0e6b49f54b9b1c76414ce3876dd3c624293cee7ca97ca04ef84768e2e8a5a08e

Analysis

user interaction
yes
max time kernel
161s
max time network
166s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-uk
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-uklocale:uk-uaos:windows11-ltsc_2024-x64systemwindows
submitted
03/09/2026, 15:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
id=489501036.html
Size 66KB
Sample260903-ssh91swxat
SHA256 0e6b49f54b9b1c76414ce3876dd3c624293cee7ca97ca04ef84768e2e8a5a08e
MD5 49e539b4a4d1b5fef2ea197e13a20754
SHA1 4fec5a241d8b6af1f33324e7d304e9407cc2a15a
SHA512 47771c7961db762de6a47092c3f8534e969fce9ec2d44ee3fe9d8b213e6a3ff80a2770f5e0d15d8eaf9b60042fd7e4025312feb466f6e2de9a382f99f22923bb
SSDEEP 768:AWwNOYMEJE6wWTxVJDWOrzysfyHElej95F8jcF+FsF5WpNlNEOsVZMZRw/sfp9Hp:AVa6fxpcTFQcF+FsFoE0HuT4
TLSH
T13A6388C519C724BFC99636A0AD4E908A6CE43D167B8897859142B8C178BFDF43FD2C53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1908	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134329226603627489"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{EC6EC325-CABF-4634-B5AB-35A908C548A0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5976	msedge.exe
5976	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of FindShellTrayWindow 49 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2788 wrote to memory of 4448	2788	msedge.exe	89
PID 2788 wrote to memory of 3052	2788	msedge.exe	90
PID 2788 wrote to memory of 1908	2788	msedge.exe	92
PID 2788 wrote to memory of 3052	2788	msedge.exe	90
PID 2788 wrote to memory of 3052	2788	msedge.exe	90
PID 2788 wrote to memory of 2564	2788	msedge.exe	93
PID 2788 wrote to memory of 2564	2788	msedge.exe	93
PID 2788 wrote to memory of 5036	2788	msedge.exe	94
PID 2788 wrote to memory of 5036	2788	msedge.exe	94
PID 2788 wrote to memory of 5036	2788	msedge.exe	94
PID 2788 wrote to memory of 564	2788	msedge.exe	95
PID 2788 wrote to memory of 564	2788	msedge.exe	95
PID 2788 wrote to memory of 564	2788	msedge.exe	95
PID 2788 wrote to memory of 4644	2788	msedge.exe	96
PID 2788 wrote to memory of 4644	2788	msedge.exe	96
PID 2788 wrote to memory of 4644	2788	msedge.exe	96
PID 2788 wrote to memory of 1840	2788	msedge.exe	97
PID 2788 wrote to memory of 1840	2788	msedge.exe	97
PID 2788 wrote to memory of 1840	2788	msedge.exe	97
PID 2788 wrote to memory of 1552	2788	msedge.exe	99
PID 2788 wrote to memory of 1552	2788	msedge.exe	99
PID 2788 wrote to memory of 4040	2788	msedge.exe	100
PID 2788 wrote to memory of 4040	2788	msedge.exe	100
PID 2788 wrote to memory of 3808	2788	msedge.exe	102
PID 2788 wrote to memory of 4032	2788	msedge.exe	106
PID 2788 wrote to memory of 5304	2788	msedge.exe	107
PID 2788 wrote to memory of 6124	2788	msedge.exe	108
PID 2788 wrote to memory of 5452	2788	msedge.exe	109
PID 2788 wrote to memory of 5452	2788	msedge.exe	109
PID 2788 wrote to memory of 2484	2788	msedge.exe	111
PID 2788 wrote to memory of 2484	2788	msedge.exe	111
PID 2788 wrote to memory of 2484	2788	msedge.exe	111
PID 2788 wrote to memory of 3008	2788	msedge.exe	112
PID 2788 wrote to memory of 3008	2788	msedge.exe	112
