edca9e46928c830db5bb893356c5aa8b1b109d6a66fce793a090ec51dc081d7c

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
IT/SISTEMA.DI.SICUREZZA/CARD.X/vbv_files/saved_resource.html
Size 465B
Sample260722-pgzabavare
SHA256 edca9e46928c830db5bb893356c5aa8b1b109d6a66fce793a090ec51dc081d7c
MD5 a957d82fc710096674528a8ad9da83c7
SHA1 3cad837ba69db7065587392f2dafd903430352ea
SHA512 c72ba0729db18b4b501a0b08a1577cd4d69bf954358ca0c65606f9fbbef978429af07531c508c8c07da29c020f93a2ea225582c3bed2d51d23f41a2c07572fa6
TLSH
T11EF05CB6690B8CBB1520F9C2FBC4799457509C74B08D1CD5E44C344C74EAB95CD63B28
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3480	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291963391427787"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{EDF26EAB-86BF-4921-84A5-181A52DBD0E9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 904 wrote to memory of 1812	904	msedge.exe	85
PID 904 wrote to memory of 3480	904	msedge.exe	86
PID 904 wrote to memory of 2920	904	msedge.exe	87
PID 904 wrote to memory of 2920	904	msedge.exe	87
PID 904 wrote to memory of 2920	904	msedge.exe	87
PID 904 wrote to memory of 4776	904	msedge.exe	88
PID 904 wrote to memory of 4776	904	msedge.exe	88
PID 904 wrote to memory of 4300	904	msedge.exe	89
PID 904 wrote to memory of 3848	904	msedge.exe	90
PID 904 wrote to memory of 4300	904	msedge.exe	89
PID 904 wrote to memory of 4300	904	msedge.exe	89
PID 904 wrote to memory of 3848	904	msedge.exe	90
PID 904 wrote to memory of 3848	904	msedge.exe	90
PID 904 wrote to memory of 1600	904	msedge.exe	91
PID 904 wrote to memory of 2544	904	msedge.exe	92
PID 904 wrote to memory of 1600	904	msedge.exe	91
PID 904 wrote to memory of 1600	904	msedge.exe	91
PID 904 wrote to memory of 2544	904	msedge.exe	92
PID 904 wrote to memory of 2544	904	msedge.exe	92
PID 904 wrote to memory of 2572	904	msedge.exe	97
PID 904 wrote to memory of 4272	904	msedge.exe	98
PID 904 wrote to memory of 2572	904	msedge.exe	97
PID 904 wrote to memory of 4272	904	msedge.exe	98
PID 904 wrote to memory of 1068	904	msedge.exe	100
PID 904 wrote to memory of 2960	904	msedge.exe	114
PID 904 wrote to memory of 3344	904	msedge.exe	115
PID 904 wrote to memory of 4972	904	msedge.exe	116
PID 904 wrote to memory of 736	904	msedge.exe	122
PID 904 wrote to memory of 736	904	msedge.exe	122
PID 904 wrote to memory of 1048	904	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\IT\SISTEMA.DI.SICUREZZA\CARD.X\vbv_files\saved_resource.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff84a22c188,0x7ff84a22c194,0x7ff84a22c1a0
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,9057564750281061535,7740689369171623521,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6290734570311211762,1231623249132402461,262144 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,3409870298603600495,1182663207930677222,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=3112 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15189376084166463836,20733444924875249,2097152 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,14877625929006880298,15006072706194143846,2097152 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,1143171645220423160,9762355370746124709,2097152 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,8939535456238030996,8710254232647215951,2097152 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:2
