hxxps://bit[.]ly/41FLhhq

Analysis

user interaction
yes
max time kernel
598s
max time network
599s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://bit.ly/41FLhhq
Sample260916-pavcsazelb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5196	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340340934832336"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{F23E6584-ECA6-49A0-AB20-09A9AC9BDAA7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe
4680	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4680 wrote to memory of 4432	4680	msedge.exe	86
PID 4680 wrote to memory of 5196	4680	msedge.exe	87
PID 4680 wrote to memory of 3356	4680	msedge.exe	88
PID 4680 wrote to memory of 3236	4680	msedge.exe	89
PID 4680 wrote to memory of 3356	4680	msedge.exe	88
PID 4680 wrote to memory of 3356	4680	msedge.exe	88
PID 4680 wrote to memory of 3236	4680	msedge.exe	89
PID 4680 wrote to memory of 3584	4680	msedge.exe	91
PID 4680 wrote to memory of 1992	4680	msedge.exe	92
PID 4680 wrote to memory of 3584	4680	msedge.exe	91
PID 4680 wrote to memory of 3584	4680	msedge.exe	91
PID 4680 wrote to memory of 1992	4680	msedge.exe	92
PID 4680 wrote to memory of 1992	4680	msedge.exe	92
PID 4680 wrote to memory of 2064	4680	msedge.exe	94
PID 4680 wrote to memory of 2064	4680	msedge.exe	94
PID 4680 wrote to memory of 2064	4680	msedge.exe	94
PID 4680 wrote to memory of 2196	4680	msedge.exe	100
PID 4680 wrote to memory of 2196	4680	msedge.exe	100
PID 4680 wrote to memory of 2660	4680	msedge.exe	101
PID 4680 wrote to memory of 2660	4680	msedge.exe	101
PID 4680 wrote to memory of 1228	4680	msedge.exe	103
PID 4680 wrote to memory of 5028	4680	msedge.exe	109
PID 4680 wrote to memory of 3040	4680	msedge.exe	110
PID 4680 wrote to memory of 3156	4680	msedge.exe	111
PID 4680 wrote to memory of 4984	4680	msedge.exe	112
PID 4680 wrote to memory of 4984	4680	msedge.exe	112
PID 4680 wrote to memory of 4984	4680	msedge.exe	112
PID 4680 wrote to memory of 4392	4680	msedge.exe	114
PID 4680 wrote to memory of 4392	4680	msedge.exe	114
PID 4680 wrote to memory of 4620	4680	msedge.exe	115
PID 4680 wrote to memory of 5008	4680	msedge.exe	116
PID 4680 wrote to memory of 5008	4680	msedge.exe	116
PID 4680 wrote to memory of 5616	4680	msedge.exe	117
PID 4680 wrote to memory of 5616	4680	msedge.exe	117
PID 4680 wrote to memory of 4824	4680	msedge.exe	118
PID 4680 wrote to memory of 4824	4680	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bit.ly/41FLhhq
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x25c,0x7ffa5946c188,0x7ffa5946c194,0x7ffa5946c1a0
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,8601880359410245887,13470084563349382368,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,8436284759140833,9781260994055500902,262144 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,10331731355978640596,14207956041845561044,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,15035972214134183891,10315655029386235296,2097152 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,5642434061992692900,13678700019300124164,2097152 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:1
