hxxps://twgservice[.]my[.]salesforce[.]com/500Pm00001pCsi1?fromEmail=1&s1oid=00Dd0000000iPes&s1nid=000000000000000&s1uid=0053f000001MwIg&s1ext=0&emkind=chatterUnifiedUserDigest&emtm=1787722621774

Analysis

user interaction
yes
max time kernel
127s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/08/2026, 18:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://twgservice.my.salesforce.com/500Pm00001pCsi1?fromEmail=1&s1oid=00Dd0000000iPes&s1nid=000000000000000&s1uid=0053f000001MwIg&s1ext=0&emkind=chatterUnifiedUserDigest&emtm=1787722621774
Sample260828-xd4dvsscph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4188	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134324163211332690"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{93B56152-F090-4420-94AA-DC9A10B541EB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5440	msedge.exe
5440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4924 wrote to memory of 908	4924	msedge.exe	85
PID 4924 wrote to memory of 4188	4924	msedge.exe	86
PID 4924 wrote to memory of 4368	4924	msedge.exe	87
PID 4924 wrote to memory of 4368	4924	msedge.exe	87
PID 4924 wrote to memory of 4368	4924	msedge.exe	87
PID 4924 wrote to memory of 1852	4924	msedge.exe	88
PID 4924 wrote to memory of 1852	4924	msedge.exe	88
PID 4924 wrote to memory of 2576	4924	msedge.exe	90
PID 4924 wrote to memory of 2576	4924	msedge.exe	90
PID 4924 wrote to memory of 2576	4924	msedge.exe	90
PID 4924 wrote to memory of 1724	4924	msedge.exe	91
PID 4924 wrote to memory of 1724	4924	msedge.exe	91
PID 4924 wrote to memory of 1724	4924	msedge.exe	91
PID 4924 wrote to memory of 2136	4924	msedge.exe	92
PID 4924 wrote to memory of 4708	4924	msedge.exe	93
PID 4924 wrote to memory of 2136	4924	msedge.exe	92
PID 4924 wrote to memory of 2136	4924	msedge.exe	92
PID 4924 wrote to memory of 4708	4924	msedge.exe	93
PID 4924 wrote to memory of 4708	4924	msedge.exe	93
PID 4924 wrote to memory of 3932	4924	msedge.exe	97
PID 4924 wrote to memory of 3932	4924	msedge.exe	97
PID 4924 wrote to memory of 3932	4924	msedge.exe	97
PID 4924 wrote to memory of 3360	4924	msedge.exe	98
PID 4924 wrote to memory of 4656	4924	msedge.exe	99
PID 4924 wrote to memory of 3360	4924	msedge.exe	98
PID 4924 wrote to memory of 4656	4924	msedge.exe	99
PID 4924 wrote to memory of 652	4924	msedge.exe	103
PID 4924 wrote to memory of 3804	4924	msedge.exe	115
PID 4924 wrote to memory of 4476	4924	msedge.exe	116
PID 4924 wrote to memory of 4608	4924	msedge.exe	117
PID 4924 wrote to memory of 2240	4924	msedge.exe	123
PID 4924 wrote to memory of 2240	4924	msedge.exe	123
PID 4924 wrote to memory of 1144	4924	msedge.exe	124
PID 4924 wrote to memory of 1144	4924	msedge.exe	124
PID 4924 wrote to memory of 1144	4924	msedge.exe	124
PID 4924 wrote to memory of 5440	4924	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://twgservice.my.salesforce.com/500Pm00001pCsi1?fromEmail=1&s1oid=00Dd0000000iPes&s1nid=000000000000000&s1uid=0053f000001MwIg&s1ext=0&emkind=chatterUnifiedUserDigest&emtm=1787722621774
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc12efc188,0x7ffc12efc194,0x7ffc12efc1a0
