hxxp://www[.]comune[.]muggio[.]mb[.]it

Analysis

user interaction
yes
max time kernel
151s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 14:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.comune.muggio.mb.it
Sample260930-rhn7va1zhy

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{10B99E2C-B34A-428D-B487-8E46F250BCC2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5420	msedge.exe
5420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 4836	4796	msedge.exe	85
PID 4796 wrote to memory of 4104	4796	msedge.exe	86
PID 4796 wrote to memory of 5576	4796	msedge.exe	87
PID 4796 wrote to memory of 3948	4796	msedge.exe	88
PID 4796 wrote to memory of 5576	4796	msedge.exe	87
PID 4796 wrote to memory of 5576	4796	msedge.exe	87
PID 4796 wrote to memory of 3948	4796	msedge.exe	88
PID 4796 wrote to memory of 2360	4796	msedge.exe	90
PID 4796 wrote to memory of 2512	4796	msedge.exe	91
PID 4796 wrote to memory of 2360	4796	msedge.exe	90
PID 4796 wrote to memory of 2360	4796	msedge.exe	90
PID 4796 wrote to memory of 2512	4796	msedge.exe	91
PID 4796 wrote to memory of 2512	4796	msedge.exe	91
PID 4796 wrote to memory of 5916	4796	msedge.exe	94
PID 4796 wrote to memory of 5916	4796	msedge.exe	94
PID 4796 wrote to memory of 5916	4796	msedge.exe	94
PID 4796 wrote to memory of 4200	4796	msedge.exe	109
PID 4796 wrote to memory of 4196	4796	msedge.exe	110
PID 4796 wrote to memory of 804	4796	msedge.exe	111
PID 4796 wrote to memory of 1116	4796	msedge.exe	120
PID 4796 wrote to memory of 1116	4796	msedge.exe	120
PID 4796 wrote to memory of 1116	4796	msedge.exe	120
PID 4796 wrote to memory of 3760	4796	msedge.exe	124
PID 4796 wrote to memory of 3760	4796	msedge.exe	124
PID 4796 wrote to memory of 4740	4796	msedge.exe	125
PID 4796 wrote to memory of 4740	4796	msedge.exe	125
PID 4796 wrote to memory of 4308	4796	msedge.exe	127
PID 4796 wrote to memory of 3976	4796	msedge.exe	130
PID 4796 wrote to memory of 3976	4796	msedge.exe	130
PID 4796 wrote to memory of 4244	4796	msedge.exe	131
PID 4796 wrote to memory of 4244	4796	msedge.exe	131
PID 4796 wrote to memory of 4244	4796	msedge.exe	131
PID 4796 wrote to memory of 5420	4796	msedge.exe	135

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.comune.muggio.mb.it
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd2e23c188,0x7ffd2e23c194,0x7ffd2e23c1a0