PID 2788 wrote to memory of 5976	2788	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\id=489501036.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2ac,0x7ffa64d4c188,0x7ffa64d4c194,0x7ffa64d4c1a0
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,14309543976180520100,2042607142561115662,262144 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=uk --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,219229659900009892,11121994170964856951,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=uk --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,18256782683823617588,11028719520340614497,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=3260 /prefetch:13
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,10159081427696359777,11712253615093365857,2097152 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,15855881058377545103,16136567360007336455,2097152 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4320,i,9371513719103726594,17651144475287684911,2097152 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,16702928868486234383,5604008858258488911,2097152 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:9
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=uk --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,18191829246301667710,12759745091933792079,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=uk --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,5384999661035830312,17597736668143309203,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=uk --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,18145752094723250979,8574269502533880794,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=uk --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,18145752094723250979,8574269502533880794,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,486565700936651697,15756033460559929922,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4652,i,15961795161956316178,14049433787049816081,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:14
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=uk --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,14822557752489914752,2800233748434387919,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=uk --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,9441608752175528929,18253189786070411465,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:14
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=uk --js-flags=--ms-user-locale=uk_UA --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6556,i,9708750807335205003,9476164317569703583,2097152 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=816 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=uk --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,8585676604295974185,14707700734390448078,524288 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7072,i,5695257126298787663,10976482414988819182,262144 --field-trial-handle=2012,i,10506479435973245715,16892539175337817518,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5976

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1064