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,14937823743989186572,16621274381290496727,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,8541201687355396034,10219314704047721872,262144 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1668,i,9419467602610800461,9966828134443962329,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,12039290598271653281,7079043923410674953,2097152 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,2006348422696520809,2311731302045652528,2097152 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,8903400241634091687,9749263133124328419,2097152 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,4293151145854867883,1445861202972028747,2097152 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5184,i,11688522019249415616,16585134016710830053,2097152 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,11696583520164037844,12226896562293803956,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,10492584391630933509,2274593964475274565,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,14682101107166980970,14532813732651287519,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,14682101107166980970,14532813732651287519,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,11466519645883480601,7965191546342094366,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,213237435200120627,14306225826569801591,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,7603955523245973787,3136290554931880946,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,7172306253377484782,10426019631549857459,524288 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=120,i,1731407209090785434,6003567475194901595,2097152 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,9922973378723522125,5588554916338201472,262144 --field-trial-handle=2236,i,2863956585669706539,3646532226225525095,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dc3cbdc636712cd0ad246adb60e10a6c82511eff5067261c392024fae841e7a9
MD5 c1825e771385238aa2866582788cf8ff
SHA1 cdd34f1c740914ce98dfac6172ecd00fb2da9783
SHA512 33f14925d45545eb4c68af5b5b273b9724142601b0f5098ecd00afa7d2c73115a7bbfbde0f2118a5645868d8b32a69bd2a748d5d5a3d469656956f8af0313fdf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 68KB
SHA256 7c1587a8deb920144116f76efe8d9f9c1cbe3f4075b7ab0b324e48196aaff7e5
MD5 17ed453315625e4e1252985fcb178bc5
SHA1 b3d861c8364d97ef88f6a4546ab911061e66286a
SHA512 64cb3bff0a0c2dba442a106586eb8a98cca75092d9f358aaaac4e9345b54f4b715c7571f70901fb839212dea630c12a0e5c7c9370564c3b7f7f0f78da50fba7b
SSDEEP 1536:sib+w2yTqlHVzWIzNM7wPrKZPeYim4SantVBG9Iox+AFziYas9lO3fJ:ZHTqp8Yx+Z0m431GKo3Fzie2J
TLSH
T1CA63020BC0419970381741885CF8E86E1FF678DDB8327E9BF6635FB5A2E47E441A7A02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 406KB
SHA256 241fd5d8ef62bb6b85a44451ec96f97934f1342a67e4bce6b60ea50f83eb119e
MD5 869b7596684a08381c0814712870c0a8
SHA1 f7eca4e949fa8be787a9c77726bd65ba275c6db1
SHA512 9955d4f916b05d7402b10471e830075dd4fb3d7e065f6c5df05bd80cc97334f5381a7279291ddd5ae64900bba4e7a0f235f5cfc62d2d21300d0193c278e49bbd
SSDEEP 6144:l8ZlsOnEwKTVhxcbgI9AXFt5/EZNGxiGT3Eblh5/pOPEnrAfArjMK8+U4P+la6Ib:TGENibX9M/EZISf5x/rAYvQx0b
TLSH