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,14790861541507900070,8989206214955230700,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,5063015883604160051,14268569068278599677,262144 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,1254555025091784188,17783304349424867099,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3332,i,2443814833458124023,17310086697205742859,2097152 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,17117524525084718326,14451790513907216099,2097152 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4916,i,12813766230816013166,11928286825612069490,2097152 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,7180934766162047536,15640574135962941719,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,11461973090993035160,3758760444363767586,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,8266231897477090806,1377501769329059199,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3468,i,8469491291409550261,9676283739492783372,2097152 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,5639643838837003880,18251141167820297077,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,3473450634455448998,5797869760747989590,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,16460815759679619433,6578153129377303644,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,16460815759679619433,6578153129377303644,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,17820147319718039200,10864014606531762916,524288 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6580,i,8989907208491231782,5999890132163977473,2097152 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6780,i,12712669674120381773,9660523815398638805,262144 --field-trial-handle=2304,i,13639408632260342628,10171243269076299411,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5420

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 e3889d6c513233f6d91a77a74e0b90236c71016c6a392c9f1a508fbc48373dbb
MD5 6b308977b92da5065fb86837ece25be5
SHA1 00115419ff70c3e7ce0183c67772cbcf9b0f52c2
SHA512 dec27453eae6111c2601053470ff57e167d589e859c864ecd280349b189838cfd9d70a1fc12e71d144ad999807ecb51c1248ff2e62d8121f0313c3a28732f81d
TLSH
T101F02DB5DC25BC3B0CFC1B2860544746E751135B2780888F3B3D810D8FB163B8586D5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_00004f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
Size 41KB
SHA256 68a564e43aa2dd85c1a48f6cf39f6e6fa10e039f78e7a9da5f7cd620587f5447
MD5 44a1a27374d661d53000807f84ff260b
SHA1 bd70e79b5ec9c0bf456a96ff10ed65b080a4add9
SHA512 2cdb249b1c1397d38ec5e87c6bafb93f10c02af645e14e0e497fc712792f265ed57355f8210fe90511ab6e1a457dd3f24b1153bf4d70e6d951f3803ac49a1679
SSDEEP 768:dRTdnh71X5njwi5m+/wUKM+JQ1zyKjqvHWdRgce9S3Mhp6zIZjSdBnZ0Qlo7wNrK:XXvnLo8+JQZ6une9S3MhcIZSdxZ0Qlw5
TLSH
T13D132F3D87F8C35C4986C67A9F25A8B0D90DA2D7A1D682A8717CC7900FD38D5F24F5A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 19KB
SHA256 632615faa5378e79fa9d468d233f16675e39e815c377c09af36a12ea59845a29
MD5 7b73b7f6a459ee879100366ff451a1eb
SHA1 b4d66972535ce622be9cae26e5263527942c32f4
