHE3lwgokpRuDG045Zcd2Ug0iow
TLSH
T106C24A32DCA8D9ABADE78BC5A7463607DFF44163C6CC9AC4D5D85D1D009B1AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 bf985bc60f247c38d78d2f252cf8f4d5376649e26ec1d487dae6bd70b3ab6964
MD5 8707c202e2c065c6b11bdef9d678ac53
SHA1 c8a7c21f799bf1e81e0f4fedb6ca575df1aa704c
SHA512 a886704a8f2df72708ce0ce1b82dd935c7fbec042fa44c01ba2a9f0a87b8a75b1f0602cc643dc67833c8d5e650f433f64f347425c55901b52e32cc092b911757
SSDEEP 768:p7Fccps31wgbkULNDG045Zcd2yg0I8p0MLC:xs3PDyc7I8p0MLC
TLSH
T13FC25B32EC98D9ABEDD74B98B64A3603DEE04267C6CC9AD4D9DC5D0D009B1ED530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6084532a17c80c8dacc4ec550ca7ad746e398506788b4a66d417ab02278a4b64
MD5 6e549878e8e2f70cd865e4fac3406ece
SHA1 6ff747352201f3f950ffb18d9f44b82cf4209b49
SHA512 4881603b6c86aefe563c9f2fbf09fa7da807f0a6aa394d48a947890953bb690a3cf9dbdab14445cfeceb3dbfc8c33008401ced1b25118bd10a91c8823b51cbba
SSDEEP 384:nsiFiZcIHE3sNQ8TUNTUlI4hQckCr/cR4pvBfxGJWJ45Zcd2eR/g0ivzUHty/7Ii:XFQHE3lwgokpRuDG045Zcd2Ug0iow
TLSH
T121C23A32DCA8D9ABADE78BC5A74A3607DFE44163CACC9AC4D9D85D1D009B1AD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 16e4926982e8ea9b94426fe28eac39da73169484f03d761633058117e31398bb
MD5 7b71805f85ab2b55088f37aefc582db6
SHA1 fb974c4a59dbd492dae29cc9f12aa27d41bdb9b1
SHA512 7bb8681d427e3673fe405b6eff9659ae7d8db5f3d4e3a9e57c5aa3d80be6dca423945c376ca68767f777f8a9c2b5baf62a608fa140b93264f26e9e55cdaebcf5
SSDEEP 768:pcFccps3GwgbkUTkDG045Zcd2ZrI8p0MLC:Gs3oqycwI8p0MLC
TLSH
T149B25B36EC98DAB7EDE74F89B74A3A07DEE0126785D859D4CADC1D0D009719D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 645056aba2aee6cce3f860c8e6eeb06948e73a13a49e7206f7e9cf5bb2cfcee9
MD5 49eeded5fbc13c3c5794c382bc4dee2f
SHA1 35a37846093c631407f47a4ba39fcba8fe411b62
SHA512 dd403f0bdab6f72dcedf5cd3eee862a9aa60baba4afb020916498ca7442628c29aecbf5b070219dcd3640f407b9508b734ddb6729fd6f8b7a7293d520bacdd21
SSDEEP 768:pZFccpRE3lwgHkLRuDG045Zcd2Ug0j3S5:jC3TzycnW5
TLSH
T1D2B22932EC98DAABEDE75BC9A65A3613DEE44163CACC9AD4C9DD1D0C009B1DD030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 66261437cae3888c3d88d4a028b29a385e03f994ae38f7d2c2a937a29cc608f7
MD5 8a26a0bf7657729526f9ee4e0048aa79
SHA1 0df64209d30c376b699cc8ad1601ad6f3f2774dc
SHA512 ffac8ef4b436a08dbac58cffb96dca51dfb22b591df709ca7b61544cab57c95d520fb9c7c3e36c271d568a4326ea7c1313cdc3916b0c5ecc6c90c0e7d38fffe3
TLSH
T1F1412A5DABF91108B3B7AE4A6BF6696D447EBC772E06D49E00010D4F0A32B00C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3448-200-0x000001FA2D610000-0x000001FA2E610000-memory.dmp

Download