0bd848b5de06e282b8fe4d44572b1c39362ea1d095fc7ffa9363d8dca31a52fb

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_0bd848b5de06e282b8fe4d44572b1c39362ea1d095fc7ffa9363d8dca31a52fb.html
Size 9KB
Sample260913-a4ervsyflb
SHA256 0bd848b5de06e282b8fe4d44572b1c39362ea1d095fc7ffa9363d8dca31a52fb
MD5 90cc2e9378d84503fa15be4abb0853c0
SHA1 80b5fc544a880aed8f987720231fc473d822b1fd
SHA512 56105371a9deb48b05280ac72a71fc3ddd74781ca136291d2f7793195e940714a4b6fea3fdc87a45efeb856293211784f249259f35e8856177c57362efb2b7b2
SSDEEP 192:2iTJo0aZchcL9mWsrTEJQ7kkM9Ldg2ZUyP+fonodBiJqDbuM:paZceLwtkkn2jYuodBiJqDaM
TLSH
T10412D6131908C80712207159F927F28DD857E91DED5AAF20B8EB01A66BE2EE5CD37875
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4516	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338214236465010"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{21D90339-26E5-41F4-A06D-91E845C5E2B4}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3768	msedge.exe
3768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3292 wrote to memory of 3220	3292	msedge.exe	86
PID 3292 wrote to memory of 4516	3292	msedge.exe	87
PID 3292 wrote to memory of 1752	3292	msedge.exe	88
PID 3292 wrote to memory of 1752	3292	msedge.exe	88
PID 3292 wrote to memory of 1752	3292	msedge.exe	88
PID 3292 wrote to memory of 3316	3292	msedge.exe	89
PID 3292 wrote to memory of 3316	3292	msedge.exe	89
PID 3292 wrote to memory of 752	3292	msedge.exe	90
PID 3292 wrote to memory of 2400	3292	msedge.exe	91
PID 3292 wrote to memory of 752	3292	msedge.exe	90
PID 3292 wrote to memory of 752	3292	msedge.exe	90
PID 3292 wrote to memory of 2400	3292	msedge.exe	91
PID 3292 wrote to memory of 2400	3292	msedge.exe	91
PID 3292 wrote to memory of 4836	3292	msedge.exe	93
PID 3292 wrote to memory of 4668	3292	msedge.exe	94
PID 3292 wrote to memory of 4836	3292	msedge.exe	93
PID 3292 wrote to memory of 4836	3292	msedge.exe	93
PID 3292 wrote to memory of 4668	3292	msedge.exe	94
PID 3292 wrote to memory of 4668	3292	msedge.exe	94
PID 3292 wrote to memory of 4616	3292	msedge.exe	98
PID 3292 wrote to memory of 3112	3292	msedge.exe	99
PID 3292 wrote to memory of 4616	3292	msedge.exe	98
PID 3292 wrote to memory of 3112	3292	msedge.exe	99
PID 3292 wrote to memory of 2084	3292	msedge.exe	101
PID 3292 wrote to memory of 1580	3292	msedge.exe	105
PID 3292 wrote to memory of 4052	3292	msedge.exe	106
PID 3292 wrote to memory of 5052	3292	msedge.exe	107
PID 3292 wrote to memory of 804	3292	msedge.exe	109
PID 3292 wrote to memory of 804	3292	msedge.exe	109
PID 3292 wrote to memory of 3888	3292	msedge.exe	110
PID 3292 wrote to memory of 3888	3292	msedge.exe	110
PID 3292 wrote to memory of 3888	3292	msedge.exe	110
PID 3292 wrote to memory of 2532	3292	msedge.exe	111
PID 3292 wrote to memory of 2532	3292	msedge.exe	111
PID 3292 wrote to memory of 2532	3292	msedge.exe	111
