hxxp://google[.]com

Analysis

max time kernel
898s
max time network
738s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 05:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260913-frbsbstycy

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4316	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134337872103485358"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{62D16521-2BDA-43C7-B4CB-AA0EA9D26362}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe
4492	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4492 wrote to memory of 4532	4492	msedge.exe	86
PID 4492 wrote to memory of 4316	4492	msedge.exe	87
PID 4492 wrote to memory of 2504	4492	msedge.exe	88
PID 4492 wrote to memory of 1296	4492	msedge.exe	89
PID 4492 wrote to memory of 2504	4492	msedge.exe	88
PID 4492 wrote to memory of 1296	4492	msedge.exe	89
PID 4492 wrote to memory of 1296	4492	msedge.exe	89
PID 4492 wrote to memory of 5624	4492	msedge.exe	91
PID 4492 wrote to memory of 5624	4492	msedge.exe	91
PID 4492 wrote to memory of 6112	4492	msedge.exe	92
PID 4492 wrote to memory of 5624	4492	msedge.exe	91
PID 4492 wrote to memory of 6112	4492	msedge.exe	92
PID 4492 wrote to memory of 6112	4492	msedge.exe	92
PID 4492 wrote to memory of 1984	4492	msedge.exe	95
PID 4492 wrote to memory of 1984	4492	msedge.exe	95
PID 4492 wrote to memory of 1984	4492	msedge.exe	95
PID 4492 wrote to memory of 900	4492	msedge.exe	97
PID 4492 wrote to memory of 900	4492	msedge.exe	97
PID 4492 wrote to memory of 896	4492	msedge.exe	98
PID 4492 wrote to memory of 896	4492	msedge.exe	98
PID 4492 wrote to memory of 4168	4492	msedge.exe	100
PID 4492 wrote to memory of 4712	4492	msedge.exe	106
PID 4492 wrote to memory of 1440	4492	msedge.exe	107
PID 4492 wrote to memory of 544	4492	msedge.exe	108
PID 4492 wrote to memory of 5396	4492	msedge.exe	109
PID 4492 wrote to memory of 5396	4492	msedge.exe	109
PID 4492 wrote to memory of 3368	4492	msedge.exe	110
PID 4492 wrote to memory of 3368	4492	msedge.exe	110
PID 4492 wrote to memory of 4864	4492	msedge.exe	111
PID 4492 wrote to memory of 6124	4492	msedge.exe	112
PID 4492 wrote to memory of 6124	4492	msedge.exe	112
PID 4492 wrote to memory of 4172	4492	msedge.exe	113
PID 4492 wrote to memory of 4172	4492	msedge.exe	113
PID 4492 wrote to memory of 4432	4492	msedge.exe	114
PID 4492 wrote to memory of 4432	4492	msedge.exe	114
PID 4492 wrote to memory of 5444	4492	msedge.exe	115
PID 4492 wrote to memory of 5444	4492	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffca742c188,0x7ffca742c194,0x7ffca742c1a0
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,12303422504194101382,2553479826340282831,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,12886794082610806146,7304924673807561419,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,17532583776112628764,5392788008694779327,262144 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:2