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:1336

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x0000000000000504 0x0000000000000500
1⤵
PID:4908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
1⤵
PID:4388

C:\Windows\System32\ShellHost.exe
"C:\Windows\System32\ShellHost.exe"
1⤵
PID:204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
Size 37KB
SHA256 9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad
MD5 231913fdebabcbe65f4b0052372bde56
SHA1 553909d080e4f210b64dc73292f3a111d5a0781f
SHA512 7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919
SSDEEP 768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
TLSH
T170038DE82E4917AEE9E2CF324ADB6716237B4F88C0BC169742B07F193175A51C6D78C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 68KB
SHA256 dc46c0f370af3317b75ef17688014c4122145f2170df7354e1a0fdb57d655346
MD5 d2be8f1695c20c5f513faad1325dd7e4
SHA1 6d195467ec15e021dd4d67e28efb33a4529f6676
SHA512 443fc19f6d303192683867e7717b2c79728d1f77a02f511edf5949f486ac77025bbe02a706688bbc5816df0f0ab86fa6fb8a90d313279bc6d6f23b257bb44468
SSDEEP 1536:T7WvJqBvzi/JWqGSyJXSKkCCF3gpYTdS+kRszVjjL50p:PW02sLkC43gerjjL6p
TLSH
T13E63028BB7FDEC40DBA0EF107519947389391214CBAB7EADE253B68DF7D88274162061
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 407KB
SHA256 fdbfca7fadb8f99a79fccb5f473bf84fd89d057e650f6e9d81c43a44e18569e7
MD5 7a60e06d427d2abe8628f455c230bf5e
SHA1 9da7890ae8f471629dd22270674933b2afa11d15
SHA512 165506597c50a82b2babfb3d248905a2e681e5e1a250933f25833346a4d4948f9899f3b760937c35895c0300da26dc414e8d341f793d2e6b1155530c6d461f6a
SSDEEP 12288:I/I/m0tfNydhOc7tvBpk1HSrREVr2sECzebi:OIu0+dsutg1HSTsii
TLSH
T1E89423ADDBBCC383C91821A39C319AC6DC792FE06F9489D4DA653A9106579FE04DE4E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 cf3ad729a6c808bbfd2e44035e851e86b7a4b51bfeb595fac327ba52ccf77feb
MD5 0fc1b51d3cbd367208b87c386632b5b8
SHA1 7cc24f485d5ea7a9faaaca1786fc1533d42fbbfb
SHA512 3378121ba0a311f4f550d366aaaa1df4ee732d0617f5e5b6d62346f7b9889c0a964474c13bbb4676e0bd7b14025408ef3013849c9bd124e60c1ca165f693906e
SSDEEP 96:0JNEEloadeqYe0Rv+mvTY7K+p2BJe35ythBR:Mdq4eqktvT2Tpyzj
TLSH
T167C19995F7B0B6D6FB457AB470EDEDA872748F9830336F02D144E2701957BE00AB8228
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 91d182453813306e641640aab4bfc4b01170cd13d4b5ccf2ecb8e5177c41739b
MD5 db5840b07d66d93674c4db5e5309c014
SHA1 fa79cacf8784a7ec0f7385d71dee2154a4dc23b0
SHA512 93943e2b8878fcc512914cb67a38b1682ab41af769fb5d407703649fb3923c48860ad62c17c8c80dfdc53f76b7a060894d1633760acdac3550a56066737cb8df
TLSH
T173411801533015D4E3A6BBBA35E2FAE83374CCEE302B6F519948A3B44A75F4513F1292
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 13caa94b7d16b9a82705384be31576be3f4ac83c3b2cd076fed46acb70f57f57
MD5 d8e6dc3a52e452f7fa29ba08b25eb7d8
SHA1 71aac22e7fbd8640003fdc492f947913be08c919
SHA512 85155065d7493627392b1ebe9c464b43b731cae6bbd30f9ca667663c636d011307d056611f895f7b3b74d23ab71f477e426b1bea1cff67abd11e976ab883706b
TLSH
T150317EF783B4956E8A1196F0EA14AE2FCF2D0511431C7C69C5E4AE2793E3462E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 553ce5aaccba39c096eda29aef368a44627a6669b44f2e3903f205fefdef637d