PID 3292 wrote to memory of 3768	3292	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_0bd848b5de06e282b8fe4d44572b1c39362ea1d095fc7ffa9363d8dca31a52fb.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff85e7fc188,0x7ff85e7fc194,0x7ff85e7fc1a0
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,2344972704493039655,1949774573338061584,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,782580073898271241,6944330928090538677,262144 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=2920 /prefetch:2
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,7908258331856578494,7261423374627842146,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:8
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,7621375323560961487,13072324888064295852,2097152 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,4492992649552265508,16617714893380573466,2097152 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,7454478885841588485,8926964134027126648,2097152 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,10057349610029125514,515304294504210524,2097152 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,9351830021821090715,8597144466232828876,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17503835796210093492,9557032584086963007,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,10670856736029665472,12339974727071692135,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,10670856736029665472,12339974727071692135,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,11632297749351404044,1825487597258425701,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,2033677863554285401,13438093631455159005,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,12831853533780702586,7994608902819236252,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,17283199333293810979,17444137979241311220,524288 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6784,i,13804645054474640393,3145883296523483249,2097152 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7132,i,11273032024954774055,9594749121682082888,2097152 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4192,i,13386003285364394875,18199898247489231446,262144 --field-trial-handle=2924,i,9626183757725323912,2170677306015818224,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9e411e40b2b1e7f1576e6c2cf3027d590d4c5916b7a5e41c1a711f9117d0f1e1
MD5 f86a69ac894860b8a7e2ac52b3c2987b
SHA1 835d87e07bf2af2a2410d66f27145dd25efdaad6
SHA512 6de1915f0367b482a80195c1b703b1007a524ab2a6815670db955de8dd4235e1faa888dde7fcefe1ccbf4dae73b9d41563a6a2f7e5d8d75bf2ff9783b485b777
TLSH
T1ABD02BF8DBD88120F033383400398283308C660420061120A873114C0C441C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18eb5a70b8dc14ee5a30ef2a54b3e14abbda2b2d751a8e8abad286d8e92d8872
MD5 a2b3071ef6468d20d3499dac11b0df41
SHA1 e96a1ba764d6003a0c508557df66dec18df2a1e7
SHA512 144677b38dc2433c6ce2cd569ea8dac3d5f5013e173fcf4e0e6d6d88ad42c12001c58ec8fdf8229ee7476fa921cb946792037c4914570deac4969d9365895b19