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,9246714659285432417,9242793491175015022,2097152 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,11473879963048666999,17401500482756153384,2097152 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4972,i,4415775700886711590,2773851428102044031,2097152 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,10344811463954915320,10233495475272489548,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,12589336456973585182,6091217864189952560,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,13261940970846417572,17447380396585007647,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,13261940970846417572,17447380396585007647,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,6376358608068657664,5082370871133653287,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6134845793188054260,6771259580208879550,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,17732575578152503219,4905544453159166148,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,6589908093270256333,2381346756327128400,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,12151540068026226635,9174693179718982998,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=784,i,3759498167356524986,12016361091920325385,262144 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,9914393048620692249,3390412619588167930,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,15556640112820598774,17845386932464964563,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,4835400160618139150,7544466563145049741,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,11836484423532415394,2977229556076132900,524288 --field-trial-handle=2392,i,14907067537759000901,12596889022513042725,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:5444

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 536fc1badbbc4b718dcd49d9fbdab8a4753b19c43488dee316aed79e4a98df8c
MD5 1fd7b81f381d4cb4365c4d10003e42a6
SHA1 81944efe164639b5082cebfcdbe8d218db30e746
SHA512 ab38b5e8fa35db751a25fb0e527272d0bfd6d76ee7fd57e25aad320339cdb9b9002a3170c88b444ff5367577a372bb6566b4034a783556a1b5b86ea290fbf68b
TLSH
T11CE0209549C5C31D7250678742AD770C8191370AE7CCAA071F548CC67081180A7E2550
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f157ba2ec51c425c96c066c0ecb3d1dec288aa381c2672b92312d62d260a9f16
MD5 6a20c0bab2c1fe91272098012723f609
SHA1 dfd2be9dc36015f34f6bb334944923fe473accbd
SHA512 5468079e3ec9472cabc0f7a6eae046d3a2f1e544634316760b5076c29dfb1c03e49365be4e29bb7d0edc63013171c9bee4a11d7dcc1733109b75c3b3f9383b4f
TLSH
T12CE078D407C5D22D714865C783586B4C8381370BE2CCAA173741C4C571C315176D3560
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 818808034c2eda0caf1a2bd122b3ff638c522a646718bd831ccc548a6776eddf
MD5 5300c6c7fe82c135e4382089f030df33
SHA1 40c8ade0c06a353dd6bf157f2cfcba45b43d699e
SHA512 a9cf4fe18ca1020bc1a7b5c0fad44b44505b00d3d3005a773544cfb7523017ebb015addc45855b35ad934c730a1727158476389a9d2b0ccf16919e43c94dc33d
TLSH
T132E0208709CBC76D5144BAC741765B0CC292374BB3CCEA45274088D970059507A81951
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 328B
SHA256 7cee00d9cf1431a9ed1f501e95b6ab213c14902cf09be014865b01098b6dcef3
MD5 5849a71914dd901b51549b40d114826f
SHA1 41f6c344d6fb2d2cdf0ccf92746707cdae414c84
SHA512 60dd41a6bf025802d3dbac2ce99460ea6b1fa841ffb8d16fc5d37810870d0304904323bb6b4e3c4f8f8c3705d5fc9a3d458552250311b0fe6caaa7af32915aaa
TLSH
T1B4E07D8407CAC22EF29076C783FCB70CD281370AF2CCBA0A174488C8700565CB6E36D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b27e1cddaabfc7960ad62182c9290fbf1102f29dea3089e6766135c93e8b100