MD5 fe738763c5b066b5348ec6e93efa4043
SHA1 6d7ef9e5c8184a1f97d3985754cd27538f749dc2
SHA512 a34e1960b9e4364ef6472df804e343868f8f9b5eda057fcd35b007108ae4cbf189e9a2574bf8e911eef8aa32351a7b1ffb20b28830feff1b00e32d15669c2b5d
SSDEEP 192:sxRkRxbf/f2sFoT7YCbZzoA8p4j/g6+WNIYEgTOUcZG7Z5vIgIJ:sxRkjf/f2sF+7Pka/5IMnc45Ps
TLSH
T16C42C806A928AD3B4CCBD25DFA69BF53D6F9503260D06E48F6FC861C04E76DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5a6f518d207dc692ccc72439730f258b58519e1dfab328107b5c8fb51e37073d
MD5 53beaef2cf225d0d4308c853ecd3801d
SHA1 b83f74eddae0ca931646eb7a36f4095952e16cd1
SHA512 e1067e6064e8d24e5ff3bc244fdd2d13d10d30452bf7d9e561da59e282e0c61c2be847c0e14e1c8fa96a58b20049d41e1e0e1c89582833b8c01fdf5f109f3212
SSDEEP 192:sxRfRxYf/f2sGoT2YCbZzoA8p4V/g6+WNIYEgTWUcZG7Z5vIgD5J:sxRfwf/f2sG+2PkE/5Ikvc45PH
TLSH
T18742B716A928AD3B9CCBD25DFA657F53E6F9503260902E48F7FC8A1C04E76DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 71d7f0760c0608352782d60b0f1ccf5eae082851ccee3051ea00eba0abe13e91
MD5 0598eff2566c119ef0fbb359ea6f5c82
SHA1 972f240cabeba2d5fdc865676af13fc5bba8b878
SHA512 b2fc17454b22a123ace8d4638f75d454625ff68ccf4aa2d2180c3e99db6ade7cad96dbeb2727aa6bce75e6064d5d686c2a9e2eec74338812fd9d6b7bd5fad12e
SSDEEP 192:sxRfRxGOf/f2sGoT2YCbZDbxRoA8pX7PV/g6+WNPnN/YM+TWUWZG7Z5vIgD5J:sxRf+Of/f2sG+2PbYrt/51/ivW45PH
TLSH
T12552E806A9285D3B9CC7D25DFA15BF53E2F95033A4946E48B6FC8A0C04E76DE620780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 55033b28788c1bbaf74a4021817dd49e34ced66223b22bd82ca3b32c764f789a
MD5 1f41a3d8898508955f103045e3d03685
SHA1 5695803f26efc23223a5a33c231ead57920d9111
SHA512 a92fb10a3d0fcf0e820f24d402d80f32958425cff3a7687aa918b985209b13aa20fe4baa3f338e14fb964f604f08ac0aad71eb48ac5fe7df2a2802955cfb595f
SSDEEP 192:sxRfRxYf/f2sGoT7YCbZzoA8p4V/g6+WNIYEgTIUcZG7Z5vIgDnJ:sxRfwf/f2sG+7PkE/5IM5c45P9
TLSH
T10F42B606A928AD3B5CCBD25DFA69BF53D6F9503260906E48F6FC8A1C04E76DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 a6930918d7e624a87f0a501aea5ba3fe7bea5a333040c28ecf1f29d96316cfc3
MD5 ebcfe1d819dd74517f1a3ff12f95b227
SHA1 5d37f20eeb0eb09c7bc567d48591e79728586e0d
SHA512 cd71a1b80ccd722947a1baad8cdfc2e0dd14ab814cef0fa79e715d1f1bc261378ebb5702a415592e34fcbe5ea13c808daf71f4c5f05bc0c6fe6a33dda6a3e49a
SSDEEP 384:sxRw+Of/f2sG+2PN5rt/51/ivW45PqWaFA:skJf/fY+2Pbt/5JivW45y5A
TLSH
T10A72D406A924CC379CC7D559AE357F53E6F85023AC945E4CAAFCCA1C04AA6FE120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 323cd00d65fd9122a5e450d9ea36d391f54761f22aa768b7e5c27263e019e29d
MD5 df67c4e525ad63bbc493a28792ce4744
SHA1 168b60241a5f159ee30fb6ac2fbe4e21f516afed
SHA512 b1ee96bd11bd7acc09888ac2f3ec0b6700abc2c0f2a44ceb91bf079b1eb1fbf1f6898744b45af9a3cf8d93393ca303a5ba37f1efaa1df9e1fda19613df61d293
SSDEEP 384:40DxK6DJQD810DrfCtgQ6DRFfIQDFKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVs:40Dk6DJQD810DbWgQ6DjfIQDF8F1+UoN
TLSH
T100B2EB2F640DCB7F5F800A9DAC196FDB6D9802C796988D8047FE994C02C77EE92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 1KB
SHA256 c08974e41c1b2da0af75784711e7b35c092adc99719b6084d051655b0b168003