T1209423786BD676F72BB8603708F2123508D17CEFA1407B2F590B9E7051AC4B79652B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 b3132cf3ed304d6dec9eb44adb228e23bb64ebae27e936c375be97c97fb98311
MD5 34ce66c8a7004bfa205bb1c576d36a43
SHA1 67bd2e1ec392faa897358cd1c05a318445f0996f
SHA512 1aba35b02bfa9c67506af07707cb7945b1f01f13f74f9205d72158053a2c49ec5d496726c3b34234aaa74b4d06294ebe498438be1fafd16cacf0af0922adeb8f
SSDEEP 96:inRQkMci+rvcwfHZkGHvOeSy2rMk9PpeAFjUbnSCrMW2XVXPm4cH:SRQ7cbBhkOWesrJ9ReAKbnSCX6mTH
TLSH
T13AE1E81485E47262DFE94BB2E5C228017638868E4E0F1E530B59CE7D5E873E1FF62386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 6fabc01f3f9772e56aee8acd10cceb74fa1b2410b2bd4263c05c47b788eacab6
MD5 e777a20087115004e382ab1c43d3ebb3
SHA1 a990220a81d4e6f06ca65a57371fc1cdeb7b485d
SHA512 8baaa9a45c9c73b0d4f6a56e6a0215edc616dbb018fc6ab5f776e112900108e4e92ef345d21a60c2982e76af08d66f9b780e00f12828b12da38ebff0ea106d26
SSDEEP 48:V2yVIkH3iErDv1zcWNt7D8JeO/JHPhnbKfNbv6fxm6DDpF+BSbGnM3V7qTau:LOkXiaBdF+e4H52lbv+mGL+BSDuB
TLSH
T18A81A12802A57061EBF80AF1D4C22915B53D8BEF070F1E460C988EBD5E86794BA7538A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58e53b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e53b.TMP
Size 3KB
SHA256 e2966a08dd3832bc6b3d89ef3c5b7e884ed55efb69a497895d432427880a4ddb
MD5 8fda3802835d27026c360af2d853d5f2
SHA1 5a6dcdff6bcec15f39a6c39764f29a101941f120
SHA512 657926bf73c54979ded96614de7ef119e14c013ba0ab6879af24bbafb4bcf53f15a62c81f723846b0b79a0bd34e3c30e227fe2e57f2e12de848d6888559724fc
TLSH
T14E71802842A23461EBF41AF0E4C31206B57E47DF0B0F0D4518AC9FBDAE89364B27178B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f1fddfb73723320ec7433c2f67a713ba98af83625cb85c0eeb4320aec4aeb9cb
MD5 c07bae2712b405e410084c0dfff241c6
SHA1 834827f7b9ad698ce72e4f51f0551772b68b989e
SHA512 872f789cc852f4fbe2007ea024693850ade32e2d0906cdf5c54c205f1427a20a74283b7a962a65da91a263acd789e6a4aa429798b17aecf162d30590112371af
TLSH
T10A4148F387B0867ECA1195F09E146E2B8E6D0525077C786685D4FE56A3E34B2E100A4B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 98d58c928fc042edfa7afd9ffdf661421a802dac6a7d073c2ec734cfd6d3743e
MD5 f80a0624da58e2300fd74c36c3f32764
SHA1 8fc6eff884b2e408649d698640b20b53f36cc376
SHA512 1d818ab79989a6153c04f176d6578ef6e3afe1dbe1b841ab09f9cf891bca661f3ed1b2be9270680418115974183fb923e0961bc1f70ca395e91e46ad89995abf
SSDEEP 192:sxZJRIyM/jK1Ml8Mkw/fzsBzKQLrIdpvcHW6+WNvec/Y4ZU5kFkIgrJ:sxZJ+Mw/fzsEQYkHbp/LK9
TLSH
T15B52E812AA346D77CCDBD209FA55BB53D6F80572A2900E44A9FCDA1C04E7AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 5e6a4a24d8bdbc2f80e6707ebc866df8f8cffd76d735fe87cee959c124c0d02c
MD5 6921d32fc27714b25ab3b651f1f5fde5
SHA1 89078f5e427b27e31d9100c676f190feb043b270
SHA512 3adb3a7869fe767d1b60b3adb053f28b95abe5d5c9ced9bbaf61c6061aaa6553c6440d9beab902284d240e646cff9aa67bbb5e92c177f654478286d006d729d3
SSDEEP 192:sxZpQUnvRIyM/jK1Ml8MWOw/fzsMzK7Lthbw0wdp4qcHW6+WNBIXyec/Y4N6WGFT:sxZhnv+uOw/fzsZ7RBgwHbag/T9cH
TLSH
T1F182F752AA205D7B8CD7D208F9227F53D6F90563D9500E4CA9FDDA0C04EBAEE2217C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 57db89ce2f3dca449ddf65e2bb7cbf8c5992e55da2609ec8fd55a5e841b535d9
MD5 c30912af9557b6d078e6678789cd9a60