MD5 30c5dfe91b563eeef443da7cae9e7496
SHA1 6b2877685e6199aea371dfbe5ea75fda25d25f1c
SHA512 2057dfe19d994b7491c75c4ac739b3c8c2c748762425c012d8792488c77604cd73d247b09d9d758daf7f772a36e3fd7175403932e24b3ed4589e56dde5bed88f
TLSH
T127E02B6AC911EC3F08FD0B7954940745FB10236B2A419C4B3B3E81188FF55364599C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0f9c80d9f9b3d9f778173797bbf4e29bb8ab91e8d24af3066b53d9294ee28313
MD5 30ef08ea7fecba7dd1a53d8d70811527
SHA1 8e80809e24b712bdb101299c7650515903338115
SHA512 05a4fea56b22a60df85d4dbb60684b81fbc20ddc6177a63ff359a25c8f5198474e014fdd4f33624b55b37873472b3bd9f717163ae5e5f7fa9d1531e55e2a3aef
TLSH
T11F7180888C8970D0F3AE10F4E9F5408336B46B7409A7AD1306D2DD7CE467BB5935370A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594d2c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594d2c.TMP
Size 3KB
SHA256 e36c4a5a4316c230c035e550b0dc56ae1a1d069dbfdab7d303ed30ba58eaacfc
MD5 954dfa94b22bada244d89d1f7b11d141
SHA1 cad43688786353501c9f349e6913162323ea34ef
SHA512 0555c5febe4e5850c17a1c2ca7d7c71fb8cf3f52902252f4f702b9742eda56f1361df2a5906ad692f18c8c2576d695a6585d032160c5f9583ce7ffcc8426cd29
TLSH
T167615E848C89B0D0F7AE50F4E9F6508336B46B7549A39D1315D6DD7CE4673B4931230A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a68e7df421c65eb18250d20dcefffa5802e171b759c555e949029b53033a11b6
MD5 edbc7f2e5ab5b2f144d0c3812dc12ac2
SHA1 dd5aac98c31eec0d4fc63ef254a7a364449ec3b6
SHA512 bf3cd31a5d4e661ae6838346873da57389930b6db29726de2c2cd7eb9da6d7f7bd6f76a9863dc64f864ff73cff4b2e6a62efba9868ddc8f46c57c94f8bfba867
TLSH
T1AA8198F783E5822DC90196F09715AF2FCE2D0614432C3DAA89D4BE67D3E2472E11675E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 d9642ab1fad90f62d55006d38a5c09d1df4ee81aa65482ac8237c1a6b7724a21
MD5 a2dce1115af294f48c26b256b5278425
SHA1 f734796a3bf2135092b7c9810117b656e2bb7b96
SHA512 6ebb30e447a75a1ce3088ee424f247d895a8c2bc60f843036bd1ee755e471317fd5dfea8fb0a465da9d5a7ccadba26e0ae3ff1a03eaa06a893c6cfdb8dff14da
SSDEEP 48:YALlgyDPhMJNNSOh2hJhWhshmsfRs+fo7gmzsBzEsL/rsQu0EsJcsoBsfFsnvCKG:D1+JNwOcXMGnFaSzf/Ju0VEogvoNwQ
TLSH
T19B91BAF3C3E8862DC90156F49B15AF1ECE2D0A14432C3D7AC8D8AE5B93E2871E21165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a360b3d205c4ee9f68d02fab0983d1107a353819f29f7fc6fb8f532ac54eed5c
MD5 e5217eb8606960d095c6092d659b7ff1
SHA1 444400bb7692784beb499e3db0b929441bddbcb0
SHA512 6fc3c0d60dcb2654dc8702efa8545af536f6ac61ac33b571f4d35c154cf3b94b4db0e608d207b6cad993b29dc305dcedfd56040a03ff1234193883e3562f3a16
SSDEEP 192:sxZnREkJ/fOszdQZLZ8bzodpon4HW6+WNr7K8/Yof2SesqIg5tt2J:sxZnpJ/fOszdOKAfHbz/sSezrtC
TLSH
T14542C8166D28A93B8CC7D21DBB55BF53E3F9103291951E44ABFC8A2C15E76DD220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 26KB
SHA256 716ebb0798d5e920b5a339271f551f69504fc250f432d4d884051e3f36a3f17b
MD5 c389968a007f2f5e93ba3df18e21f2d2
SHA1 d140f8bd62eb7b08a8a1755f92306673a7b49b77
SHA512 a29417da54d9140ea09853f5c9f0e104621c176e5687cb9b85107e8e4d26649abb577b2f4a780813a5f5835389fc59b2be220588f0e3f6dfb0c685b349dd5ff3
SSDEEP 384:sxZnpJ/fOszP66s8qMpRiYnazAW8pZS15posJWeT+WOKAfHbz/sSeartC:sPpJ/fZ4Mnc7WeT+WTgHbLsSeyC
TLSH
T1EBC209059924D83B9FC39D19693D7E33DAEC506212C5CEDA1AECCA1C019E1FDAB07867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f61941847e9e79e65681d8911f1b999c2752918ea6ca079cd3cdf8ded6d2c11e
