hxxps://bracket[.]email/signin/mgGvyogm/verification/LXasH9caEME5yP75pN7rksor?continue=hxxps://bracket[.]email/message_threads/21716776

Analysis

user interaction
yes
max time kernel
144s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 17:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bracket.email/signin/mgGvyogm/verification/LXasH9caEME5yP75pN7rksor?continue=https://bracket.email/message_threads/21716776
Sample260908-whbc7swdla

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2808	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333637016360698"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{9FB93662-58C7-409E-AE9A-1741A3C1C4D5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4264	msedge.exe
4264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe
1140	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 2904	1140	msedge.exe	85
PID 1140 wrote to memory of 2808	1140	msedge.exe	86
PID 1140 wrote to memory of 4124	1140	msedge.exe	87
PID 1140 wrote to memory of 4124	1140	msedge.exe	87
PID 1140 wrote to memory of 4124	1140	msedge.exe	87
PID 1140 wrote to memory of 4980	1140	msedge.exe	89
PID 1140 wrote to memory of 4980	1140	msedge.exe	89
PID 1140 wrote to memory of 3696	1140	msedge.exe	90
PID 1140 wrote to memory of 3696	1140	msedge.exe	90
PID 1140 wrote to memory of 3696	1140	msedge.exe	90
PID 1140 wrote to memory of 3316	1140	msedge.exe	91
PID 1140 wrote to memory of 3316	1140	msedge.exe	91
PID 1140 wrote to memory of 3316	1140	msedge.exe	91
PID 1140 wrote to memory of 4088	1140	msedge.exe	92
PID 1140 wrote to memory of 4088	1140	msedge.exe	92
PID 1140 wrote to memory of 4088	1140	msedge.exe	92
PID 1140 wrote to memory of 2864	1140	msedge.exe	93
PID 1140 wrote to memory of 2864	1140	msedge.exe	93
PID 1140 wrote to memory of 2864	1140	msedge.exe	93
PID 1140 wrote to memory of 2416	1140	msedge.exe	97
PID 1140 wrote to memory of 1156	1140	msedge.exe	98
PID 1140 wrote to memory of 2416	1140	msedge.exe	97
PID 1140 wrote to memory of 1156	1140	msedge.exe	98
PID 1140 wrote to memory of 2616	1140	msedge.exe	100
PID 1140 wrote to memory of 2072	1140	msedge.exe	104
PID 1140 wrote to memory of 1116	1140	msedge.exe	105
PID 1140 wrote to memory of 952	1140	msedge.exe	106
PID 1140 wrote to memory of 1888	1140	msedge.exe	107
PID 1140 wrote to memory of 1888	1140	msedge.exe	107
PID 1140 wrote to memory of 4576	1140	msedge.exe	114
PID 1140 wrote to memory of 4576	1140	msedge.exe	114
PID 1140 wrote to memory of 4576	1140	msedge.exe	114
PID 1140 wrote to memory of 4616	1140	msedge.exe	115
PID 1140 wrote to memory of 4616	1140	msedge.exe	115
PID 1140 wrote to memory of 4264	1140	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bracket.email/signin/mgGvyogm/verification/LXasH9caEME5yP75pN7rksor?continue=https://bracket.email/message_threads/21716776
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff8f47ec188,0x7ff8f47ec194,0x7ff8f47ec1a0