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4968,i,9313186951250668779,8893723130290488909,2097152 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,3271727434435988581,10149826214721423768,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,7837153344087366708,12062818522094231895,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,7277852145104378249,7053402719613944461,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,7277852145104378249,7053402719613944461,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,15850223540252246402,144783333831115031,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,6561030043267529286,14097815887946049664,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,9339235373804266222,10955632113214319017,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6236,i,424186538118370697,9133631119499199596,2097152 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,11260373574964233335,11300976570600922742,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5188,i,12511131272819954191,10892478358053400115,262144 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3932,i,12004015924693130941,4661114807448582455,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,4026838603034441152,12489286796446250410,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,7506388217369631362,2227950693647308802,524288 --field-trial-handle=2504,i,7828517498944195201,14966574288809598838,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:8
  2⤵
  PID:4824

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:640

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 245bc6dee5038903e241977e868e14b6f2e75a1c78a69f3edaaedf398f88a78a
MD5 223751f945daa947d2d2ad61d4cba378
SHA1 a44922eb07495948783294df8b5122e38914d90c
SHA512 fac77081976430ef09322b9cdbb87e08fbeb37109fd4ef68e6650e3cf2c25f906142f1174f6f587cc1777a9fbe9016fa69339fed28acb1e16382874b38d833dd
TLSH
T1ABE078C405D4C7DD91C4744F415C5B4CA1D0374FE7DC6A1F1F00848D704154073C5760
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2b1ef6d7ee830c10c02e7dc62eed7c1e00f1b7fb3a9cd81ae0901a0bbf8cf0b7
MD5 04aeab3e25dfb809f62b6316acf7dbe9
SHA1 1389fbf5fec90d485c20f2aa66242e9e12e9a52a
SHA512 0eadda70411b9018366ac9ea00dd7419a2e14608f3c6cceaa9095a41000ad31718730d3cbb805a1ad64c36d5aab7704efc72303ac1ad172a139cba1f74f7ad96
TLSH
T15AE07D8504CAD36EA664749B9178678EC2C03B4BE3CC7A8E1744C5977201CC0B6D3690
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2b27e1cddaabfc7960ad62182c9290fbf1102f29dea3089e6766135c93e8b100
MD5 30c5dfe91b563eeef443da7cae9e7496
SHA1 6b2877685e6199aea371dfbe5ea75fda25d25f1c