TLSH
T113D02BF89BD88520F433383400388283308C660420065221A873114C0C451C34225868
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 169KB
SHA256 5214db8bbcd0f6850fe9f6b9ba5a712a08068260630938fb0f386e61fa7fece2
MD5 5e8ae8bbc0eefeae1104595e4eaf7e47
SHA1 f15ff44124c55acfaa86e72fc335276f5ae2983e
SHA512 83713df79e1e172d4492a87fb285fb9618de020c2df8d8501c7db2b9597131d2cb1134db65e795d69a785edf1c27b0820c2c110cb5ca11a231ed0c2e0c63ad36
SSDEEP 3072:KnxxzfpWo6I6nHCMJb0Wthxo+44o8D4KQsh99nh4:aXxkI6nHLJA0p4nkQ+9h4
TLSH
T18904125FC55F985651EC8283DAA53826C100F0C4A254C2B3AAD9753EBE8E58EBDFC302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 346KB
SHA256 06fb30c34e3d7cb64ec821dd7d1eee69613b4a84c3841c081dee7143c151555e
MD5 e4bc0d7ecc0b43b6b8bd71ed0d8e894a
SHA1 27776f4cfd2ff01e98221769cb4aa554a2670e6a
SHA512 4c0956fb89b264ceb8dcc20a8cf905a4ae784195e78c306d2c0577d2e4c0548b6058ecda0516a089dc97570864728ab60503bffd804af5d0934e5f9c8b1fa475
SSDEEP 6144:ZPNyy2q1x/xjj1YO1RKSXVSFAsamiA6r/dsaRDDQ9fSoA9pT1c/i:qy2qhGORKNARmiRRDkJIpv
TLSH
T1EB7423DE4C0A0C9960EAE1034BDF477B3A4A44E7E0C5EC52987C1DD26D9F2627CED688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 127KB
SHA256 5b2dd4d4f81cd1f52a50b0833ea12c8f63f2c4ae4d2c5a799fcc741feb2ea40f
MD5 3646a39b6ef5417f27519bada8bbf786
SHA1 9d95f6fe35540b602284c9f2bfa67d2b464448f7
SHA512 296fb57cfa9ed042779c87e6a4d7ce497373fa771a8569ff3ef9965665fc1914751f98f9d017c0b6c11730385ac8ba8c49331ea2cb5b7825edfc84a434a26e3d
SSDEEP 3072:3z881cKGXVE0mypqDZchZ/kWMi+4XR0mE8gtX9qQGBDwnWalHAan:z+VRmypUGd+CctX9g3aSa
TLSH
T1D6D3120E6B7C8C6F9851A32475CE4E5ACF6DEFCA6216CD35AE8C31E260034985DD4EB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
Size 88KB
SHA256 cfac7e376a23957758ca49b3f3e3c2414b264a70e96de0c354b4219e023c8454
MD5 dfb677ccae8fb7a3b7e8c9a89002f022
SHA1 db4fa78d5063bcc26ae33e6e74a70e477892dfcc
SHA512 c061fcbe3affcfcd94340f7bc2f2a9be29efe562da99da8058275cacc1f021ce2a21541fea98a3c5350b34b6f85876bab25980e7ee71f92048ba2688a53ace43
SSDEEP 1536:JmuocWtHSYIVUtamtB/v9PDdSlCoi+0TK2XMIQF338CJiYS4rBMcyfV4abSS/:JmuWtyY6yzvJd99sIi338yiYWcyfygP
TLSH
T1199312934D29E2C9CA8C1E1C01A2DAEFBD441C7914F2944B98D7DC6ED37C1E7708A6A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9f02af5e82361ab98b1b1b3c7dc4d7c7fa2ef3dc94f1077a3a56a2f89ead6342
MD5 72434863e3e2c07b637610e7c394db6c
SHA1 3337a798f1684df0a8a0ea081cecbc56dc636df6
SHA512 a66ab902bb8e0af10466ce9e9deef1c23796719ffd77dba5c13fe44d6bf13b57ef4142bb4038421bb87b637ebd46433da20af84fe64f99cff0533122193e2c7c
TLSH
T1FD51EA845AA4E070F7A4797992D1128F3E36A9CC86DF2DD10168C4B8FC4E39D83C007C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 cbbabba518051d8f85684ee1495094bde0af4e384814860b221f817336e431de
MD5 2fcb0c186c8c254cf3a072a22718ee7d
SHA1 5d032b412dc196096ac07ecc3f4427842b740895