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,4699075027415256012,5645234647439874043,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,11003363885697021220,17108863746930002681,262144 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,9579714150470714013,3307680029081572403,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,10399229968852563274,5382406627202477321,2097152 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,10233708524080209461,16057227412753337913,2097152 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,10187214630463030367,14341417748066989267,2097152 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,18411562585935689207,425862116337991065,2097152 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,8572737900709330777,17667460478649564169,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,7121423123296077457,5615262911137424562,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6700273588295274907,13789010016558815256,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6700273588295274907,13789010016558815256,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,12747454563364634167,11338937425407818711,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,1890685941315470252,17689831736013850764,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,4608831692575861058,10229680209694677734,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,17730032009435391833,2717470043973745476,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5756,i,2071388221696063142,8110232197299137339,2097152 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,873711097724981869,8759849146693897037,524288 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6724,i,12440070659326574872,6192328970831124657,262144 --field-trial-handle=2368,i,870637541187115173,4966790483510425493,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 32KB
SHA256 61756b194272365cfda86055976a26307db172c024a476b357816e2a43527731
MD5 3ba1482ec2acb4d03b090c979e086f32
SHA1 b663b5839b2fac7ea1249e5d6b331c67a90fe779
SHA512 9fb5a673f65b2f227f9339bac45325cb332667d84d0019857c559be84953ca7f7ece0c17fa94a69b74bc6e28024dc0d77393d57a212a7399370c7ca8432d3c60
SSDEEP 384:ouLAmEwX52yxOa/5vp4PdL5Ck65pvxYLUNRpMQLoyh:ouM2X52yzxClLUbv64NRps
TLSH
T18EE2BE1ABBDA69D3CB7607BEA16E7FE342B645C16D9820C72D018F60C644228F90739D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 16KB
SHA256 fc3977d2d169c184516de314eb5c88d748396839ae43c5ac2db9afb618a0b059
MD5 37f3872114c77170d343b701cb02f410
SHA1 fe0e539c1ed0b83fd989b801d65eb3021ee52e34
SHA512 4e13707040aadd14415156d90c90c2846b776260d285ad38309af4bebedc34dda744d3df10ce38a2440a8eeea29b46d4bf1cc4349681090cb9f7376eb6cf7f18
SSDEEP 384:PmiD7L/vPiOI8bjwWIPACH+XsqCkdYiZfVa5Qrjbp+:PmiD7L/vNIqwWIFecKd1Z4mrHp+
TLSH
T16772D0CBD6BF53638F5C4600BE18D435A0A7A3DF036CC84409B9669B2A11398CAA3A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 38KB
SHA256 81d31e9c4319d22ea9bfa38c8ad20ce7ad52b56564a9d63fe62fe95a1ca71828
MD5 0ea6fb47748fbbd55fcefab807943aa4