SHA512 2057dfe19d994b7491c75c4ac739b3c8c2c748762425c012d8792488c77604cd73d247b09d9d758daf7f772a36e3fd7175403932e24b3ed4589e56dde5bed88f
TLSH
T127E02B6AC911EC3F08FD0B7954940745FB10236B2A419C4B3B3E81188FF55364599C6C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 180KB
SHA256 a596aa6fad3970bda8b53e8890cc4e976961f72af0d8495362824c9b97112312
MD5 74cf491742630fc3de3a2bdd6c4d5399
SHA1 430fe5f3b75e1f166ecbd6a4b71f12403d089dac
SHA512 1b14412fcedd89ec97c56f42b8839251b0ea0a48704e536fcee6c31b47a005e4b8b9154a17f5f4dd05a4462f1177f706bd7d378e4aeb54aa09e44de77836861e
SSDEEP 3072:+u4/vujzU+oXMBoRJ8XkY40bcql9gUfgHwokdrU6QejovFjzL+nEafgaTmxiDOxp:X3jhBoR8kY+qvRgHpwQyoRzLuEafTIxp
TLSH
T10E04127D1C77F1B85CA793D058D1465A99A4BB3E43708E3D22D6C7623FC2678D8AAC80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 151KB
SHA256 b315828fe095f06c4f35e3719533504bf5f00892aeb4b655e53f7c4bc72f7910
MD5 5fcf8517e2e587695882c19a1a759130
SHA1 8811cc7414ffebd476b47ff7f7444a5516fb8fda
SHA512 df419963a8f26c4f81deea4f8418df731b2e493565ce273f8ef621e61eba0140748fa94aeae3dfd1292554ecbeddc81f8289ce00cd6b5bdfc1a484602901562d
SSDEEP 3072:drUmyFXZ4EwSRKX2bL5dHqtU7Vy+eDa25kwIWX8OK:9UpXCfKc2bL5dHNc+eGWMOK
TLSH
T1A7E31261DB3A98C1E1B08166FA6613274BB7D4A3C64D003D35D9BF3A85E6F9D58C02BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 76KB
SHA256 2b64db2b716b2e4d2f59f0b3f458cb914950d0b09369df65b09ea6bb47b839c0
MD5 c978d3a8eca151f09a57d345e46afdfe
SHA1 d6833de87e89bcc799bd69d9ae2f8c9149a3e1f4
SHA512 5133cdcdb2ab0829d3fd10ff2b8bac974c767ec28c6df6e0862f6663e04081b8b505dfab469b0e08111f20565d1eafeb6d5d18e3c2faea4660df9fd03ed3d6f6
SSDEEP 1536:4ZlC3tssaJLfexX7xYIyMX0FpsdpXvjroZ5nVYXQJk1sI9GCX05K6KUZ:4ZMtssaJCX7JXicd+nVYXsk18V0o
TLSH
T16D73016915DC5CCEDDBE8FD1D78E2CC80ADC72AAC3B83510246A3E195942FA58056BD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 21KB
SHA256 4039df933f2ab315386fb0ff08ce43b7815bcbbb9e930773b8e5804aea415bf9
MD5 b47a627c0609c0772cdf6fdb1146ccf0
SHA1 0ade446924f7960222862daad80c9b4e3d6018c2
SHA512 5fabb687fa148751952f3e6508d800f721d76796a37279c1640a8800f5f8fea627694644f071eac0222ccf163f5ca387d7cfd9cdc9c84e1e4bd5ff6b80723f7a
SSDEEP 384:V9JH/ycUQQzDr4N6LXZagyhrDjn8x0wWi4WIsK9kGeYQJrx9T5:9XUQCDr06jMtrHSJz89kLYQJrxt5
TLSH
T11FA29EA7F4BDA73CEE1686232D1EA6031C118608E3BD536A405ACD194F09DEC513FEAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 a3b301cc5c56a1ebd158163d0616d8779f54c07787c90f3ce13ad37e272143bd
MD5 070ddec71df60ed2aef2b60c9b74a06a
SHA1 172302c00ad38cdced576a9e10b4f9603203b154
SHA512 06385c4234090aa2d2863a1031a4aa886ff746440d396c132e218583ff8806355fd4d2e4276f56f56edeb9402c603efa95ded069421d8bec9deb6fc66c7d7839
SSDEEP 96:vSXb2HXoLCX+yLctI0etak1mz88oO2Nj3ZGa2j4NWv:vSr2H174tICk1mzv2NjpGZ
TLSH
T1A3B13C504A836220FFE83672A4F6DB73B5704A4EBD830E06E0A6D7B450073A4B5B4A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 b35b1e00dc6f9b24bc7d1c0a56645e2ceae3a07ad6fc4d65bd91b1eb0f827a90