SHA512 aca6835c097a4966684402ecfa118d9cee8100266b2ac131d497ba94bcbf5dec5034a6eacf7b23a5abee9c3b70d2c017e477e5268963d144a92d38121bb67274
TLSH
T1E251C9849A94A070F7A4397992E0158F3E36A9CC86DF2DD111A8D4B9FC4E35D838407C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5908a1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5908a1.TMP
Size 2KB
SHA256 8a07b47a0002390cecf4bb7639685688d2d32a912f892ea2e11c57a5bf5eab2c
MD5 a5790150d1719429808cb3e6d57f39a7
SHA1 2ba8aa683c9397af3dbe39b6f9f5cdccd01cefe1
SHA512 a43f4fc2a05a1ef3069a83f6a7c29f792c05232c0ef2af9f2a9ceffbb9bcf5040f56dad5f9f2680d78f70a0d22024c5671f0dc96c43f913433acde7beb82a7fd
TLSH
T18551B7849A95E0B0F7A4797992E0128F3E36A9CC8ADF2DD51168C4B9FC4E39D93C007C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ef27d86a6bf31603f08c7f3257d6486447998f8d13a4ce6143141bba28b07006
MD5 96451894007a2fb15ab707c336d6afa5
SHA1 f69621b5fea7f609a9a17bf7896d620147d55a45
SHA512 803c62fd076bfaf6add3dea23c15e904c3c1bf1f0f485105b68cc312f3bbfad3c7e361b26d322526108793d93f6f6ac0002d0ef0ade35064642d0982e779af42
TLSH
T1E651ADB6C2D4876EC81212F09B24BE2ACD1D065A42383C5689E5EF5F63F24B1E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9e15691df5035d418d471fffeeec305cb1d8c9365f88fc033839bea86cf3e159
MD5 a5407a877b79f919e2d28bbca4f7e934
SHA1 c3c21dfaf6cb2161e23c3969ffd233c0518891c5
SHA512 b4d92ca0b7403e804c436fb63d7ad7405db8bc791d282aaddc780763c1c3b7914e3526895a9a2f2fe1f0970c9b17718d36258a1e13a3a0aab9d2aec2d5f3ba90
SSDEEP 192:sxZZR7Wx/fLsZQohEdpdZHW6+WNGYapY0DIgrJ:sxZZ8x/fLsGzzHbGp9
TLSH
T13012A6526E38693B8CCBE21DBA25BF53E6F9503251D51E58EAFC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 43671a5a18abbe84dbe6015cb023e4997fceff6ee413ab68007ae55e51fd1ed0
MD5 19a63ea54ac79b5f57967a8bb0e0ddac
SHA1 280afc92306fc89c776fd57acbaa5d6c8731e812
SHA512 7f96b88625c37d96333cda63e1bce51d06563f8303205544a6458a79bb9454662947139b562a4c621f493a1717cd333fb3345353dfa58b4d8c1eba82a62bde9b
SSDEEP 192:sxZZR7Wx/fLsqAohIdpHqHW6+WNGYapi0DIg5tJ:sxZZ8x/fLsDVKHbGDR
TLSH
T1AA22D9566E38697B8CCBE20DBB15BF53E6F9503290951E48EAFCCA1C05E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 8823e1c0d52941fdf76e0fb664e3b723bf3c8967fe523b8b5da5bf6383eeebca
MD5 aebe3eae0c729080e4596d30c181ee45
SHA1 9c0f47c61021ebd1f76a49113298d41fd5b315e4
SHA512 8913683b2a0c6b7dfc7dd21eff009f622f8bb98c7a0e7e15839d36b3c1e814dd140ccb991d1ae5b946781428b6741c5659d306158a45ce7a10394374624dd10c
SSDEEP 192:sxZZR7Wx/fLsqQohEdpdXHW6+WNGYapY0DIg5PJ:sxZZ8x/fLs7zVHbGpP
TLSH
T1F422C7116E38A93B8CCAE21DBB55BF53DAF9503291D51E58E6FC861C04E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3ecf0aadd8d892608ba5326b1e3d9353d56cdb0372a2abdf43478b6dac92c432
MD5 adfc50a68a66c2f30919bb1464c8b74b
SHA1 fca5495327b1527da8c29a7378bc6e18da3bc26a
SHA512 e8e2c46ed83060e293be94b4ed7e6bb5388c72043ae66a5939637dcf86664f148a81a850095b243fa35eb06bf9c267b14058e74f1e4871961956f223cd23d44b
SSDEEP 192:sxZiR7Wx/fLsqA9hIdpHEHW6+WNGYapi0DIg5tJ:sxZi8x/fLsDMkHbGDR
TLSH