SHA1 fd6bc09f7bf6f9543538e5f1e8794e459c4615d7
SHA512 84f9951c1a7162c542f2944b320b3ac5bc8839a0c093bb75a6e457b7bbd3d4a41bbaf483ad660d05e6e138fe274a32e7a7bc873838a67f4c5a41eab817295d54
SSDEEP 768:kY4JsMd4Pb354KT2MEYTLHfMugXEYOF/756QXV5RBI7dmp2i2oz6Sx:kxajF4I2M/f/rgXEYC7zzOmpL2c6m
TLSH
T1100302667269BAC071FE8F08C6B010BDD556BB8574A2B0F010EF2117B6836E48B42F3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 16KB
SHA256 9a4447bafffa7f28d381ad5718f011c7f0271654f6f4627c73339e11bb441de3
MD5 97e613d78061090d61cbcf90372f1ac5
SHA1 86900236e94f716a7c3adc08e362329b60829221
SHA512 7b8c594c17bcf2d708ce7f94a34c231b4003a1b176d47a991f67cfaf35f304b63089796e1d5e834e3ba9327fd2b336a69887e64929a8baec60ffc1bee8029146
SSDEEP 384:WIdbkdz44nsteqRGtoxSbDunQ+32pFdSLgk:WIdbkdz44sTRkJGnQk2c0k
TLSH
T13772E0FF23517938987BD9913E7E39C2E5B43EA3C0112EB8F225C95B4338BD9615A510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d007a53ea0646c00aacae368f6da2068724db103e1559a3ed56b3236e0316590
MD5 523f4374e822e6f25f1346c67b379799
SHA1 5ca73d396cfc3153f66e7f8210bfae87d25a1f40
SHA512 4a893e691b054208ef9051ba6e8e3481be3ffb4318dc3eb4ff91b10ab6ba83cbb475ecbbe55b21bbc602ce323480e10db02248fddd8bc8e4956f80d136c56029
TLSH
T1FE711C303642C4ADE343C131B8D286F370336DE9F82B5E7001985E7529A5F528C1D6DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 4d564b3c677e70e2fdf0df013f790a776a9cd84bad1c214a889ea3bb40117b9e
MD5 298b39c321697742c9b0dfee21aa13dd
SHA1 47daa8f785715fdab4641b4e29b4924fafdfc85a
SHA512 f37e0db71a322ab1587932a8c2b2554d84e8c05cf523a535eb0af865b32ebe21790716a82f38ec5d9b0860af8f385cfc7545768aa8b4710e8259a6b503c09b11
SSDEEP 96:xdIw/UPgM8tDbX+v11Q69u6MlmHdHSV+hMo0i7cXDXAMrKUQdEY:D4otRXGQQklWm+qoD7Ycos
TLSH
T192D1A5B02281C49CFB52D03578897EF335375DEAF49B1E3A419CDE355CAAB824C2C298
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8b0114488d0a0a18396ac96d774dc2012fc5f213f3a83a9607406d96410ab734
MD5 8254f716017597f5e4ce08f66bf6c830
SHA1 2801007c5b987bb1e3e8452d86f66b0d149400a0
SHA512 dccb4ce9920e3b7b9125fd6de32b7fbf96c098cdd6e3b658b1f962d88046a635cece036b8cc033e9826a77a8417f9970d499690d7867ba80b2e9eab127a68bcf
TLSH
T1FB710C303642C8ADE353C131B8D296F371336DE9F82B5E7001989E7529A5F628C1D6DD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 0694d2a6c37e098515f4865dda722254cd3ccb2648567587dd4998e080c374f2
MD5 edc7d23b385d73efa5aad326ec6d43cd
SHA1 f10e0a69c6559193c72de3a682cdaa5c1dad6040
SHA512 c146dcbd60b26a4ea45f2ae479a88d1807fd00e3ef0fa2999731908b6dd133d0ace955dd7e92a15a0b2ed8386d02cb9503333bfe4b8e0d15d5b0cd6e00eefc80
TLSH
T13F31AEF7C3E499AECE1156F06A246E2BCE1C0506475C7C1A85E4EF17D7E2476E001A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7ec8fd4001d7b9dd4e75691bd99246594dd63c96f7c049d2c67d1e6e22ea2afd
MD5 467982aa13daab25e2922d8a6f19fcc0
SHA1 dc38306231b85fa0a2c46f9b2f360ed7de13eea3
SHA512 6c126437365b576d844280f715990c7fc6922603a7c7551553ea7344ed19501c77995fae0c7bbc29b157cd121749423fcb4726344501bef972d7f68038e4b0b4