MD5 649851c2eac1cae41f38d1e0f5197e89
SHA1 b8e5ec7653fac73074fdc6bc722063b2dd955ae6
SHA512 0c4852d5ae7eb4c0c2c0bf4ae61e21ec7aef6cd705ea6ae0572ccb5c6359ed3d1f30b528601aff3069ae13f990c5c479ada38a48db1f2948c4def3f6467f2130
SSDEEP 96:HSXb2HXoLCX+yLSpI0etak1mz88oO2Nj3ZGa2j4NWB:HSr2H17QICk1mzv2NjpGb
TLSH
T10FB13C505A836210FFE83672A4F6DB73B5704B4EAD830E06E4A6D7B414073A4B5B4A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 fe5e0421894be61294e86291268b5691baab2451f05df4577c9b036e50472edc
MD5 5d061923a01ee07fc667c9e3ebd671b2
SHA1 61451d4176e9938df87ae23617bf80e329e9709e
SHA512 d2b27746d8ec3f1c7bdee6f2204c69c7e12f2eb5ee040279356e4289cecb6c2e9fe0cead49eef95d0eeb14921eb1ebe500af6f167af753a3d05c8dd6c6efabf7
SSDEEP 96:2SXb2HXxLCX+yLctI0etak1mz88oO2Nj3ZGa2j9WI:2Sr2Hw74tICk1mzv2NjpGz
TLSH
T100B12B504A837210FFE93676A4F6DB73B5B04B4EAD830E06E4A6D7B415073A4B5B4A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 a80a3f12cfc27f9ea13e089673ebc064d4b1a3ebaaa997ccbdc98569cc4def54
MD5 4b07af1b4f38774527db9fa7b1e01df6
SHA1 997dba33a5b9fa372f13b9eda02ef1b6a7c0b881
SHA512 9a9c9ba5b5ed7c348a02d1680ab278e5063cdaa265ec94991eda5d7b842f1fd4d694607af867d9436f80c57e273d33ebec917240add11c5103ba2c90a400c690
SSDEEP 192:DW18Ne8a82J8D8Pe8T8z8He808m8k828Y8F8U3FaLyYK8KI868N8G8KH8t8Ks86S:DW18Ne8a8+8D8Pe8T8z8He808m8k828q
TLSH
T122328FF797F5592DCD2191F4A6056E1BCE690820A32C78AA85E4FF5763D20E0E2C1B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 a4a70ef8e2a82c69c6e12c811e742a305c493f40015543d7a8e01770894eefe3
MD5 bedef8e5af6edce3e07e5b6858fb1a6f
SHA1 b7b4655a636bd261031a940bc7dac13b9cd86aaf
SHA512 8af793b8fe8862c70050c28918fa784c7a928d8a88b46f2a32acc1c31cb8185c7bd9c00f2cc9b79e4362da5ab401c59b6c194ca7b0547af5b29ae0b86448ab0f
SSDEEP 384:DW18Ne8+8D8z808k82t8S8+8D8Ze898G8x8qe8KFaLyYK8KI868N8G8KH8t8Ks8a:Ud8v+CuMgm8
TLSH
T106428FF7D7F55A2DCD2191F4A6152E1BCE590824A32C38AA85E4FF5763D20E0E2C1A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 0f6307edf22b4f16a6760d07debc484f30b33f98f38a50e11c65b8b7849e3100
MD5 cf77aeae19957b848fc36a2007f45bb9
SHA1 a30aef0bb09857c7f4e92362f5039c093ffeb961
SHA512 b0728a4475544d94b4f35d83c47e6e4b69b5e09a69561076b6fa6e13d148f3dedd6e2085e1d183791d7391befc86e66bcbf86b57034a56da3170e5ece6cc10c6
SSDEEP 384:DW18Ee808P8F8ge8i8u8Oe8p8P8l8L8M898iFaLyYK8KI868N8G8KH8t8Ks8L83x:Od8PWChdK
TLSH
T174428FF7C7F59A2DCC2191F4A6156E1BCE590924932C3C5AC8E4FF5B63D24A0E381A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 2ae9b143da9bba0caa7cc7b047efd132665f63faae2819a8e5b89e9b271d4d7a
MD5 1a512f9f5249cf95cebb35a94b5cf6b7
SHA1 cb9e782fb1758fbf281f8eefc184b355c7e524ac
SHA512 caac0cee189e2b32091fed2002ff0b9f63b40162660a6450411c16a2c6118262eaf9d5475b3bc9078090d1ce7942b92061b3198950d096da05f7afbbc1b3e941
SSDEEP 192:DW18Ne82J8D8Pe8T8z8He808m8k828Y8Ft8S8+8xFaLyYK8KI868N8G8KH8t8KsA:DW18Ne8+8D8Pe8T8z8He808m8k828Y8j
TLSH