T19922C8526E38697B8CCBE20DBB55BF53EAF9503291951E48EAFCC61C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e629cf1e214eb528a46e952991fd5c1e952d38108ab2e2dfe3cdf3884f12ce7e
MD5 95fba2fb4c930035df0730c66637a254
SHA1 06f38c0d0f6c5310b0c0362a8f433e42c3f6acc3
SHA512 5011efba5e0a4629f577da002bab882fa1301fe0ee581638ff57aea34a35f9daa8e0bf48a9ef9ca6381707360abe8e90d0277fd7c73b8c5904a701080b8d765a
SSDEEP 192:sxZZR7Wx/fLsqAohIdpdAFHW6+WNGYapG0DIg5tJ:sxZZ8x/fLsDVAHbG/R
TLSH
T13D22C8516E28697B8CCBE20DBB55BF53EAF9503290951E48E6FCCA1C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 85c53a36fd4418842c87859c696dd234d1fe3c628c9c22bf128bb31fd01e2f9b
MD5 f31593666468badbd83f9c8407a7f6f9
SHA1 2017be56f550a53b9aad69fb685b81c362c6ac54
SHA512 6a4a43aa7bccd0b40bc53f9e56715be448f8008eab1727435130cd60e3e40cde45f9aaa9aac6e0549638452d239248c592018cb4a19cb4ec321001b2d5031bd5
SSDEEP 768:9rWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7ero4MfeUmRe:9rWPcLKWvKeEeu1jaClLiF714MWUmRe
TLSH
T17FC2EB3B640CCB7E5FC01A9DDC5A6FA77E9802C79A544D4047FE984C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 0f296ef5f784a8fc0dcbf47d2c336f841950bc3fcdf4acf903b0fd3455827f7c
MD5 e6ba10035f251aa71696f729f237b0e2
SHA1 46ea716f40e3ff7895e1c0cafc0e6c22dc1bb67b
SHA512 98f99c35ae5a69fe7c055c7645e79f4c72c9bfb4b9eeac9c5aa784f5e2730b2ddbbd8105dae6feea9a936c87b4b7f37e0186bee03d3aa5f87885789fef8e8857
SSDEEP 96:Kc0AKla+CaQKTSMr6KIIS6EwKRyTP+KMcag:SDPeJnvtg
TLSH
T1B5D1271A71BB032038BE284C91B5975E524231B33258E62BBFFD10B59D6EE484DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0457537-4a51-4d08-aeb1-804b42f7b942.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c0457537-4a51-4d08-aeb1-804b42f7b942.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 061d8fbb68254c82d41eeb182be773b8418b192869f515cdd57fe4d5acbe9bf4
MD5 10c40d92160ff5b38faddecf12f40f01
SHA1 664208b17b056cc9a411884948b3f37fd29195c6
SHA512 7e6737e8bd4793914bb51e0fd7c036aa93b4753f841a815a1b32fe69382c0b5f8d2e7b3e040c6bd4735c00a531566c037f4069ec4bd25a5c5d02f66ac0936584
SSDEEP 192:+LsN5/QMDUjZJE1hFEQmiU1RZL4zIGmAcjzor5RZtDX+97iv/OLqyIr:0sN5/QE1hGRUzIGmAs8PDX2iOXIr
TLSH
T117424B36ACB8AC2B5EA7A545F44B3A239DB84127D6C82F90D6DC6F1D00DE29C5306927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 35be063cd6a356663e76650d54d41f51125216bda670868f9436d96f7f499568
MD5 e9f245472265831e9e38d58a6d657860
SHA1 b4d7c50328b361f2ccb4fb276ba33842ac13c03b
SHA512 9474e1264f972f1ab8503c5b99e772443b0802904553aa5a64c306c078c5e3d05160b90d0e57f1eb4d62a3fb0ff75bea4623ddc40755668b6fcdacec2249ae80
SSDEEP 384:pZcISsN5/QE1hkZUzIGmAs8PDXRiOsa+VYHl9oN:hSpEHgOLlLRiOhgoW
TLSH
T1F9828E726DB8AC7B5DE7D285F84736139DB8806792CC6F90D5DCAF0D00DE2A8130692B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 067b5753defb1a277acc3914c985b87d38a96582b48b7a6be2d79ac8ddd1186c
MD5 07780d6043cdf3bf772e78118b4f079a
SHA1 b4a8c34d090c9891bfb02e387aad131c354ee0d9