SHA512 ad64a769083c326b11076b975b2a85f6fae111b2424c6f8abc6cf9956ace7ab107aed73789e0d5a4eb1351f752f53167fb3d1084604cb56a24a3cf85f532e1fc
SSDEEP 384:PhTgNbOOYZxDOW/0mbq0OZTV60zSqnCe7VD4QHy3y5io98:PgyTbJKTV3J3pSivW
TLSH
T1229296FC83FC898CB48DCB28AFB97525587EE0A772E441C4F76E46606F428D1D50A9B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 b70c438ca573410a2e468d932156615a6f5d0c22c31e23b58cc3b8da8a1637fa
MD5 ba4fbc71d9acf6165e3bbf1ec3b3198b
SHA1 a065fda33d3159c1eaa420991d497fbec434809b
SHA512 6638f2d2fb280cd64246c407a93141494de93ce936942e454438dc28698117ffaccac32beda6568a97edd01944d7621e09dfb219f9515501dcb83544bc3a9887
SSDEEP 96:is1xeUwAMn0sFhxgFQzjqxU0sLx++hqQCMnP1VDf4hs11FxzYGHDbcyGh48ZRirP:71xeVAbsv+FQzmxU0sI6PCMnP1RGs115
TLSH
T1ABA1940C9F929B54FB56223240D05BB6B6B5A6414997DE93136EC4B47C733AC833CF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 832310f6b50bcfc54bafee305e45d6e27e75f22278b3a616ab1cc9f1ffb76e16
MD5 0196ba3940592d1fa43dde2730a2fbf8
SHA1 d3976b0c07be502675a863972162b5e9933f8c64
SHA512 d1bc7ee4fd28a309f23535d145040a8e84860ddae53d1ced891481d43b6147490b583202fd71b806e1e6ee88fba3d6dbc081dabb74b862b1e07d270fc50da09e
TLSH
T14561E94C2F934DA5FB65427780E592ABFA749A85888BCEC707B8C4F86D4635C832CD07
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 a04c0860dd4d21333d70839266adccb17863d57491f4ba43afddd1ef3c833bc5
MD5 524125607c4abad9b8dfd8e9d7c1f12a
SHA1 a0b51af6fed2545c0ac5de5da643b1bf27b52d4f
SHA512 7597c85d17c1da2f4eebe821c2f28fb13853b1fa25a96c189b710265521273c98837242d86f133eef3348cc5943c0e95ef1704347ea96f9c8127dabf3837a4ac
SSDEEP 96:7s1xeUwAMn0sFhxgFQzjqxU0sLx++hqQCMnP1VDf4hs11FxzYGHDbcM7Gh48ZRip:Y1xeVAbsv+FQzmxU0sI6PCMnP1RGs11h
TLSH
T136A1950C8F928B54FB56223240D05BB6B6B566414997DE93136DC4B47C733AC833CF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 36e6b986569d1f5bcd9048354eda8e4cacba6adb4f1b6c7480e6954551fc3202
MD5 c03b33a6717e70c200220808626e9698
SHA1 dd05ca8722ff33acc20c8790eedcf1d4d2617c96
SHA512 d1e877054618adebf60b8e6d126c5950a47c3a5f625748f6eba6456c3fa3acecbdd6d2da086e45254af487f5404c97206d95c020f0ebd328d13426eb153019cd
SSDEEP 96:Ls1xeUwAMn0sFhxgFQzjqxU0sLx++hqQCMnP1VDf4hs11FxzYGHDbcoGh48ZRir/:I1xeVAbsv+FQzmxU0sI6PCMnP1RGs11L
TLSH
T15FA1A50C8F928B54FB16223240D05BB6B6B5A6414997DE93136EC4B47C733AC833CF8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 30f9dea048b759e01e7aaa9b57e478c81a2589327fc82b3700a9f28a77d6e5e5
MD5 cbe58253115c80e82552301ed9b36a00
SHA1 f434bb0069c9739c69a021756032a4010f1eed5b
SHA512 c424da21b2f836c7e24c5171849faa69cc6eb8d4d1df32c3242855508527917a33784fc470ea7612697d21994e6cfc2cd8ede547daa36ebd47856a9dc19f2864
SSDEEP 192:D1drcZfHMi1ikiywap1ECkxiKpiYijiTiui3iUiKyGe4AHV6j:D1drcZfHMQJVwap1ECkxFp/w4dq5FyGn
TLSH