T16A3280F797F5592DCD2191F4A6056E1BCE690820A32C78AA85E4FF5763D20E0E2C1B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 188f7fbcb43fe311aad5cb009c47fd9edff05c3ab7df688a0218c651404799b2
MD5 c1ffd163b2520f4d92eedb7a7227ac16
SHA1 a398f965bde20e7b9ea567ff75fad55fc3c915e7
SHA512 a67768ab8b46db06e0dce75608872779e6ff19fda3099194ede9b4dcaf89612e931b245b9e1ec3ae67fa62b487d535a8ba0dc1f6121d8158e2eab2d58e3b86dd
SSDEEP 192:DW18Ee808hJ8F8ge8i8u8Oe8p8P8l8L8M8nFaLyYK8KI868N8G8KH8t8Ks8L83L/:DW18Ee808P8F8ge8i8u8Oe8p8P8l8L87
TLSH
T14F4290F7C7F59A2DCC2191F4A6156E1BCE590924932C385AC8E4FF5B63D24A0E381A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c904888d45229637e3cd4bdcbd210f7fc3fbf34a7d489e02ea8c807cd24fc88e
MD5 57db1e851e2053f57cf9c0b2d493500b
SHA1 4bada95bef5fc1ebcdef5de752549d6be544982b
SHA512 04b27af3f852d7fda0925051be400eb9d69caed84cfb2530f9a0714cf607afdd904739fda50468e49ccd9d1b3ad174e53d805e04d75e9ed3cde7366c544dec1a
SSDEEP 192:sxZ9RTkt/fSsLaQZLg8Lzodp0zSHW6+WNHJuXYox2SD+EIg5rtxJ:sxZ9+t/fSsOOrQTHbAXKSDRdt7
TLSH
T19942C7157D28A93B8CC7D219FB55BF53E3F9103390951E84AAFC8A2C15E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 67c59c6de04a82623639595321a7347a7bf6462f94de6f021553ee6eb6e7ec34
MD5 174dad0dfb2b8857391ece90e46b786e
SHA1 673517448720c371bbf5c869406c9386fba48562
SHA512 751bb47c3605deb044bec02534bc67c6c04e6b48b67669b21cc6b44e6c3ea660b6901994dd89264b169b78798509a81f8c162bf89e73746a149435189bf390c5
SSDEEP 192:sxZ9RTkt/fSsQaQZLg8Lzodp0zSHW6+WNH2t/YoK2SD+EIgjtxJ:sxZ9+t/fSsJOrQTHbA/FSDRjt7
TLSH
T1D042C6156D28A93B8CC7D619FB15BF93E3F9103394D51E84AAFC8A2C15E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 26KB
SHA256 dbf3daf94e2b7900d4d0f65c226bcd02dd958416fc923a4181565a50f5a45741
MD5 53d4023c8e1ddb537ce6a589bc73622b
SHA1 d9f9724252796bb3b592b4704f56d29aba6fdc69
SHA512 cba5707803fce59898dacde373d0cd414c60917881b3c6d6ffd8abe61615175afb0e762158cf8650be36415a6ca9100dddad3e9da50e9e0c53a0a67c2f55d573
SSDEEP 384:sxZ9ft/fSsr66s8qMpRiYnazAW8pZS15posJWeT+OTgOJQcHbiNISDedt7:slft/f54Mnc7WeT+puFHbeISD47
TLSH
T116C20805A924C83B9EC39D28A53D7E33DAEC506212C5DEDA5AECCA1C01DE1FDAB07417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 26KB
SHA256 d009b938a5d42254faf12155fc890cb96963010d1d0d5f714fd6b079ad7b6ac5
MD5 f26acc87ed66c9316b4c802383d19fae
SHA1 e0521f52a62f3c33947fe62487f3f75f90423f4b
SHA512 4e2193b79ce4268521b17dfb64ff50a3fb97fd3705a29f2e2e3fe4ffadd6a602fc3324a5c9d4d4fbed8b4428ccc7a1ce57bfa651ef9855359da557cf0a7f3e95
SSDEEP 384:sxZ9+t/fSsr66s8qMpRiYnazAW8pZS15posJWeT+OTgOJQcHbcXfSDedt7:sl+t/f54Mnc7WeT+puFHbGfSD47
TLSH
T1B2C2F809A924C83B9EC39D18A53D7E33DAEC506212C5DEDA5AECCA1C019E1FDAB07457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0f8f9cfd12956080b1b7bcaf1c93b85774435d969830323a424562ba38b337f7
MD5 798edd68928bdb1d1c89928f49fc8f57
SHA1 debd2a088a3bff8dd1660149e2754d5c7db70c24
SHA512 4c63c42f93278862092f68f17fe6a2b58d13be92732ff6c9e632450d8c658e72f09a692a6e1edab9a688ee2282c483d4bd4d91cc1a19131aa1c4c1452efcc271