SHA512 276cfffca8f968fbf9a08a9004b78ddd0636fecc6f7ad3d2b43dd6acabd7d5dd298cad6cdb8bd725a33926a65b57571d7c59064a2762ae256e97e78e9b6f8fef
SSDEEP 384:8iFiZcITAsNb8TUNTUlIlqQE1hkZUzIGmAs8PDXkjiOsa+VYHl9oN:nFQkSwgrEHgOLlLkjiOhgoW
TLSH
T19AA27D735DA8DC7F9DE79B85F94A36138DB84067C6C9ABA0E2DC9E0D00DA19C1306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8e18f6e0bcd5962a189721d21aa804e5edd732c00c5f2287ad93b98e9acf2e5c
MD5 52736164a62473ab105282b72833a0df
SHA1 445c8c0a3092eea49d84c758a0c9ecdbb91fa25a
SHA512 846a5a33a37e60a05e0f8b710709042a69dbb844dc645974acf658c6ddaa4ca251a5cb3349c00a1580dbed66a18550ebc5bb16fcddc0e02e7ca1ef5fd81f31be
SSDEEP 192:aONk6IEgQmiUy8HT0uIGmAcjzor5RZtDXs27Hv/OU6:aONk6DgL0uIGmAs8PDXFHOU6
TLSH
T14A120936ACB8BC6B5EE3A944F44735239DB4412BEB896F90D6DC2E1C01DF25C530A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 200aa9e3f5791c81b0c9a2ad3076cf953df0b8386e2f3532766958a98030955e
MD5 e54d779702aa67b674c80ca1597e5dc1
SHA1 39a1f3ed8d8d75b53f0483990400eb5572955207
SHA512 95ff8ae91301c691789b79601bfd030a5c7640a2c59afa6c6e6a1cb29e43a71cdb1fc3a3e7836ada66f67e2d426f85fb44d4aaa53048fafea8c3d90baf355cba
SSDEEP 384:WZcISsN5qQE1hkZUzIGmAs8PDXRiOsa+VYHl9oN:ESGEHgOLlLRiOhgoW
TLSH
T11F828E726DB8AC7B5DE7E285F84736139DB8806792CD6F50D5DCAF0D00DE298130692B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e91ae3bc670dab30ba00996d1dc76330f5afa4c4c09935921187f51a8f50c262
MD5 a83ac0e8fc35a59404065dcdf9076517
SHA1 ecf0732bfed22709db851f02c22f371c235938a0
SHA512 af9b35f3c0f97e8b44a5b843b2a65ab953207f4af0b49600825fc4bb59bc2c7bb9733c1e3f4a61aa33d80c0eff569b567e332178f502004024307d99ee8c53e8
SSDEEP 192:aONj6IE7QmiUyWHTPuIGmAcjzor5RZSC7sqeeU6:aONj6DtzPuIGmAs8RsJeU6
TLSH
T1F602FA35AC787C6B9FF3AD09B4873A239EA4112BE6952F94DAD85F1D00DB24C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0139a9cbdd71c87ebc3d0347e2065baffdb48d8295c56041de283ba9ef4c2d86
MD5 cb77aacad10c614efcbed20fdf28a175
SHA1 f558278d2c833dc87f8c0799c8102ebeaf2342ee
SHA512 70077346312ad6b5ca3efead85a8ddfc5aec1c90ebe46574b22c7da480ea69d51f08aa5b1e30a26f6c903a1d03c13ba7e037087df64621446fb01556dbb52ff1
SSDEEP 192:u/IsN5/QMDUjZJE1hFEQmiU1RZL4zIGmAcjzor5RZtDX+97iv/OLqyIr:HsN5/QE1hGRUzIGmAs8PDX2iOXIr
TLSH
T165424C36ACB8AC3B5EE7A545F44B39239DF8416786C82F90D5DC6F1D00DE29C530A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

49343f7a-671a-4464-9061-0305c472148f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\49343f7a-671a-4464-9061-0305c472148f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a09907171b3b62346c245affe88167ac8ec0c73c1f1616f01f7fc12178ed53e9
MD5 c89774b19891e81bb362248e222771cf
SHA1 6b8a13fa94c5275375ac61cd9040ccd28eb5873a
SHA512 83174b5d7e55cd7ff106db7a1fd38675a5d7a415d013444e44edd5bab0c2583da5d82cf9dcbbe99d2f3530110ff9681d3fd73ecdad128c8199b4be23eaa4e6b8
TLSH
T1B341049CA6E91148B3B76E56AFF7A86D487FBC372E06C49E10020D4E0A66F40D871737
MD5 SHA1 SHA512 TLSH

Submit Download