T196D19FE7C3FC866D8C5152F0A6186E1ADF5D0969536C3C1AC4E4AF1BA3E2470F241A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 63df2be4ad16794633e0fa11990d3cbf6fb77f0c7b38274d419b4a487480c39f
MD5 d4fd1ab9a8d3fdb7709860126fef695c
SHA1 958abccfbd7f490d816a0b3126235863ce3d4660
SHA512 78f9837f2268a3255d7c77da55283220849f197601b0533a3ffbe9bcde1961386f02b0ed8e91002cec812ab781d5f5383db60e2eb7110fae5eff12eeb6f50888
SSDEEP 192:D1drcZfHMi1ikigGUwapziKpiYijiTiui3iUiK9yzakHEs4ph012qnx:D1drcZfHMQJ/GUwapzFp/w4dq5F9yza4
TLSH
T18FE18DF7C3F8866DCC5152F0AA186E1ACF5D0959436C3C5AC4E4AF1BA3E2470E241A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 217B
SHA256 7f99d2b41886168f73dd33692d6ce8649768211f5ec02f455e7c2625835dfdb7
MD5 54b1f6e771e877d8483416f809740530
SHA1 8dd6d819a6b58783113b6ef3ffd99582744b34b5
SHA512 4242d0de36bf2baca81f540773b011424d01dd452c6edccbcf5782b3fc79c71212561002c11e190e5fa0a1d8611d849371813d3eb6abac4847da2f516133a349
TLSH
T1B3D0A713230860B359091B93602DFC9FCA5214786446818610C1B44E856B41E0F5F565
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9ab0148b4d498b85caad42b2c500332c1da24d48df96a2065361a28455626605
MD5 f6bf3afe3b45d25205e4cab63adea6ec
SHA1 d64038170505a6f6154e03352e2c123e68cc1165
SHA512 466b7577f12560996657e7e7dfb776332c879d26cbc14ebabd27b264304d818f726c1d5d2b95ef836f911d5f8b4c6b84b484e9088ef16af7c80b99d7d4e74ad2
SSDEEP 192:sxZfRbkm/fAsNQZZx6JzodpKwG4HW6+WN0KJ/YbIIFY4EyIg5TyogJ:sxZfmm/fAsNOZx6iA4HbD/FGYW0oE
TLSH
T17342DB15AE28A97F8CC7D219FB55BF57D7F9103260951E48AAFC8A1C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f5269c5a914a9a14c336c91cc80f2ad6d27fcbed4c2899af01edef4579143d05
MD5 76a76e3ae4bcdb78ed4b0d6f9881e7f1
SHA1 2857b61cf47a4e9d0b3c61ba31fe9e4019bcdf23
SHA512 7365827a61590e51267ba8b2be0bcfc7046ad30383eda40102ac0e05332c3e44e70c4ec53d23024c4c64dfa9afe4f763bf13c676bd68da93a95ce4d064393e53
SSDEEP 192:sxZfRbkm/fAsYQZZx6JzodpKwG4HW6+WN0KJ/YbIIFY4EyIglyogJ:sxZfmm/fAsYOZx6iA4HbD/FGYWkoE
TLSH
T15242EA15AE28A97F8CC7D219FA55BF57D7F91032A0941E48AAFCCA1C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a807edc007d20bb2670eb7c89dc4411c6229c8a973a8da440097916c25ffecef
MD5 8c9913dbd8488f84ccb5f800b8b72d72
SHA1 d803057a1480426160bd51c7030706a4eb5e7c4c
SHA512 562b704e1d57efb7d0c6d9fe10e992b2188d86d0eaae51dd7cfb8df40bd63a26115124cff3ba90c30c51f4260979022e557ca423252b5d18c0a55e63b13179a3
SSDEEP 192:sxZfRbkm/fAseQZZx6JzodpKwG4HW6+WN0BeXYbI0FY4EyIg5TyogJ:sxZfmm/fAseOZx6iA4HbXXFSYW0oE
TLSH
T16542DB15AE28A97F8CC7D219FA55BF57D7F91032A0951E48AAFC8A1C14E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 acff9946da794ae0dc105b982c2bf277e14332d340473572cdae540523f2092d
MD5 afffef487f34c4f8ecbffd79be0f42cb
SHA1 3f7cf4f624d99091437b4c368d9cdb7e6201d8d8