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,3738977285054627086,17874232002391120779,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,12875859672973123595,12024125151124831364,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7274894062443799301,9820927410178537073,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7274894062443799301,9820927410178537073,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,12590939570887711679,17742500660225573986,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3440,i,3543552147748429740,12714492584103810467,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,11331194642482230231,16495442871809771247,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,5072722925801757801,14192490909227856083,524288 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6304,i,5062404955849479540,14867024842909696311,262144 --field-trial-handle=2320,i,2194184979139277789,12785509748860696736,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0172157b267d42db547a0e44f67111b66713d7c1475145272a45d818aca7fad1
MD5 9bff44c8edcf45b80d7cad4398010c02
SHA1 fc872c61cf2728e7264b35f1fd72189dabe578a1
SHA512 9c4b994f1f2f9a4674119f3e814076f2d624453f57960cee5c7c6027904fedb9aee695bd2aa53893106215591b7b46d7d1251aa42a79c02eb2a5268ea3c2ceca
TLSH
T15A71812875C20401D7371A32D9C1D0367C72A3AE366BBFA092D6B43F05B67EDC874804
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5887e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5887e8.TMP
Size 3KB
SHA256 c32247fdbacec9ea158809b53e058b91b166d00864a159a4b6dd08d043b91b37
MD5 38c5eed4a16c8af4c0af9f983cc45e3c
SHA1 56c341f3581ce69fa190d11059ff59544305ad01
SHA512 0fbc6db1f38defbee60d0967eab623d69ee6c4ab9038ecd2d2f348a08865a614c9420ad836f36196b89d38ceea007d4c26ba123f95107834498511e439af648d
TLSH
T163717E2875C20441D7371A32E9C0D0363C72A3AE3A6BBFA192D6B43F05B67EDC874804
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 420124fc86d3d090644e2f451dcb1632c33532bd280dbd1e8e2976637872f23f
MD5 9d13516eed077c87072e36f88d2a39a6
SHA1 292ab22d10e791a70ca1fa855b272be78663ad90
SHA512 b06229bc764ca99d7250a610b18a66cbd44f5955f42b876db803ef3e2e9f2884b331b195353d6e070c270ce685ee5946b897673618da77e52855c3a4eec50e83
TLSH
T1C9117DF7C7D5856E890156F06A28AE2BCE2D0505832C7C5585D4FF27D3E3475E10256B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 53eb7f03829d849e82cfddac7e0136b1f8d489428b8b3101863b1deb79a11b2c
MD5 ab3c226d0d7124ff125d5e5b659af21a
SHA1 8067d357100c57fce1ab87ee797549cbb8c4ca82
SHA512 a731c2287a698a08724977ecd26829681ed08f27fc5d32b465ca4be45d78ea1588e91d5cc5a3d05cce309cd9d277f175cc8a96aeb6082f8f6d2a5ae5f3f485bf
SSDEEP 192:sxZZRHJyM/jK1Ml8Mkx/fgsShkIdpdCHW6+WNGYwKW/iQRaIgrJ:sxZZbMx/fgsSh9IHbGc9
TLSH
T1A642FA156B34997BCCCBD209BA51BF53D6F94472D2940E44AAFCCA0C05E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fb29cc115a3a38e959e15aa8ad6ca3c4fee3fc33ed2318d494ed0e889a0f3629
MD5 54a5cb8ceee2cd6834bd77eefdc388d7
SHA1 13b4e652b1437e37b3281f99d4b876dfbcc700f0
SHA512 008701a729e55584a55c892cd60e32f7bcf305aed3901d84cc9772e8ac7f58b4085870e0bb81165768d822b164e4f26cd0b52e8da344cab5bea7ab123fa6488c
SSDEEP 192:sxZZRHJyM/jK1Ml8UQykx/fgsBmV+kIdpHCHW6+WNGYwajviQRaIg5ZJ:sxZZbqxx/fgs0U9iHbGrV
TLSH
T111520916AA349D77CCDBD209BA51BF53D6F54472D2540E44A9FCCA0C05E2BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 3d720a8b5133d743c82c7412e917feb4f587a89b347af5832765530ab7b7129b
MD5 4e34ed08757340bf685fc3185413daf0
SHA1 2f14d8abd59e169ade96454996061f736ff08aed
SHA512 bc3feba6690eec15dde752e2bf060d6dbdfd26bef4d4d9651d0b7c5c9cae962e38f81a59cc78c5c48b1f79ec5a9e1d82e269c0123d2420557365eb4c5e81bcb6
SSDEEP 768:t24jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dyrohEc1ak:t24jeXmWvmKLEu1jacPLZQdpdZ
TLSH
T16ED2092B280CCF7E4F844E5DED26AF976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 aa4e163e3db130ae0a79937ab3080df8246e4ca61f318e1f3288e021f3418ae9