MD5 4bc9204b673b0b962a3689ecc33a1a52
SHA1 7c21bfe8e3269dc02110c692e119a4aa5947ad0f
SHA512 6f39519db5f63ca2d4d8e35682eb6cee8762abe480168345d6fcc7b08952dca93706fcaf0a75fe96e1e8e06e93b8bb281e9b49ff74666b05d78f1d50befaf447
SSDEEP 192:sxZnREkJ/fOsz/aQZLZ8bzodpon4HW6+WNr7K8/YoH2SesqIg5tt2J:sxZnpJ/fOszSOKAfHbz/QSezrtC
TLSH
T1C242D8166D28A93B8CC7D21DBB55BF53E3F9103291951E44ABFC8A2C15E76DD220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 696a7580ff01fd3f72a33318436b844392d93d2b2189a429f089da349ba210aa
MD5 c0435de3e98ffbd8a7ed3b2b8f3c595e
SHA1 e0235231dcebb8002cdd4ae2248a00a2cfc7cc49
SHA512 92dfea3469db9ba31b828959b44e8d975e83f204c27e6892735cb74363bb76664e3160f6be98b9c06687ad94aeda34f6b0c93d8224947c1898c682c4cf45d726
SSDEEP 192:sxZnREkJ/fOsx/aQZLZ8bzodpon4HW6+WNr7K8/YoH2SesqIgjt2J:sxZnpJ/fOsxSOKAfHbz/QSezjtC
TLSH
T1E142D8166D28A93B8CC7D219BB55BF53E3F9103291951E44ABFC8A2C15E7ADD220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\da2b362b-04d2-4bb4-be85-69e01bc23024\index-dir\the-real-index
Size 2KB
SHA256 18ba558806e315f6f80b325313ba6bdc99e3e58cc36afed200497ecf4f12f9c1
MD5 ade68c92345dcadae643d3711c9b1914
SHA1 624ae5a25ac2e12dc2eb619f62e5e4ff4eef666f
SHA512 e1e92270f4020e71b2b3f28dee528d6cba0784e65bc0bd416a8695ac251fa570b647e2426f23e5d53b3ddd8f6fb0aacd2f72e92b6fe71e54bcc817d63bed6e97
TLSH
T12341A78A4D024BABEDA0523014B92C5E6334A1CC0385790FB5FD9035BCC73106D9A97C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d75b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\da2b362b-04d2-4bb4-be85-69e01bc23024\index-dir\the-real-index~RFe5d75b0.TMP
Size 2KB
SHA256 80d1a964165516b42191a21bc42a87349f99af0fe2d35dd2d22a83d2787b2405
MD5 9a84666fabab5fcd2178d8968aca7aa6
SHA1 ea212d27e1bad3252942314b293ed86ebf4d6724
SHA512 3a367c17af6c3a09c69baa368bcddb31a716c315569953786b4b81f77dea879ba1f3e8b2cf42f49db565918146fb3651d9ef8244d282c28e6190ecdcc41db037
TLSH
T1B641B6571D124B2AEC84537209AD6897333DF18947843F0FB2E9D136F8C1798BC9AAE4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 2ec24a6316f88d4571f2272e7cbd1cbeb15c5b8db166916534f653867e0f8406
MD5 36978006d68b5444f26125d582c46259
SHA1 924437e443ccac222a2f00697559db1f12cf40b3
SHA512 9849425c54fdc12ffd989cb4c8678ba3b32c58c54122e39f34a4720e5182f6e6e0cb912377749929848588de1e1825d8c252f7b486741a9e1514371cb58f016e
TLSH
T1DBE0C6FB3CE32C20FCABE3D9147120E8050A3A24C809EC8FA017D2C36070350748AEB2
MD5 SHA1 SHA512 TLSH

Submit Download

a3ea7e96f058aea3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\a3ea7e96f058aea3_0
Size 193KB
SHA256 a6b4876fe2d5982406f8b7e4d1350d9b5bb4fd795f812326cf78fad7a78ff99b
MD5 dd30260caa6e990ac8050a1118fae42c
SHA1 a014abd84320a79e04dccc94c8a23b7a7cfb1edf
SHA512 6f7f36afdadaf9959d43acaea8e6b6f4e30d96a374dba92455c59cb862924745e978d27de983b9eb1c936751cb04faa4eef141519a01ab7272bc9256b8651faa
SSDEEP 1536:AoWVFWcK8jE3VIyj/OznBCj1O8/vrbIvUB/wIULnqSZEn7zCo5VeJUuBHvIKcb89:hrFWzBlGbIvlpYPIbPIf8XFjvyuVb
TLSH
T1FA145B755300E43FB923DE61A27E7F4E3C25A167DD0686FCA5A4E430AAD3DF20526B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 187cb08cd6b8c48f0e4374c37b9beaf6e9b76ff91d59b96ede7419013b6aeb0a
MD5 100838030a3f489d96acbc7175a9f2e1
SHA1 b1981f87f042748cbbcb6524f155ad7409ced8da