SHA512 50d7e0df82b5703b3a147fb6f783424ff47ffe30427cf6bc687f10b9929635b398061b3229826f503b44422b205afe9434285891b1c5f5d7af4135ee423d6052
SSDEEP 192:sxZfRbkm/fAseQZZk02odpKw9iHW6+WN93dNCxYbI8OY4E3Ig5TyogJ:sxZfmm/fAseOZfvyHbAxFjYD0oE
TLSH
T1DA42D915AE34A97B8CC7D21DBA55BF57D3F91032A5901E8CAAFC8A1C14E76DD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f75c84a27d252c5992a2df04027e628d589ceb20275ba55d79383115b4bd038d
MD5 64ac97468af3db41cd2e2f9bf0a89182
SHA1 b2a23159c4389a920c857d0a1238264753aa59fa
SHA512 a9c7f8c057c4e6cead2e2cc578f759f53e5d62b2ac6769ac05136510e270d7aa026b84fe8384d7e455ceb82573c4f4e52a58099bab6358ae2ccdf83386631bcf
SSDEEP 192:sxZfRbkm/fAseQZZ632odpKw3iHW6+WN93d+zdYbIBBOY4E3Ig5TyogJ:sxZfmm/fAseOZev4Hb0dFBQYD0oE
TLSH
T15142EA15AE34A97B8CC7D219BA55BF57E3F9503290901E8CAAFC8A1C05E76DD2207C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c38d5737854bca5a1dfa69deb72206f7e9ca44015f0fae5b8cdc98952ab1033e
MD5 dd545e5014e75dfecc663ffffed31d80
SHA1 f2b1ea2e7c3a6225c6be1eb141aebbfcd8abca2d
SHA512 1b3549bfccfd4986784df71cced1949ddfefc7ed90a618f8fe4e6ffda2528db02b86bb7d651714ff319017d51ad0a02083b459bc723cf3905030467e18d51ec3
SSDEEP 192:sxZfRbkm/fAseQZZB2odpKw5iHW6+WN93dmAnYbIDOY4E3Ig5TyogJ:sxZfmm/fAseOZBveHbXnFSYD0oE
TLSH
T13C42EA15AE38A97B8CC7D21DBA55BF57D3F9503291901E8CAAFC8A1C14E76DD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 972f349a24b93abd2cad608267857d54f93a16fd7e3bc30a42e8156335024b93
MD5 14500702cd912b8b12e78a58df6994c3
SHA1 39166ba58a0f5d7ff82cb40a4a95cb2c8e5973e7
SHA512 6eac4c408e49c5b254bee0143c9f95c2d28af83b5d5707e2a658d17a9ba71bea3d1efa7f59306f1b240a75d2915dc0cc1ba118b7671d881dee7df9ffa9a26637
SSDEEP 192:sxZfRbkm/fAseQZZg2odpKwBiHW6+WN93dyCFYbI/OY4E3Ig5TyogJ:sxZfmm/fAseOZgvSHbLFF2YD0oE
TLSH
T1AC42EA15AE34A97B8CC7D20DBA55BF57D3F9103295941E88AAFC8A1C04E76DD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2f3a68991dab178e0ea7579e72efe661cfc6ce323a381e6e323e1eb56e8e6a8b
MD5 00cfd69a6d208625f1eed2a2e0ac7be7
SHA1 9f452c3f29cb2c3e2602fc90b9886c9040d7ce81
SHA512 09748a615e3fffef04f4a6b14f78007b7dc720120e395ce66c2013d3c59244c019334262d84484e5a18652e450d3f48ac06b794d3dc569d3325c201087a4ff70
SSDEEP 192:sxZfRbkm/fAseQZZR2odpKwRiHW6+WN93dnjXYbISOY4E3Ig5TyogJ:sxZfmm/fAseOZRvOHbLXFpYD0oE
TLSH
T11142EA15AE34A97F8CC7D21DBA55BF57D3F91032A1941E88AAFC891C04E76DD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 43acad3e6fe8537c8b3eed6dd2688f2d8f2a03b3aea3da8c0b09a7897b812d46
MD5 f6de3942e5135c4f3bda38c01d03a3d3
SHA1 d99d1aff4b0d7a452fdfb89bc24b275622b18c49
SHA512 87cbdaf1c4b64bb552c43811a0ea63e4b82a8add70b89b90b249a023a1b0fde9d3d072a1e20176e42bb082e31eba3afdd1099a2e71d6c26f19763bc939621d39