MD5 897a4f627a2b3a483ef289cec48473d2
SHA1 cb38d6859564b4d0de3a6869658b5f116f729e53
SHA512 70f1c46bb00076b76915d6eccb8d78a9c9b3ca048814e88abc3c54643b60af895666d7e576e091f3a2d05df9c19f917f44fe015987c2b9ca6732d43def755dd3
TLSH
T17231620A8C920E47DEA8617A08BB699A333592CC23447F0F52FDA13DAC97758A90A645
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 360B
SHA256 936b36db23556d68a0a4220efa5f032e505c2706696208190b63bfb6fc11c0b2
MD5 21f83ae28fe0dca9a45402424ebff0d4
SHA1 58d436146ea595c9cacef6e85977ce1812166ebb
SHA512 f2e05890293f647be72944250e5fb68ec6dd01cc24d899abc72e39cdd6b91f69e60bd9a9daba223a3f4ad015df11a4285f26c5c95f4d44d3e49f90b8870a1da1
TLSH
T1A1E0EB4F8C62080BCA237C3A0A73A03E333B06FC2508AE0A00FC001E955A63C4242208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 3KB
SHA256 51b9d8ada49eeeb8ed757e278faaccd4bd35ebf976c249e45bbe748e3ff12418
MD5 35c1adb736ade7d9c2a5565d6c7d22d4
SHA1 35ba1a8119ee59fdac7f2d38abccbbcee307633f
SHA512 1b1fd450ba06c40c55363246db657ca53c0c89a30f6dc894fa053d0acbfa3488662670cce4012f5352da7e4d4037dff930f190e995c11e1064bd7a25a840bcb2
TLSH
T13951BC8E8C460F96DDEC517608B71886337558CC57841E1B5BEC9334BCD331C6C1E555
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a8be6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index~RFe5a8be6.TMP
Size 360B
SHA256 52668f9344c27eab66b8d55749e996dede6bd800ee769b36109e0fbaa4ad7653
MD5 3569ac2d43b48189963af0d5bf3ef966
SHA1 110d8fdbe6bc620c15e4687929784c4e72b94b2d
SHA512 afba84d799d0ea8b8e41d684d2deeab49c7c0ed791f95bc3c76fcbca1a8c0992d301530027d5be044d20b9299c6449c2c663f3c0ccccd2b28e7ed0c778caa7d1
TLSH
T1F9E02BCF40D15D52C92669351D03A12A333F0C252515E61A50DE549E59613BC8945609
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index
Size 96B
SHA256 70c24dc08f2dfb5cc3518f3900f41516dafddfb46da43e6464214e7765b24c99
MD5 6594ee5e8882353106fd9dd665a205df
SHA1 5ce048f11800211296a593e231e8ae32f5bb01ef
SHA512 de1791c95a0ee3d3178bdd36b57f8ad512fe9bbb0d289a1cb54506a33c124d309cc4a8597f298b29af02e352ababc526689d3a2d1486a5f2344527cb5eb8c21f
TLSH
T10CB0220003B03023C02BA2B38BC3808023028C80220B0A2BE0C300CEEC802000E0A03C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index
Size 96B
SHA256 1942e2dad1b3b58ac7cb36d5587eb5d07de35da36d3dd6a259e492e346120ba8
MD5 d5dc13ee083cb22ba35ca3445aa1f9ad
SHA1 805b236cab8465fe5f7b16a585603041457f8dff
SHA512 c80c9eafb8a67de414a187b0747fd12b0f96331dd524b41f24525639ae77c425e3acc7f444245fc821e4f4761a338374b08c803eddb5c667caa8e2affd9286b5
TLSH
T17DB001296AC05292C44A62B766D6988272AA89204303675FE19986B9C810A9D8A4A19A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 5cbe5f12a8d18e016800aced843c021b57234ab39351ba7386d11578e1a00345
MD5 233ceab86c0c4b5c4dee30772eea37db
SHA1 ca85a17585749e178718be35a60727df33ce6961
SHA512 7bc3987968a7a8aeb59dfe15d706992ef7696d046e1cef87d435a7d2447d78acc7bd9f5c921a55a3786ffd251aa9f74d7212f74524160cbbf36ca2addaf962d3
TLSH
T13EE0C0FB2CF71814EC7F83C72570C67201017828D148EC4E012692C700B1365A886C31
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 fd2010d9a41964f425d7a2d3ec9f00b5fee862c1918a989c00d3d7cd37889eed
MD5 4fde917bfa4adb2ba58e81151c585cdc