MD5 7b3a0e8a6c61670c5b8d9f3e50ee835d
SHA1 7c6101c23e092d53c89f5c79dd0a2df423893e9d
SHA512 996ab0f413256fbbe3dadd8cfc1fb4575ce27418a170a85f8b08e2781c717abf154f211edc15f0d27e53b2565da37b5ee59e78818335f5d34c03c2e37b9f8d99
SSDEEP 96:Kwj2KE4u2jqKsEyq3+6ok4gEcFzyygK61yQguCy1wKtQ:Q9JJ5Q
TLSH
T1DA91821370B732413CBE2418A59596579A9271A7315CB82B7FB960E20FA7E200DFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59235d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59235d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 a9c139dc72f8124f03d9b60e2868618e34523f6a95524d1b3cb0c718e92716c9
MD5 b3c9452cc8a249499b068a2ef649b3d9
SHA1 5fedcfb46fa101b07b7b9256be0e94f190ea97a6
SHA512 80c6aa46379283efad98697e1ddb0d876930650074b098b71fd488d357d38685adef515004c315473a9a627c9189a0038d67dbab27a39e8675c1c4c2f8e6c298
SSDEEP 192:uSLsN83QmiZEfGKQmiU1qzz4H/+jVx+Fd2YH8FEmde5cFT8qNZZIYdpEs:3sN83VBe8f+0d2YHRmdRFDoYjEs
TLSH
T107423B326878AC775DE2A646F04736535FF85067DAC87F84D6FD6B0C04DA6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e2a12c23376f1e6c7e5069d542d48eef51eb4a5163665304920f8b4b23646812
MD5 8352160b808329871c8bcae140f020e1
SHA1 4ff62c758f726b0797bbc6d6d620833779a8acf0
SHA512 284e6a98e739dd1de5c325f801bb8cccf4913f2c5f43e5c907d69d9b6bc9894d6305d7aa270a2b61f24490ad769749a656b417208287dc1be441c00771adc44d
SSDEEP 384:1tNn/s3n9SfsN8KVBe8f+0d2YHRmdRFDScjmwKZ:1j+9UzchtorD1jWZ
TLSH
T176928D32AC68AC2B5DD29646F44736578FF85173CAC52F84D9FDAF0D00CA6AC131692A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 48cb7e1b2df46c0f1b78829fecd27e990af96f5ddf1226734064cf34e8b0eb76
MD5 40e9b56f609b1d6f827e71275de83b4c
SHA1 714f4f7779074cdd11a310a8dcf51106ed400bad
SHA512 cf74e9c0a49cba085d9a96deac981f35e0c1561b3ad4a6c312e7653df016470d3d7d4ab0176bed30147afebdc38d056cbfd05d6b92fac646a75be5fb793f8383
SSDEEP 384:KiF1tNn/s3n9S2zsN08TUNTUlIlKVBe8f+0d2YHRmd7FDScjmwKZ:BF1j+9BdwgdchtopD1jWZ
TLSH
T13FA26C335998DC6BAEA29A46F54732178FF45173C9C56F90E6ECAF0D00CA6EC1306D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4db3b0f43f2145f79b773ffd24ca3df20f1c710425d8cdc23bc82784f479afbe
MD5 016073ba92a0d90c4d7e187b01c51b3a
SHA1 700828b8aeb674a4746ffbf24ea523522ad35ddf
SHA512 b3bea6c8b4fd0e4f461ee989662a1c372806ccbc4d1d7456f4c7e45dd60c694e2d6b45ed71a57b94fdce6ffb4dc29011bfd7ebd5042e055c95ae536320d9b45b
SSDEEP 192:EONY6hZ0QmiUyZZpc/+jVx+Fd2YHC5wOZRnU6:EONY6ocpu+0d2YH52pU6
TLSH
T15002DA35A8786C7B8EF2AE06F48777235FE4116BAE956F84D6EC1B1C00D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aab7eb9f294473dd361c987dd3dd7ba46d4fa6f17382b95ee1814495cbe207f5
MD5 aeb815ae630bcc0907146e3ce8c0728a
SHA1 5f77e3dc642247d39166e82ca3cc69c34ad265ff
SHA512 2afcb3bb6bb6a4040ec1fc432e6eb9b2d060bd902abeecf2817d27eb81571a0350657dca6cd7c0909325a0f71c5b16cc555f765c1dbaeec2c6542ad5d8130cfa
SSDEEP 192:UONV6hZVQmiUy1Zsc/+jVx+Fd2YH8FEmdj5cOq8qNU6:UONV63Ksu+0d2YHRmde9DU6
TLSH
T1B7120C326868AC3B5DD2B942F48736534FE55127DE997FC5D6FC2B1C00DE6AC230A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65e152be-029b-4837-9e51-c2aa12b202bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\65e152be-029b-4837-9e51-c2aa12b202bb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b8a4303fda3783cfa8b342d45736950dce32ff608d2e6ee30ab0cbd1635ef904
MD5 551864f6da5ff65fcbd9c0754c42ab45
SHA1 468f3c7be0a80646744806f3730b2fd091e6d3ac
SHA512 55d21da14958b36d0b74d1613b1672626759ed1e61daa615eeea0afe59b9193665485fc7851c531eb0354362a46d68d6de56c4341bcd8b5f1bcb91e43c64de74
TLSH
T11241E95CA6EA1158F3B76F6AAFF6685D447B7C672E16C49E10010E4F0927B01C9A2B33
MD5 SHA1 SHA512 TLSH

Submit Download