SSDEEP 192:sxZ9RTkt/fSskQZLG8Lzodp0z9HW6+WNHIIYdYo5o2SD+EIg5rtxJ:sxZ9+t/fSskOJQcHbsdJSDRdt7
TLSH
T16F42D7156D28A93B8CC7D219FB55BF53E3F9103390951E88AAFC8A2C15E76DD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 4dfe16ae6496aeb2d19e40a90943fd92328fb50744f79b31daa71ee9636eed55
MD5 98ad3e296c3dee65c79365e3c4af5845
SHA1 d192400a9ac7f078a2b0c98ba3518cd17f25eda4
SHA512 15cd1070e599eb9732ec0d1283bac367ee3e492c2e4799d4b02defea5a93e6ebb18242a324134e6b69045b9f67ccc8a7771ecfdd9f38afad69873c66cbb0ff46
TLSH
T12CE068B75DB31C14EDEA83C1107089960207B99AC800BD0E103A71CB14A23562426C21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 f48bf01a46046a77bf93c03b7f869c18f87cc21fd21cf1f430ebdfae20ea3359
MD5 e3d23c16d876a8e9029186351408bfe8
SHA1 e7fb71eaf089360ebbf3aaf383cb2752dfe43003
SHA512 43f201308ff793aa781b175374cd2c159a289bb565a8ed1a2d8b60bc946d33cf1187e7b43e6fa79d038bc599d2bb5919ce9052b16d99df4912214585875c46f8
TLSH
T1DFA0021003819051C909127451C143906317C8580752570788A04094DCB0A854D11002
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 9ff67f1b88b5cbe2415f80593350aada64b1d565c80cd1211c776304be3435fc
MD5 533f12287d1b6d01373fe952e5447e5c
SHA1 20fbe22fbe3cc3a108b4b07f1a16f726144c4047
SHA512 f01647b1d2b87b7f252615b9849570a9aa894b90e7cd94f34d541af328b46db2642728dd0bf82aed9aafd27064b6f93ffa2f405d640e32febe98e8b94cb439f8
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgh:ST/2dXOJhJlpfnpp3tNXVrN3ojDAxBB
TLSH
T158C22F5571BB021039FE291C92B58B2E064231B37159E67B7FBD00A68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 e32e02d63346b9a6e6223bc59c0a4e440532f008b4bbc89f2afbe40ed5bc95aa
MD5 d3f8c8428a66942501799fb06980c709
SHA1 e45e973429a14b1502f0336efc43620d3757853b
SHA512 cd4d7de72e61e7b065e64872e39882d6868505fc6a28dbe1795769824b6f2fe5b81f041b88c3885b466325f8135efab1b0b432b3fa8afdcd7fa837ae69e50a69
SSDEEP 384:nDiFiZcIC3sNx8TUNTUlI4IaKMYutwzWf/BChxMJXYIuRitsa+VYnl1gL/7IzPoo:uFQC3Qwg0lQ4BChxMJXYIqithg8L
TLSH
T18AC24A32EC98D9BBECEB4BD5A74A3A43DEF04163958C9AD4D9D81D1D00DB19D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 1fb428a03ad2a3f72125d624d12f367a69e76915ee090b6b6137e228948d4d8b
MD5 2c3902a8482c3a78d63a9e89cd62ab31
SHA1 dbd0a73d34d03fee19012572f8ad1d02f3948caf
SHA512 254572e86ccd76a89b3050126d5441f6f967291ef53fd60a41f72c1d6c2abb1b2c16529d3057b483af5742a522bed140970796a8c78296576e2dcf38cc6a5189
SSDEEP 384:nMiFiZcIC3sNx8TUNTUlI4IaKMT9W2wzWf/BChxMJXYIuRitsa+VYnl1gL/7IzPL:3FQC3Qwg0PWN4BChxMJXYIqithg8L
TLSH
T182C24B32EC98D9BBECEB4BD5A74A3A43DEF04163958C9AD4D9D81D1D00DB19D130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 85ad87eea7b9b0517266caa847f50c3d6d72358701330159a90fbfce33155f41
MD5 69ab65ef630bb7c10958b548f2994c8b
SHA1 7d043c5fadafa65449c8e45dee30df9784ecbab2
SHA512 1df83c8cc42cef37b4550da3f3e975391c6845bb6c2c109098217d714a18222977b037a49def6bc672bfc58518a417b2ba617e6810f56512093f918950387a30