SHA1 68a23f452a00a574998d8e50217bdcf0b93cda75
SHA512 38224c4a19777b6ddbda4ee62528b43ebf52e6d4519ea0beb551efdf14ee7646224e7d70a14e4f36c57d9d708984ce6a70fa2b3b9523c645b7477d530d7d00a1
SSDEEP 192:sxZpQUnvRIyM/jK1Ml8UQpkw/fzsMzK7Lthbw0wdp4qcHW6+WNBIXyec/Y4N6WGB:sxZhnv+qqw/fzsZ7RBgwHbag/T9cH
TLSH
T18382F752AA205D7B8CD7D209F9227F53D6F90463D9500E4CA9FDCA0C04EBAEE2217C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 098083062ee6ba5006a70591d52af90e9fd843a4ea36302cd03f82b78e85db1d
MD5 2d3d9a65f605bd6d1cdf5448f1ffcffd
SHA1 454d911216713f279a2f3604dc11e042add93b3e
SHA512 b0fe6cd88749079b93e5cfe259e7ef2dfccc54b3e506ddc62b8e2b1a44a47f665de102325877fb6bdd1c686b78409be1043654a6ac130bc9009e03a39f0cd5ca
SSDEEP 192:sxZJRIyM/jK1Ml8MWOw/fzsMzK7Lrmdp4McHW6+WNBIXyec/Y4N6WGFkIg5SJ:sxZJ+uOw/fzsZ726Hbag/T9c
TLSH
T1EC52D752AA346E77CCDBD209F951BF53D6F5057292901E44AAFCCA1C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6bc36e4e492066677633fa936a49f32eaca5eccab3f7a4b2701d483f88d5b3df
MD5 a544e2f09ad688c4d8793ddb59c40e15
SHA1 a990c817d59e16d9bf92e0ea23de813a6292f8c7
SHA512 d372d861cb2c2c6cf36e8ef3e2931ad42272c8fb4e0b93090189093061e25e2d1797434a1c9461f72ac8c7c4f058a3b605881ce9e97cec1b03da84221dc908ce
SSDEEP 768:tV8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opd2roVkVUnv:tV8iJPNWvx76ru1jahALocdNMUv
TLSH
T17AD20B3B680CCB7E4F844E9CEC266F966DE801CB5B984D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 3d4ffbca4dd307dd68eda98c00a617876f990d34c18cfe32947911635da7494d
MD5 e0a9d235435a5036be8a2905f85fdaf1
SHA1 e8e920ab71201173e124773d2c665727a0eff811
SHA512 1516c3d44c9e67e3a507a3ffc33eab7d2ff418a2c40bd27563ebf97c20f8c427eec85cc911131b3f6b68e2976911cf7e4ee59efab6d555e1cb9b3e46b56f66c0
TLSH
T109A0021113808516D01321B3ED9316823324CCD165846707509A045CDC908544ED110E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2079e03b-da06-4427-af71-e6e1ddbd9ea9\index-dir\the-real-index
Size 72B
SHA256 33ad85b3a19db1fd194feb1110ed81a04c8ccceb7f8842274b8b0fa17749536f
MD5 f07eddf3a3a493ad57590ff87a611b00
SHA1 269e5f47ec8ebcaa373d9dc48675aa911f81d706
SHA512 e709cf5847b8773ebc0170e42704b7a01847b0da15eada4d587b8fbfa3b33d5be58444e64c3c714e9e27f81e4d27930f6550978c86f90c155ec182c84085f7c6
TLSH
T151A002AC12842A31C4C773B429DA81D12350CD111703273742A00144DE90D479D4150C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 1KB
SHA256 7295bacda5267c5dfa1d3d66fc0db29b8bdbe10b617e0d7736e5fc8a19eaee1a
MD5 4c4ff105ba5eea8eeeed02a6e1d6a564
SHA1 43fda32b68e1f6beb27eec2118bc8fff3ffd3913
SHA512 6b11cc9db65e83052bac3e328699490d7f53e98910ad6c67696780a78164d4e633d63691de42afd76371fb7386008464f0e8851409a0f5c216a18d702c1ec044
TLSH
T1383144498EA5DE6FEDB041B2167264B8737084DC1325A713983C31357E277AA2A4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 3KB
SHA256 bb4ce884be5331fba659137c56f7a433490ab7de20f3e2e10ef317c9e14418bc
MD5 89fe1dfc1380585571379c1e6c8cd3ec
SHA1 30e35d417abc3f0eef57746e0b8bc8b472e3ed36
SHA512 950ae6d81dc77f6cec5c1764ef7d2561e2b9d316923957288cf6b9b236cf294baede8f153d0e13ce103a2935348fd24297e8ea4222f6d7be2831725e9987c30c
TLSH
T11051F81F4E0A0E69ED9C82B11CFA1D46337429DE1758AD0B52EE9330A8E33386E4D585