SSDEEP 192:sxZ6R7yM/jK1Ml8MkC/fEs52EMIdpplHW6+WN+Cp/YIa4k+gIgrJ:sxZ6bMC/fEs4EVrHbV/W59
TLSH
T1AB42E9116B346A7BCCDBD209FA557F53D6F91472A2900E44A9FCCA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 982d504154c29a93ad03fda7f2a083c9193eba1fb7e4aa63092bb8d9d285671c
MD5 df1234a8af36f47991c03e056cbb6973
SHA1 2ac596e1c074ffae24ff011946ed5f7823935289
SHA512 3c7271e785926aa591c4f2c766c1aee1097750d02315d0657f255910e67419b5e96123693bc1e58af93bf9cd1a3e91f54568be5f872b2e6d63b24ab6f31d5dff
SSDEEP 192:sxZ6R7yM/jK1Ml8MkC/fEsNm2eFIdpplHW6+WN+daXYI1eok+gIg59J:sxZ61MC/fEsDe2rHbnXrG5l
TLSH
T18952E8116A34A97BDCDBD209FA45BF53D6F51472A2901E449AFCCA1C04E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 ee60484ca9c5bfabb3b1b404542b6bb116b962cdb32ae3adaf1a669b61e6c872
MD5 6db024a2bd9cb784a05554332af0ec56
SHA1 deb934d0bdb9863c01496e3a8d708552ed1e6310
SHA512 90ccec31faadc9768dc29219607a76056e028229ebdaff43859348368affacdae14b6f7710fdcd0c67a0d55527e0c96580a1c8ab0b96a152e8df09434192c886
SSDEEP 384:sxZD1qNOC/fEsDeUrERAtHbnI/O5l8GEw:s7kQC/fbeUrPHbaObWw
TLSH
T12182D5126A24C977CCC7C509BD757F52E6F814639E514E8C6AFCC91C04EAAFE221782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c65afbf5881f4aa290640a9757ce83910bf5cdd268e6d342883ae5d38033ac7c
MD5 061a0d6de3d6dacf74a0d7035eadfe0c
SHA1 7413beef54ee53d2d3d293fe8396dab083a009ad
SHA512 60f77f38736152daa8f8bd0c47ba4652b77ced0057c3d6579529b4f5ad881d3447ac728d3b69a812df5ecf241a500acd1f77be98b46447d1c79def2f85427677
SSDEEP 768:8OsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9rroOvp:8OsqxXlWvJD6Tu1ja54LAs9YOh
TLSH
T125D21C3B694CC77E4F840E5CEC26AFD76ED801CBA6988D4447FA884C03CB2EA51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 cc72819322fab37db2b23178584f4c6f637c4a3bbfc5f787df01318b65cc363b
MD5 ea81993750b9a4451a55e30b77ffbdcc
SHA1 bd8a2eccc10c53b84428bc5360c554d3cfaaf3e0
SHA512 f88f271249e2221a35168c655e93503031861a674ee59aac8dc86149dc71e3bfbe07992e1235c6986923b18b3b4ccfddb9f37447d06bcbead12719e8e7b13cb6
TLSH
T1B3A0021682D00561F84222B636AA15516734DD104201538B41DCD244FD669497F4A20E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a18d9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index~RFe5a18d9.TMP
Size 72B
SHA256 ae4728457ba9ef88b82ac8218cc79d3e4e35fe4c998f275a56449456f257ee02
MD5 2a182ea53894945cee3fc8a7edfb21b3
SHA1 263cda74fa99c6a22e788ade287f16454ef279e7
SHA512 c2fffa8bacbea244adfa6c3a845003f960d4d93f9b39cdb24f00ebca84ed9b766e507847c1604d1e9eba4840916648389fa26e88677c4c8dc5118dd3f982b304
TLSH
T111A0026003998005D05211B2AED202953B41C9E56150130780990454DC905A05DC121E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 3KB
SHA256 abe045621ed5c84cbbd5e2499a6d30e22d59b7d0739177b1f1752272e7ae4a87
MD5 25e54dfba3ed5dfb0f950542a6dbe6e7
SHA1 6ff24a95e450041002f888b5f22991552e0202b0
SHA512 e4a8f66f24a6ba2e152f7b5bd8542f8be8f77bfea98f41b3b0759b53454fe9b5a82b5f5de28d86008fdd5961fa48051d207a30a3cea92f437c2022ebcb0b02cd
TLSH
T14351C70E0D130B66FEA8127214BA189637B8B1CC13586D1B95FE9130FCC3B68AC59268