SSDEEP 384:n6iFiZcI63sNo8TUNTUlIm2aKMiC4wzWf/BChxMJXY5Ffsa+VY8gL/7Izno6:xFQ639wg6PH4BChxMJXY5FfhgRR
TLSH
T178C24B36EC98CABBE9FB4FD5AB4A7A03DEE41153959C5AC4DAD81D1C008719D1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 7d0d571efc2940fe168ba5666ce163f4150e0de00d106414598ccbeede7ab63d
MD5 4a0032dd3a0efb3c19b9c58d5f5a162a
SHA1 2b06e7b692418b8eb0ebd710fe14bd08fde18fe8
SHA512 37b019604b25d15867db91e561add9609d170940d159d29e6807491dce8a493e25a2618b84398b5fc9dd1bc566795575965687271b3e25457cf2bf181e483ef3
SSDEEP 384:nSiFiZcIA83sNx8TUNTUlI4IaKMTVW2wzWf/BChxMJXYIuPmtsa+VYnl1gL/7Izj:ZFQd3Qwg0PWN4BChxMJXYISmthg8L
TLSH
T1E2E292F1A8D78977E8AE4B97A73D2E0299FCC113B5885584B7D81D1CCC961BFC306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9e0eba9ad175ad86007a255762718d96e4e7067756b5e1011791c88c993b8ad6
MD5 07ded9bfde376177664fe1c82cf86188
SHA1 c0eed35d4a5890fffb4a9daebe01591d44852673
SHA512 4d813e3567007452299ab2f07d704fec629101f075b2445379f8da42c4c37dda623056f2eec77b074f74db8fc77f852439029517c045854749232fd18d5d87fa
TLSH
T1CEE00447F30055DDD03C7330005317301753C03111410347DD1001543C103401F1DCC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 265b34642a158e575dcffa64355b55bef31f37585da983416a547850839d6e96
MD5 58c3d887dbfc0b1528b08a5b0f2d7721
SHA1 4e58153e5d4bf217cd9db8352e98bb5ee8f5ef3b
SHA512 f4b363b17931ff1612468d3470fd6572c15ea7027511d1dd309ad8987d9d42a94b72307cf4091fc55ec17cd5a79abeaea549c3037ecc21f082a9fae8f7ca9cce
TLSH
T19AE00247A30055FDD03C6370005317301793C03121D103479D1101442C103401F39DC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 99e077e5432fff738246d80173a8364ce0ed0516afe140c089aea7eacb31ea87
MD5 de026f48a3b67fdb2b9cec8246ab6f93
SHA1 ecee4a421dcf48a4e3dddb4870e40746fc827115
SHA512 614789b46c91d69f6196e55adfcbb42deed0b0518149d799c16afbd6d979a2850d4c2f37064b4965ab2e9d5f6982eb1f79d3cf9c49b80c9e87c841b6a4dd0de5
TLSH
T139E00147A30055EDD03C637000531B302B93C03221E1034B9E2105886D213402E39ED0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59b82b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59b82b.TMP
Size 392B
SHA256 b2396125e32cbad4758a9eca7a6913887eec5451d05dc9043aca0bb97f65ac1e
MD5 718436313a50ce369cc626b2b9573ecc
SHA1 f069e74b9c1a4ef14200ff88b42dc5eebf94df03
SHA512 5e0e044090cc7203b3d316f6e48c1c5b05397bdd6b56dd19644de00baa4593110893b835b433349a463f615aa4a0eb130793beceb9138b7c6f9ed8b8b45c5ab7
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 120828ecf74547dcbb9cc011faecd3ecbf8f436adb5d8d5bda8e647f85fff8ac
MD5 e1572acf1a3b6330d7565b8d6e9c18bb
SHA1 8c151db376e51ceb20432377c829aecd1dd53f78
SHA512 ba4fe6aa1c83a8eb987b4a33841db81bccf6d584365b9700fe3ec9ffc047d7e375f81f5132a30e67dbddc8a3af9bb3961b8828cc749764b8c7e4b2fc5737b5f9
TLSH
T1B6412D5CA7F91148B3B7BE569FF6A8AE447B78772F06946E10010E4F0A72B40C862777
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download