c843bfda9e1b2e22a5678690884d2726562dcd786750bab7912328f0c898623b

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4scaters-02/index.html
Size 7KB
Sample260724-pkgvfaywhw
SHA256 c843bfda9e1b2e22a5678690884d2726562dcd786750bab7912328f0c898623b
MD5 a82a88b18954d9ae8b8530d28142a071
SHA1 11eb481f665e2667cb9200461496cbc152a327d5
SHA512 bedecee8600c4e5c4cec270f415686e213e8f48332e8a96e30f9b762523bac02be753093fac4b4105ad8bab7b0fcc48e1d70dc47361f2c26a4336c338c43f1ab
SSDEEP 96:YByMvbJ+/FOROsl/xUE7pPmxUYB+fwC+ObjXkQE+MXCFyiRMhaD1NaT23:YvbJ+/FORpl/xUMpP0gH1MViGQe23
TLSH
T114F1C77104C5603AE373D291B691EB8CD669C053C5230D0D72AC336B5BE2EA6932BE4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
436	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293695643479092"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{5E76CB7C-AE52-4FE1-8C48-1DB7FC6F9715}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe
4124	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 2356	4124	msedge.exe	87
PID 4124 wrote to memory of 436	4124	msedge.exe	88
PID 4124 wrote to memory of 4584	4124	msedge.exe	89
PID 4124 wrote to memory of 4584	4124	msedge.exe	89
PID 4124 wrote to memory of 4584	4124	msedge.exe	89
PID 4124 wrote to memory of 5088	4124	msedge.exe	90
PID 4124 wrote to memory of 5088	4124	msedge.exe	90
PID 4124 wrote to memory of 3056	4124	msedge.exe	92
PID 4124 wrote to memory of 3056	4124	msedge.exe	92
PID 4124 wrote to memory of 3056	4124	msedge.exe	92
PID 4124 wrote to memory of 1996	4124	msedge.exe	93
PID 4124 wrote to memory of 1996	4124	msedge.exe	93
PID 4124 wrote to memory of 1996	4124	msedge.exe	93
PID 4124 wrote to memory of 1760	4124	msedge.exe	94
PID 4124 wrote to memory of 1760	4124	msedge.exe	94
PID 4124 wrote to memory of 1760	4124	msedge.exe	94
PID 4124 wrote to memory of 4648	4124	msedge.exe	95
PID 4124 wrote to memory of 4648	4124	msedge.exe	95
PID 4124 wrote to memory of 4648	4124	msedge.exe	95
PID 4124 wrote to memory of 1368	4124	msedge.exe	98
PID 4124 wrote to memory of 1368	4124	msedge.exe	98
PID 4124 wrote to memory of 2232	4124	msedge.exe	99
PID 4124 wrote to memory of 2232	4124	msedge.exe	99
PID 4124 wrote to memory of 1992	4124	msedge.exe	101
PID 4124 wrote to memory of 2316	4124	msedge.exe	108
PID 4124 wrote to memory of 2072	4124	msedge.exe	109
PID 4124 wrote to memory of 2116	4124	msedge.exe	110
PID 4124 wrote to memory of 5108	4124	msedge.exe	114
PID 4124 wrote to memory of 5108	4124	msedge.exe	114
PID 4124 wrote to memory of 4560	4124	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\4scaters-02\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x2a0,0x7fffd884c188,0x7fffd884c194,0x7fffd884c1a0
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,10772033757839015636,6716870385294393836,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - System Time Discovery
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,3960810791589152732,8698443865066280938,262144 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,7452141781010295524,357901610306099806,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,413431710540643557,6462152777068444176,2097152 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,17610414163401327406,9235799114790512700,2097152 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,7956544288340022045,488407520842668470,2097152 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,6433579263767304842,1420707390095958941,2097152 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,13569584825569841983,15042392641229141118,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,15134614762231085590,2422802821225237075,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,1992926339838348570,9493561318453855978,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,1992926339838348570,9493561318453855978,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,4154054405118145051,5537210299253855945,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,10659378379818248423,16188525675306912364,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4584,i,16312635286040804506,8859281087414670990,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,12246611707905902709,13610594374488795259,524288 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6212,i,363642180629512016,6194071240185754288,262144 --field-trial-handle=1996,i,8811848647602958642,129678900162304093,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4560