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3394.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5a3394.TMP
Size 1KB
SHA256 d567a85e0c08723153f092ef4141dae36f2be2bd8557f84bb6779b6bcbfdc471
MD5 453c6031ec85566a0fbdc2c17a5ce034
SHA1 6d594295f8872dfae93aff825b8219fab77554d4
SHA512 c1c205c99803e6f3e16977a9a4798be12ef0e46cbd8509e5f6343e67a8a0e0a9c447657aa7b7139fd5d471c3bab2f43e52481caaeb12b555aebfd2a2f142a9c3
TLSH
T11421408A46924A0FEDE040B60147B4F43370C900A322B3839839273E5C3879D5E4B1C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 708ef9fc7d5a82150951561a998fb187b0debd3f9bce80edea798b9726b2a96a
MD5 5b4541fcc4cdb3ca90cee2fd85b9a489
SHA1 22c3afa2ce24b0b57e07f9a3766a2e6de726429f
SHA512 fece24667168798220424a642727133f276793633ad177319b04476ecd7808159031c27ed4d75b938d39e9840611f823c5a9b2c1f2a206bd7502c27ce125c729
TLSH
T1E2E06FBA2AE70C00ECEBC3EE08B244AA0400F828C891EC4F012A928314622A02826C26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 55a6274b615b69a2ae74be02e7fb560ba2a6fa2e018ba17c0434bafd59a7d7bc
MD5 77627a53d81cf86fbc85eb6a9ba0dd7c
SHA1 e8dba6e4a6df2a74e1876371179217a14286bb16
SHA512 c2a2fae623a8fa64cc94ea01280c0331fa7113a53969c984e0681ef58dda6435fc312937710923fd7faec9b68d6d8db1a0f2255b4aac19a80915dc9dbb012a38
TLSH
T126A00210C98E9515C90686F114F962503750599B4907120D74ACD0ACAC9154051C13A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1a01.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1a01.TMP
Size 48B
SHA256 9abfd443324ba503e930ab2741b5bc7fbdccaea12023d3ea4ba2bd86b84aaafa
MD5 d8d4b1a6ef01bbef137e8afaa564394a
SHA1 e5af74f3671ea4332bda4b4dc84b179ec844af2b
SHA512 08efaa2404ea1f5850566df46a7d52968170f580097d37b5e5cc72b3f78ea9f713d94b8efce6484ba37c4a4cbbca58fa395da3f1be731c9b0070711ed9fc778f
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 cf2a05ff3b9eda489cb1544bab956ccdaa60f480b84631964bc86acc6950d18e
MD5 8be668d237a0113c16bf231cca8955b9
SHA1 7cd4ca07e011c23f2384ead354873074f1d9389e
SHA512 d6c00daf1ba2a061dd54a6202ca7654f09eedfb85d511964417c5b15f77e2ab0a0dc95306f6dfd8a19b6c8d2534ffe2e96fddf5c179f7d3e6a4492f90207a122
SSDEEP 96:KYbaKYIKRktgESKK+Ea7lCk+KqLCe+mckDO0f6KQK/6u6ucKnqMz:ExV9/7PX
TLSH
T167C1031A71760A1339BD3988B6AA86361F4136733018B46F7FB840614E6BE225DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 530091a4e26af835be37b709837f9f3f90fc68b821c6c89d9c26b432c69285df
MD5 e490f01bd3feb25312d0cc2eff6e1476
SHA1 cf4d6cf916953b27ca4b258c0522f2965353cbd1
SHA512 e3dcac56f820640cbb6feabaa38d6fd65185938260e195ee9300f5a330da2578c89e2b8d162ee3b4783e161fc2cf074a62fd59a56c56524a51109b5b68d99918
SSDEEP 384:EsNfUvLcbkvIUoVRN5dc5sJrW7xuvzxV+MhdpRGP:EslH5CmhW74184pRI
TLSH
T1AD626D357C386C7B5DA66142F88736134FB490ABAACD2FD4D2EC9F0C01DA29D130AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 2afb46cf9f7c5b98528b88a860207146862147c9e6cfdfcf380181d2c394db68
MD5 fee201f52bcd0140271b1864461d5242
SHA1 a8f66ac7019352e37ec37a7ad6cf96dbab02bf46
SHA512 f2355a18c454d263de8f022447dd3bf1694707ef3fe25b70ae0334f1e799d113b16b9c1bda6e241a37f5e611f00c31d3441e5faa6d804dc521572d735ed95a07