SSDEEP 192:sxZfRbkm/fAseQZZZ6JzodpKwniHW6+WN93d+zdYbIBBOY4EyIg5TyogJ:sxZfmm/fAseOZZ6iwHb0dFBQYW0oE
TLSH
T1D042C915AE34A97B8CC7D219BA55BF57E7F9503294901E88AAFC891C04E76DD2207C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9c96c636b82d86bbdb2a11cc00577c970a5d4a847b819cff6a4e50e7334429c3
MD5 b8af9ee24882a62aa26f99aa952807b5
SHA1 40fb5f7bb1991cb5064598df778f6eb57f29216a
SHA512 eee71f56a430d2f0d594b3d7775d8f51c347bd4c94e7a06915af9698228f8e2c9c0727c58f062b6e80508328710468dc3df1a65a32eaef95009b8ae01fcb7a97
SSDEEP 768:0RyktrnWvDBtt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroG1K:0RyktrnWvDBttu1jaLWLywf0G0
TLSH
T19DC20A3F640CCB7E5FC01E9D9C6A6F872DE802CBA6548D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 da46c33106272ab81fcfda9d6e88052a52afbdd8572b022767fd6304b1610e86
MD5 3340029543b6855144fe00e396608a77
SHA1 b717e07a2c7794912ae592d8b4d6ab38f7944f21
SHA512 1d06e81cc852109dc5da9440cbfdf73c11eb5994c2eda9320fd393f019ef80ee262b81bf9feb8519424f5e57c84ec8db6175a4492b9b18673f20080875e5d768
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXYHvIzg:OtfFvpopPxrB4RhfYPIs
TLSH
T148B2231471BA021038FE691881B5972F064232B37258E77B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 c1913430bc846aa23e44edeac395c30b1ab0c4538f37b14d2914a6f5d1bb086c
MD5 87c1b0a8a3cbd5156914a7b969f893cc
SHA1 4e9dd9fcb3f0ee11867b21d734a1edc8b3b8e349
SHA512 f96b4578ce87aba857ea61e1daf04a334c565ccd0298aa1ba20ee64c9ddd1104c66e6820d00d11e88c8ac420b86a8546e01f472d8bf60ccc0dd69fa8f881e114
SSDEEP 384:nG4iFiZcIe3sNh8TUNTUlI4x5mgJg24zf8BsuYWToigS5POLXzPgL/7IzDoI:qFQe3Awgf5wBsuetkOLX//
TLSH
T1F7B25B72DCA4C9BBECEA8BD5A74A7607DEE04163C69C4AC8D9D91D1D00DB1DE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 02314a65f482c19b59f2a6400b34d5e58598c93a4d8d020939730fb04bba4bff
MD5 ede7d9aa35d8211e2acb3ddc78da0567
SHA1 5d2af91ab73505a2db1c88704249fcfe071daa05
SHA512 777136196e274e07c4b1218c2794db97eba6979696bb0b65bacd4761e9784adb261a6a3e1a5c9c0fead181d9282265c8f22fb4be5bf50b02faf7cd15667ad57f
SSDEEP 384:nW4iFiZcIe3sNh8TUNTUlI4x5mgJg24zf8BsuYWToigS5POLXzPgL/7IzDoI:6FQe3Awgf5wBsuetkOLX//
TLSH
T12EB24B72DCA4C9BBECEA8BD5A74A7607DEE04163C69C4AC8D9D91D1D00DB1DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 cc04a05e0d46f5028db9424c92781dd8d56e331e992d7371fbc4ea6ec6738af0
MD5 a7c5395f9cbc96381a739ee1aa80c107
SHA1 05d2b5882ce1dbc6b66ce47b4743d3cc1f047f29
SHA512 a264fd2e45b0ed4cf7462e8af19bf9cafee4e41f8c2fdfe78c7c4b5086cec153bf555ed15e2a5be8b44d945565f9f00a614b9c3f4dfa1077f630ef489523f188
SSDEEP 384:nhiFiZcI63sNf8TUNTUlIm25mg5rn4zf8BsuYWToigBO47O6R2FeoqgL/7Iz6oz:IFQ63ywgS0JBsuetBO47TRiQ
TLSH
T11CC25C36DC95C9BBEDFA8FD9A74A7A07DEE00163859C8AC0DAD85D1D00875DE1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a58ead641494948b5c9ac5edd2ff7a155458e3b101c14f285b12e27eac15ae1b