SHA1 510e8d00358a9d2de278f24f78b95675e7fe42c9
SHA512 a5e8693785ec12d77f3a7ddb8c1323d81fc0477682e0770edbd93f30e013b41b9631f1622c684395b4604200dc2308c1349a30b737a6e8667bbdde263fb6658c
TLSH
T137E0C0FB2DEB1854EC7F83C62470C57201017838D548EC4E012692C700B1365A886C31
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 571fffd97d0418f2620a92f8eac8f5b9c54616dc1a774e85637811fe23b5b135
MD5 1238e7813c0b0c688700c5d280813910
SHA1 c3824a08529790e25c686f1c62fb13f69c5d6655
SHA512 50344adbc3a4480f85df4b8344528fb458ec482d28677b42ad5a400a24054aaee5e4276e9c90264a8ff43f3112c408c6ceb45619964751c63c1997532c8531a9
TLSH
T12AA00260DB6A9086CB1746F012E591407350CCD9415A1319A8ACD0BACCA959051C9399
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ae3e9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ae3e9.TMP
Size 48B
SHA256 b59a0026d21e1afe358da1d074ecef4b52bc467a8feb42992243e918b8b7f484
MD5 dc216d4d102f149e50a2df83fd37d420
SHA1 d4b4c49bbff4645689cd5024dbb9d72e2c6b5cec
SHA512 53ba9ae4f874efd0ab275a55d8eff96388b1a5476105c5936b7678bc5fabdf0bec1dd78828e82fd57a1dfe026f8efc277e80b070079d6e9b5cb567597a687ee2
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 df7ab317c76fbf6d371224d8bba4d1d7f2261dd28d8b162d56670f1c04f3a17e
MD5 6a13d31f7530fc97000f9176ea1ac358
SHA1 0b4c48a2e2681451b25103e4532ef19143b190ca
SHA512 f80b95da8e7601c29ba7ca8eece8386eeb21e25bb94fa68e38498f83745f96c9ee7c6f77686a9d214d900f817214d21c0ae47831988c5047bd1ec9710b7c5aa8
SSDEEP 96:KRzc5t7xxNWlqggVNK4sg7NcD7SFR2HlyLf1vz3W7gugn3K4Wg53cdF4LDcH+zCt:Czc5t7xxolqxVHsg7iD7SFR2HlyLf1vC
TLSH
T1EE910610303B12A43C7E7505A1F9A42ED6C274A13319E52B7BE906B71F66E039CFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 6e58e69a07fdfb27891cfa9a663b1cd3f76e4a77ea6f312fab0beb3b92ffb513
MD5 0e9aef861dfc449f7c41490bc0935a6a
SHA1 415c9a9af8ed42ea8a4b1c1714d8ffb40ebd3d5d
SHA512 56b3c671441a5ee97333d065bef62a5294fccb6e759bb5436b832e1cddb040fbe14977a7faf64eeec68ce7a321ba6230984dbe5437efa8d5ac6ce8ba03b4515d
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uo:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAR
TLSH
T12AA2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a033d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a033d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 a9cc00c87935fd4333731a07227a30b436db22e277c81429e7e2b9477f629203
MD5 1928fe717caa9761af1d8de9e2caa5dd
SHA1 d1611894251f6a55789bde3251fca85da9db6e25
SHA512 6b04dae823f0a7bf9126aa8441a40803b3a55326b935537467203e116ebe10d75dccddc5c3a1c22287925cf5ae891ab5795467f81c247633ae82d514f337df05
SSDEEP 768:brv+4UNbdG3Ko9DTd+ZuYsa6eX6+qTko0u229a4vsSzeVH1SdW:bbsbU38tvVTVKa4VEH1h
TLSH
T1A603BE32F8699A734DE68784B14B714B2E792163C6C80B90D8DDBF8D065F49C270F92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 3df0f42ba7debbc4b40d07151e3528c98b66e8f1ddd3e3b560b19f23f616c01e
MD5 0cf49bfcf501a87bb5fb6d81ee407fc6
SHA1 91860de64f36d25b6359457acfece7118a64085e
SHA512 97fdec17cacc7fb038753cd4d6bb4e932b2141665608ae1d4f514c7c2877e92cb17a09cd430c9ba0a17e45b150d6aea6bc16fb142f328f1d2cf2dd64d0d1343e
SSDEEP 768:brv+4UNbdQN3hP2w7DTd+ZuYsa3eX6+qTko0u229a4vsTzMgjZ:bbsbGN3hP4KvVTVKa4uMgjZ