SSDEEP 384:4qZcIqsNfUoLcbkvwUoVRN5dc5sJr57xuvzxV+MhdpRG9o2:bqllH5Cmh574184pROF
TLSH
T134B218F158E71C7AD8AE5303AB7E2E034EBCD06775885A40B3989B0CCC9557FD306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ed198197931b0a824fa345012b642cb9a1db44b6de19d4989819d2dbd00344b9
MD5 5bb4e6afbbf4861e82981830fbda4675
SHA1 64306ffb4a19da365d062be7767a9b8b3770df73
SHA512 bee2e2876dea849c4ed5e6bd4d7b832fe1d5a313cd532dc9ade6118d0a9a9a74deac1b829de1489ca65d701e73dc7077e61038efc1fe1412c9a431d8a5c930aa
SSDEEP 384:oZcIhsNfUoLcbkvIUoVRN5dc5sJrW7xuvzxV+MhdpRG9o2:Wh1lH5CmhW74184pROF
TLSH
T18D827F716C346CBB5DB6A146F88736034EB8D067AACD6F80D1EDDF0D01DA6A5131AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f55801d403ab8f63df3b7207c006db186c4b0ea8831f8069dd2ded2cbb4a6e64
MD5 b1fdaf3a7916e97e651d3a4de312d8bb
SHA1 4cbee46d50e248af9581209a7ff2f7964d08c23f
SHA512 fbe4e133d07fec98ae8ce3ecfd5ba638a6f4b11253b7b9173c97a6c76f3a3283e8ed270c42b47b588f10712dd6ab75e4bbda4a0b1f235a5605354add1c0984d9
SSDEEP 192:3ONd6JkRgcMQmiUyJ+JF/cY+RNW+Fd102o1U2tSJriKVcAqCIU6:3ONd6UZcpUY+RN5dc5sJrg7U6
TLSH
T1EB121A35AC385C7B5EE26946F48732175EA49167EE8A7F84E1EC5E0C01DB6AC130A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ca4c7a6b45d45887d8418ac4f24c4e23ed7fa84a6d7e1d24ffb87f48fd1068e
MD5 e468d0506b8ddd50c776e77387c82197
SHA1 319ae0ce9ebd60b39f71889421e6db9e1451cd81
SHA512 7d33951baf501b96de78684f492eb12d6d7d11aeb6a44633188bc3b7dbdf9c8da821aa1e4747a6343d9fe37ba4a5185d7680c8416f7d40713dc31c3e66e44197
SSDEEP 192:tONnm6JkRtQmiUyJ9JFW+RNW+Fd102owh3kRJ7U6:tONm6UrAW+RN5dcQC7U6
TLSH
T15302D835AC382CBB9EF26D0AB48737175FA4217BB9962B80D6E81F1C01D765C2347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7c6cbd0e72e5bed38f2097ae10952c400cfdb11da85ef13f6a53ab549bfa890e
MD5 1872ae7fd03cfa027e4dcd034d04df61
SHA1 40b116c47d2ae09894b4d051c67a98a7397d3eb1
SHA512 64b220764f6b4b9b012a2fcbcf5e123af6a04013eca4c02d1e5bd05a8b215548576faa05ebf2c3f752c7a6af94b26dcebf4a17f4d05c41c3982ae8950cc49e91
TLSH
T1FAE00443D31000D5C03407700443171057FFC03001410347DD3051543D117401D10540
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59d528.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59d528.TMP
Size 392B
SHA256 2cda2da5b9e50a12300193ac56603c23574d1955df2086e7be44795d03d9b905
MD5 17836cb72d5468dfb4a161536d517f3e
SHA1 61804f632a3496d01eca0253a03846df1a456243
SHA512 f02057fed1c70860bbb9578e9a0146489c88e2f8e5325d0f50bf5aefb1deab1d04b5f68abc0734ca6344e4d40ddec2f05ec9f1274a02b5f84f94ac438b6da56b
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3980493c5df81a9e6d9eda29a969541df9dc009dab1e38873e8fcc5e8aa73d70
MD5 cb5bf92129a1e3b961270d6c86a32c8c
SHA1 50732f331df139c5b890e152f46ecab72230c734
SHA512 e881fec87d447992742b91dcf73828afa9dfce9eb2e903e79f969a44f0e999dfe8a4e0eac3490d72b750822af140642daff0c61050de1321422292429b8085dc
TLSH
T14441F858A6FA1148B3B76F5AABF6A86E447FBC771E0AD46D10110E4F0662A40C8A1737
MD5 SHA1 SHA512 TLSH

Submit Download