MD5 87f96a9e2fd69059092c5e90c392d3ac
SHA1 dcf508392d591bddac762556fb3ba44a4ead51c8
SHA512 54024a86915f34d37c091bb89db957baf69a65c5442b2f9cfa6c1f19ce7bbcec4d20b7808518005e7eec7f59754f69f49cbec678e45da04d1eefe168f97a0069
SSDEEP 384:nWniFiZcIekC3sNh8TUNTUlI4j5mgD9324zf8BsuYWToigS51OLtgOIwZOyiogL3:3FQTC3Awgj03wBsuetMOLXs0A
TLSH
T115C25B32D8A8C9BBADEA8BD5A74A7707DEE04163C69D8AC8D9D91D1D00D71DE030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d19d20933599fbca1cf3443bec19b5949fb9bf7e23d1a2fc81507382e0c2b8c0
MD5 3c20651fd5b7eb6128aecc9d49d154fc
SHA1 bea0448edfdc3870a5684a1886bd0a1d86e79a68
SHA512 997597d95090a80f4b833df801963fb52c8de46a3112e8ce8c02110cc324bf70cbcb53f4f69d95704c8a88349e77b71f9440ca2c460a8f94ff5bdbf734fefcc6
TLSH
T1E8E00923DB0480BAC42C0B3454D72A253AE7D0762BF70B465E6545683D33B402D76F40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bfa8120ef1a391a84ab78eaa1d21ab60efb3eea52ed53e2f59487c57c3b287d3
MD5 837558cfb5f7a94404f6eea7c50026bb
SHA1 8ed10ca7c51e11a2c3cbcbf6255bb9c90d6813d5
SHA512 422ae49ec1f3ff2183c77f6fafd7fb3246f23f12293a19ad70903e851444992638c6e0f12639e37ec64b055e0bb7e24936a7a509871c488fd1a443031b50bcae
TLSH
T1D5E00923DB0440B6C02C0B3400872A242AE2D0322AE70B465A6141683D32B402C35E40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1eecca38f2407c0d7975801612d1dba7dc45cf48ea9d885d3a0869ea389f3645
MD5 b353c5f1999f4e1b444fc0bdd36c3770
SHA1 b6f7e49bb52ce46a25787f0e2c86ddae8ddcc19c
SHA512 f753358c69b7db773f508ac5c5a4c65c78d6bd18c4d0c6d9275eed2e28ee346668dc2a871792b93396021cf5c59185e9dfeb6a77db1073913b2710e9c872b819
TLSH
T12AE00413EB0481BAC82C0B3058E72B213BE6807657E70A4B6A6549683D66B602D76F44
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a0939.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a0939.TMP
Size 392B
SHA256 4dca92b2cd734951694d5c621dbd3c07fcd8763a72de2d1a3eba41669a92ba22
MD5 31a4e7ba7509ac34d5f1ee1095d495b7
SHA1 f07c4edbb57c5b456649740fbcd3f6d807d9eded
SHA512 f88ffee6a14e61591c6be2d56d654a62f8e5483467d057a8e32e5339835767423065c6edb885758b6e4fbc573d716a13c8118bb2f6d9b979b9e3716bbba329fc
TLSH
T15EE00123DA0400B6C02C073400C72A242DE290321BF70A455A61416C3D33B402D35F40
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9c60d07e3f3b5454ce214fbb558a5b41cda0b13563c011982f75869f5311c951
MD5 56e9e2b54a1f094e111e7ca1a40844f6
SHA1 8cfdf58968f2cf567a7565ec443d9f37f17ce5fa
SHA512 d54493acf6df9a20809ab533ffc6eac832fd2b5d4aa4a33642f6dad919a99b9818d5079ce8e290fe1db26e9177a6151afc04da31f943c9ed761edada9533651c
TLSH
T1C641FC58B6FA1108B3776F56ABF6A86D487BBD372E0AD45D10110E4F0A67B40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4308-452-0x000002745DEE0000-0x000002745EEE0000-memory.dmp

Download