TLSH
T14603BF32F8649DB789E6C684B10B76476F79216386C81B94D9DDBB8C015F0AC270FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 da33c5a38a57e1a75a07fa458893733b7b909b9dfacbf2d7ead6c8d2221eaaf6
MD5 89cf26cc10018db8c6c65f6c9f932e50
SHA1 ec7fbe762d108d26ced67131a3dd54ac2fab2d3f
SHA512 838f40475d4f998fb300a73a925323328bc6e9a871a515f60e55661ff7fe965b24737aa5be06a7c760f1b204fab68a9c45a4126780e86e9b1aebef4d49e9046f
SSDEEP 768:kY3cF2Q7DTd+ZuYsa3eX6+qTko0u229a4vsTzMgj0Y:kY3cFcKvVTVKa4uMgj0Y
TLSH
T19DF2BE32FC619DB748E6C385B21B72075EB96163C6CC6A9499DCBB4C015B6AC170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e0b6018d84e4524d01f17d73f349dd302c2ed8a8449be43cb1809ee785406bf2
MD5 7102015f9f548e7e7de3e98fe985af2c
SHA1 fc665e4ff47ca5a53fc7da6aa53fd658ac81e952
SHA512 8e94959a357ca9e1f30dc5011f016f560b6447c80aed0699323fcd304ac716c35dfd505b708146caa2299e45e777ee80ab54d1ebc990c6b940967f72155b8127
SSDEEP 768:UY3NF2Q7DTd+ZuYsa3eX6+qTko0u229a4vsTzMgj0Y:UY3NFcKvVTVKa4uMgj0Y
TLSH
T1ACF2BE32FC619DB748E6C385B21B72475EB95163C6C86A9499DCBB4C015B2AC170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ab7bf714d4478d40a8f5b171ee54ef7bec1ba6e6db57d621710ffe2de5d11aac
MD5 6665d691de46595b440169e67f7b26bd
SHA1 5b12da91d4453b80a0f3e58a5c4ff456e2361ea0
SHA512 7da0233127618e2f71aaf18399af4687df79d2fe4ba90008b4d704505b5073b601f5706f14ef08c1fcbc47e8dd579aba8095d94af917018ec90305d76513ccbc
SSDEEP 768:aFHq3fwgbF2P7DTd+ZuYsa2KeX6+qTko0u229a4vsTzMgj0Y:mq3RFBSpvVTVKa4uMgj0Y
TLSH
T18203AF33EC91CDB789F6CBC4B61B72079EB551A3C5C8AA9096DCBE4C115B19C134BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 b3e2f92b9201195712dce7172b4a2f1b9972d90ac34204b9b03563e68c83ec87
MD5 df3d07443ec8a6e35f7864609c927be4
SHA1 7f4ac232b8c51f4241b19808e3c7c5a08c27b10e
SHA512 e157e1c5016ace73e7f8e4461860c48a0d45b9ea98e931e371d0b6101676f9172bb1b65a98abe03bb93ddef7508f484848f3986e6fdb30117d50b688e8edf8d9
SSDEEP 768:xjN3hF2Q7DTd+ZuYsa3eX6+qTko0u229a4vsTzMgj0Y:xjN3hFcKvVTVKa4uMgj0Y
TLSH
T1DAF2BF32FC619DB748E6C385B20B72475EB96263C6CC6B9499DCBB4C015B1AC170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 7dd3ab5baf541b353e4f32258298022271709783ea51d66ea504ed79bc3c16d5
MD5 222184a548805ab3a4653e8dc11e90f7
SHA1 581825c955750b4cf723b731a46b3ce2b31f0971
SHA512 b1e92e44460093b6f89e25e3b4e93e6c7682ccbf19f8268e11ec7e30feefae4d2e6e1c6b4ae3285a4bce71160e2d763e2a76ac5f404e737bbae3e91b55edcffa
SSDEEP 768:aFv13MwgbF2Q7DTd+ZuYsa2ZeX6+qTko0u229a4vsTzMgj0Y:k13mFcSYvVTVKa4uMgj0Y
TLSH
T11F03AF33EC91CDB78DFACB84B61B72079EB551A3C5C8AA50D6DCAE4C115B19C134BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 47d367058ac9694f1f897aef3a6c8d762f0c45090caf54d0b328c401711cb7d9
MD5 d2081626e6b3ad523583dde89793ea9e
SHA1 32b6aedd4d30de8880730cdcf239b24d2b10007d
SHA512 c28c93a2e7b1fc8c27c94beb701d0edd6df33470a99f6795880ffafb177b6376d7ac64fc257f58d60c972b7064d7ac5a15cbd13e625d994c28ad7c037595a514
SSDEEP 768:prv+4UNbdG3KMlDTd+ZuYSeX6+qTko0u229a4vsDteVH1SdW:pbsbU38ZvVTVKa4cEH1h
TLSH
T14803CF32E8A58A778CE79784714B75472EB92163CB880B90D8ED6F4D065B59C230BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download