SHA512 40bb42d0205b5e5f7ec1cc41c045c2e3a320864cffb15c1ccb7704ba39293159fa3fc5eb170cc70a1dbd30458cfebeb55b847c3a2de709858a522e350cf8b04d
TLSH
T1F9A0026905D40915DD05567012C3118862718A90AD02D7479CE1E544A8D6245A1B682C
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ac4ba52f93b9713e9a3db3f98001dcfb9b2f25d7396c704b7cd5ba52fc632552
MD5 584575f0060ec8428e91e6b04883a3a6
SHA1 d97a6010bafe48e43bc917e432c363400b9ede44
SHA512 8822c976c2919e693e5340010f9f643fe08a1d9448d20f73edd908f32dd43ac439e8239d6d3f93171ee6ac22d588ed9312557f3147dca639e79c511a0bb1b368
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgb:ST/2dXOJhJlpfnpp3tNXVrN3m9vW
TLSH
T164B2245571BB421039FE391891B6972E064232733119EA2B7FBD04B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ac45850e47b57e72e7369a67ea199198f0860a36562923404b9a180be894d601
MD5 d5d9ab38c4a4305444fb422202995da9
SHA1 28f0d5e25db231d58a5bac0d5ba10a25cb7c645b
SHA512 667a239f3646b8459a80aea516b3c41e8f55ad4d47d151886acb0449612b278e00c51b89d4782374e7dfe180898e58b6bc557655d7911cdeaebc8a7058aecc93
SSDEEP 384:n0iFiZcI83sNt8TUNTUlI43aKMGyRw2fLBCNfunKUvifsa+VYtlIgL/7IzQoz:PFQ83EwgltPBCRPUvifhgyA
TLSH
T151C24A72EC54DABBECE68BD5AB4A3A03DEF04163958C5AD4D9D85D1C00DB2DD430BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 969cf550ca406543c21f1f68908a700e558f127a29831c81530bb10e6e85673d
MD5 ff66c4062938aff157168b993b55b8c0
SHA1 b3316289c38554a53a2cd6a6346c5155785d5383
SHA512 983671b3723d98ae4fbd70a4d6cd4dbcb7cefa2f16708a42e17f20c6d860cbbf4c46c83bccb9230c0584be84993d7e846dcfa40af7b6dfc72d7b3ba49c553e77
SSDEEP 384:nLiFiZcI83sNt8TUNTUlI43aKMdyRw2fLBCNfunKUvifsa+VYtlIgL/7IzQoz:mFQ83EwglyPBCRPUvifhgyA
TLSH
T1A1C24A72EC54DABBECE68BD5AB4A3A03DEF04163958C5AD4D9D85D1C00DB2DD430BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 f3f5e8ec20b47fcbf245a2f53d72e052c3ce4153ff86805c95852cfb89ece6de
MD5 e9c3b220757bc3243b7c97eae1c1e110
SHA1 25377293251524c8bc445f5b0b6ce9ea8cf96937
SHA512 d2b0cdb79be53a539f3a989c63e0b393dafe5ffb2433c5d65d969d54eb36f7c01c9996305c08d1bee1f655fc06c2cce361318888bf715f5dcbf3168a786d0b07
SSDEEP 384:npiFiZcI63sNU8TUNTUlImNaKMiX4w2fLBCN7FX7O6R2FeoEgL/7Izzo9:AFQ63pwgbyoBCBFX7TRNS
TLSH
T19AC23B36EC98DABBEDFA8FD9AB4A7A03DEE00163949C45D4D9D81D1D00976DD0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 7c49e208982ef288d5725e4986809ca874c52e5ff3a62e3ebcc518ee3439211c
MD5 60a85f7180408462424a217ab32318ae
SHA1 81930afbcbd205f25f1d6f21c1ec2d49937eb749
SHA512 fa42f0353dfbc736ff1f04c2af48de645497ffcdd39ad6f5d22c22810062fa3722505a3d48f094a2b7345b6893ba925012613214ae0eef4910a35de081623dbf
SSDEEP 384:nZiFiZcImm3sNt8TUNTUlI43aKMG/Rw2fLBCNfunKUJmfsa+VYtlIgL/7IzQoz:wFQx3EwglMPBCRPUJmfhgyA
TLSH
T14EE2A2F298D79977E8EE4B87A73E2D029ABCC15375885994B7C81D0CCC961BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 643fead2f7f24b7c23a81b4abf29a957c7a6a3271b37150ee5e6cf38ec8f6122
MD5 8c935d8f515290151c65deea6ba07c50
SHA1 c201dbfd23b2c3292c073fc016e854fd1299d78b
SHA512 bb4262ff4bb31b6ac68ff162e3eb80ce134726d6f53050dc430f590d61874a0a7c2f3ad208c77ab20cb462d072993099f69cfbb2b541de15668bb4992eb38a09
TLSH
T12E41195CABFA1158B3B7AE1A9BF6A45D487FB9371F07D09D10110D4F0A62B40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4168-249-0x0000022B665B0000-0x0000022B675B0000-memory.dmp

Download