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599c94.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe599c94.TMP
Size 1KB
SHA256 51d760bdf8914c5db717f825fc1aff04479670a20d0ecdf8844c9e50362ce835
MD5 67fa15db920fce43fc5aa5258dd34b83
SHA1 f10465acbd9f26f9c24f9ed2c5606b28b923acef
SHA512 dba45671464db45acff32c8bd760884b479c3f4d6d4f8f7e321809540cbbe01ed10e1d132fe15b2be5145f798d0f01d625d9291bc69dde0c1e652a111e9ccb85
TLSH
T1E631664B8A808A1AE894507709A6B4B8733699404311B783D87C6139BD25BEE1F5E0D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 6d21a1f8cf0292de77f35aff08d4ff0db2e37c034a7bb884ae68ab08a4af2079
MD5 2c3e2e3b47c9187bb2911bbcd6771df6
SHA1 86cbd2fb621f6a5ec1d9e326931650ccfd001730
SHA512 88baba50e25aad3cb7d252155b220128c51e1964a9596892b5f58194e9ccb542c3e3bc45590e92c95a2e8f2e727b41c7fc172c9098eec05f8a3f998f816d70a6
TLSH
T198E0C0F72EFB2840FEBFA3E51C7198A00241B459D544BC8F9417EB8324613523406C22
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 04ed97c3d91db63ea53ca295b4b4a493b1c098fc8bc56ea86fc6374ba81d7554
MD5 a4c0e398024484657a27e3ead5c5f2db
SHA1 d801942375fdc9e5c3e31747313ab1b029c398e7
SHA512 c301fef4142c80c3a3c89b3468af7da414a5427804a3cae5ea8f688abf3efd8dae7d2fba1dd8e10a603183113cb085ff527ae85b28d5d569934ae027ffba735c
TLSH
T189A00261DE588491C0D00BF09465168B76148EB84E0A631399EC04E48A685809B96314
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59f2b3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59f2b3.TMP
Size 48B
SHA256 cae46ac75a9155b3f5cfc667988a131442ee23156673b5fb56b019045983c559
MD5 070a10cc383992d4878022fcd17af873
SHA1 583f658ec60e730a7b6e29e12a1d9dc0a1045e4e
SHA512 84c4abd13af2013b2a6c1b9c858555bea31fea83683e823fad5dbc4b3c040cdf7f1a8f0729f868e98f756784b5cc51cc0c909a27b524ecaebb9de903a8e87a68
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bfaa4bcd33f4e1c303925fc122d42b704d746b1b8aa232d7acca015a38217d4f
MD5 354a4ed9d87f907bbf91f196e2c64cf7
SHA1 e0e4c7ae19e60f52a3890deb0ae0f6b913353c18
SHA512 b6991f1d376d43b31aca5233b46c5a299072a316c9824aec0d6bd9b4b88e08d97c581f0264174dc06dbf749120010acfe325cad8059a58c268cdbbc51f3e9068
SSDEEP 24:Kd8fzIJamd+e64Wy+JIj06KiJhaK61EEqSmYM58UzyXYdfYrCaHdvLj47/+SIjXZ:KgpIVKKwovyhiIvKLC87yNRIRKCsEmz
TLSH
T1AC91120231BF02023D7D7919A2B487574781B1B37128E42B7BA954B54E6AE344EFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5974b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5974b9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ef89ea408db0367994ab1db594bdd4f6e079440fc2be5459e2e1a5fe949cd2fe
MD5 27af139a08a548da58efc39883053b11
SHA1 763e45f2298713398d3d1321888e6627f8549d59
SHA512 76f0cff954c0ea6a3fd5ca44a91da428d065857abc38c4bf330aae7b4ca1a3626c3d7cde4a5b0d5dc841a8d910f3dece03ea75ccb51c4e4671768640b7d70574
SSDEEP 384:XiFiZcIdsN+8TUNTUlIlcTWLUh2k/rqTf0X1puLcQIoR:SFQdzwg0hKTfsyLcQIe
TLSH
T175C22BF248E7987AD8AE9743E77E2E034EBCC023B5845A50B3D9561CCC961BFC30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 31220566dec34629775d0b996346dc7cc6927f7709f02b257eabeee22293ea48
MD5 cc7e0f8608d993b4de097a1bde89686b
SHA1 2528d0d60f9c96beb8d6e444de6d7138b49519ce
SHA512 d5f9cb9308dc67357803cdffb65a0f8ade920cff0c3fb1ce8a8f7430bece06f2331e0d62817ca5ddd5ea24f2acc1796531af9b33d988d0d5d1377591528cc2e0
SSDEEP 96:ZqONk3QsjpfmUTmDK5ih/cIPURHl8h4otop5Q5DqBhPwivh50xy0SFYKQAxsYssu:gONz6kDfQmiUyy6Z9036TQis5U6
TLSH
T17C02E835A8787CBB8EA36E46F48777275FE5212BEA852F84D9E81B1C04D724C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9a273e8300fdec67fb05c38f0a3dca19df3d3b9667efd82933406882c62f968b
MD5 c7c3cefa4d6f1d806f7abf1c24121081
SHA1 549fbe6567c57e960d9e9212583ebd1bbdadb9a4
SHA512 a6beb8a38639c0fb08d2aa1e261da51d751cb3313e8ced3a37fda969c0809bf1164402fb4be26afbbec9fbaa0487cde363efb56e125bef899a548b505419502d
SSDEEP 96:5qONkwOQsjpfmUTJK5ih/cIPURHl8h4otop5QLDqB2Pwivh50xy0SFYKQAxsYssQ:AONlh6kQQmiUym6w9036r1EYdcRgq5U6
TLSH
T10B12293168B87C7B5DD3A941F48736135EA58227EB886F81D5EC2B1C05DB69C130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fb6cde1f7becee425e12d1cd58813d48c27ccce02d6be3e984638d58684de9f2
MD5 6012379221e35b2f87f7c416049d165b
SHA1 5ffc31e00a631aa801db2d28b78423dc7179ad2a
SHA512 4fd9ecc6db2599fae8a4f737cf6684a31a29bc712a551dfcc933c408387602d0b038fb6351c50c3bcfcda8eaba6dbfd28c232198852913417dae132d2f5ac1df
SSDEEP 192:udm+xasuheOwQxMGsNRUtQW55m9DQmiU1DX/4k036r1EY0LIgq50X/dpuI9MHQ8B:TZcIhsNut4LZwk/rq8f0X1puLcQIoR
TLSH
T150827B7168B87C7B58E3A542F58B77074FB88023DBC86F80E5EDA71C05DA588170B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7c5a068f1528a84b5094c70c3f6c60f884a69ac205e69721992a827bbb591195
MD5 3ebb2c13889f79a41c9669ae364e7746
SHA1 87392a571c6ad46ea910f493f308d5be90442780
SHA512 60f23364aae50e97baef82c2767e28bbe24df4b393c4eb60652b667376172f9ffaf55a8213d77e871bed6db2e620df8e2a2643367e581edd93f0fd3a4184aa0e
SSDEEP 192:u5m+xasuheOwQxMGsNRUcQW55m9DQmiU12X/4k036r1EY0LIgq50X/dpuI9MHQ8B:3ZcIhsNuc4Luwk/rq8f0X1puLcQIoR
TLSH
T1E2827B7128B87C7B58E3A541F58B77074FB88023D7CC6F80A5EDA71D05DA589170B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 418d578fa0570045f234906ff65292848a234cfe373e56289879993051372533
MD5 06cbd09e2b3fc087087ead6a9adf47cc
SHA1 2ec5fc34e191459a2326ff11f85de488b499e2ad
SHA512 2ff59c3d79b5f26a85dce66677d3c6a6034401acb4852b7b1e6262971996a3063342ae0085ebcecebccd28a4fa51000fa23144c600105ac00053e27e60282284
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe5a4cba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a4cba.TMP
Size 392B
SHA256 352978fdcd213ad50c0c316b11fb613399cd4b654497c2fb65f8f216ed6779a6
MD5 78eb7237f4090cef21f6144049ecec62
SHA1 4d9262b7108ec309c5ef1c0c7cc25cc7bd4809d7
SHA512 325a7d64dc5d9449ee3b58f58a99e55e40c39f9bbf1eda11911a2dd5d2ea0c3e534e82a005906329803debf5de2080fb43fa7f2cb123b3642f55bb09c6f173e4
MD5 SHA1 SHA512

Submit Download

45a08446-7699-467f-a5ea-ef4bc52e8ba9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\45a08446-7699-467f-a5ea-ef4bc52e8ba9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 23bfbcdd7d3c90ecf75dc29af6077cda60d8b92c6759e1f4651b93cb5c953c9f
MD5 e50a8aaeeecacba80f0813c79736019b
SHA1 37f4025a074b6bfcfaa180dbedaa4b9bec6250e3
SHA512 dc25cee752829e80da71245763ec43b5e09af57deef180bc3f1cb6feb7ee9028df437f2f4042648be3e71e04f0def6ad3293a9e855a4e08df7af6691aaada8dc
TLSH
T1C441EA58B6EA1148F3B77F5B9BF6A96D487A78372E06D4AD10110E4F0663E00C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download