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 09bf6b4f8d82b5c0cb6c4d7a744ec82530f478aa4729aa7855020a827d45501f
MD5 f57b0ed2bc22ebc218261cd2a64d3f83
SHA1 8b4e694844c769bba0449d7388d4f11d2802abac
SHA512 526373a01ace6f6834aaebd4505c8be5cce315e1774cac5f4fd84312168518d4aeaf99952f263259c26424e02cfadc7f22f7d5153d37f7e76a6abda31c03b5a0
TLSH
T15A615CCB0A0A44B1FF1501B0DEE1E69035B3C49C5A1F19DA0D0057B5B702BE1CAF67CA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585493.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585493.TMP
Size 3KB
SHA256 2eeecef09ee25d7dfdb3bf6affe05518edd92d26e8db59ad16884a80de194f5c
MD5 ef3a9f4ed6b9e204f90febab0a4b470a
SHA1 4f484406acad43f01cfe1a7489f7f0ed685b8237
SHA512 255f5956c2e4194d0622e4097ea5f258d2aa48902a6741f94569754236dbe16f30fee443351bb0e08415a06c4d0387364770ab805215ef002b5d090e5d118ab1
TLSH
T173615CCB0A0A44B1FF1501B0DEE0E69035B3C49C5A1F19DA0D045775B702BE1CAF27CA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 607156f8e508af1afe24de9986fc9b940681f5cbf01e9d8b804d3260e48ff9d6
MD5 5a695d248fd6d30c565f6ad1581993c3
SHA1 7020132f7c2a322b506e0c62b5067f67eab809be
SHA512 8c554e3940e80ca9efa03e8354b87af217051ea5f9496d7646df014966349be174a297648b9040375c05d61a1c5e3e4cc33a501177629ba5386ba3195bcd6266
TLSH
T1D24189B7C3D8876E891556F0AB257E2ACE1D051682283C168DF8BF5BA3E2471D10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5fc6a8106d5484ae2854fed04dd003b1cb1eb353eed29e2bbd4302bfbecb73bc
MD5 d3c649e38f881e61f93865ad400276b6
SHA1 a48e52402e1f1d93295688567c6f7869e215301b
SHA512 0fc78885df39cdddee1e32cf2a1a0294ab6e5685d2be98b04c11e0233803ab8cf841e12bbea9399c8cee32ff1a358484222fd4e67ffd1d3ec9e766db7f7cfef6
SSDEEP 192:sxZcRnyM/jK1Ml8Mk4/fUsWTuIdpdAmHW6+WNGYHjUydIgrJ:sxZcpM4/fUsWT/umHbG89
TLSH
T10542C5166A345977CCDBD209FA55BF53D6F91473E2900E48A9FC8A0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 45094d77b614324892e44d76f2f8913c32b03291ce4cf07749fec958a0b14891
MD5 5d8f1153947235822e42a3341e90c70c
SHA1 6011f9b784185637b498e503d9d1c3308a123701
SHA512 544e698d4b936dbcd8c6e79886a9cc759a8a1d44fcc327e661b93bafc095e2310782c8795fa7769cac73f60f9a08620e4c2a59eef4d392171c5be99562a43783
SSDEEP 192:sxZcRnyM/jK1Ml8UQuk4/fUscEuIdpHAmHW6+WNGYHCj1dIg5fJ:sxZcpqF4/fUscE/gmHbGFb
TLSH
T1B152C5566A3459778CDBD209FA55BF53D6F50473E2900E44A9FCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 60b23a89f091580221e4dba0a39cc4b619bee1e3bdc6357767b63d94a61f72e5
MD5 1d136406ab08a60040a1af264c9f42e9
SHA1 acf9f18c538ed9fa69b423820f43a40573056865
SHA512 3a780c14b78e4697458b7bfb6bde8ae6c39e948037f73d85e27e8fde0b68d3ea2ede61e6cf83dbb97cb78cd9f58d780c7a6c4b7ae914fd914e885af086ad0599
SSDEEP 768:ruUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RQroV60v:ruUZYTMWvg0Pou1ja7eLZmR7nv
TLSH
T108D20A2F280CCB7E4F844E5DEC2A6F963DD801CB6A584D5447EA894C03CB6EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 992cc8a2ac910b7c0b8723a970006e4d689dac0ee1f33c643de742f9e21db9d5
MD5 42178f54197f4d972e2c534e8380567a
SHA1 aa3d33aa69e020e205f2d59829a09afc6539f5c0
SHA512 9ce47ea7f61d924aef0b24c1cf04c11824c481e87dbb54dbad3d9cc84e1f57747e84af7a7d9506b2ffa93fb6995ba76058fdc690933ac479bf80f66f42a5f38a
SSDEEP 96:KA1eK2AIhWKi8i2tGKOYrkPwE+e+6g25JS06K6PSC6uEsRqUzHIDsoqiS2git9Sx:Eol9gJBx
TLSH
T156D1E70271FA06513C7F2A0C92D6AB569E8172637214E42F3BED04B64E6AD309DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d7f86b0-cb64-402b-b81b-c465bcc42611.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0d7f86b0-cb64-402b-b81b-c465bcc42611.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 340cba66bdd1dfb4204e7c12b4a3de2b11fccddbec56f01a2385490c82899a46
MD5 c54dbd4a9498051a0dfe8a066eb7c742
SHA1 5ffc20038131532b9f7051acfe4e9b11ee775429
SHA512 cc90fd45195fcd0d3d15bf654f2afcb449e2f0ce8da5d91de536eefc7eda722fd3299b3f79299828136a4cd7b6112366d0f93b4d5e8f4ecdb85d90f3e84a3445
SSDEEP 384:fZcIhsN7cEvsPEcszX5od+zOIdu2OObjI9G6w7vb:3hMsjEOyO0u229Mvb
TLSH
T1C5929E32AC285C739AE7E555F88A36138FF89067E7D46F80D1ECBB1C05DA5AC1306C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 716e799fa7ab11aa88ee76800332f4aa2e8e0adc5186b078cd003e8d90c92cac
MD5 92f0a5c231201cd3ddbf9273cc559c8e
SHA1 2cfd265f258edf8914cd5eb8c9a01f3c9f837837
SHA512 6d3e76e70363b74c1549d454c62ea645856ba4af58784f771ff7b1e65040b2eb90e1cf4e71fe5e2915932767c3e67c38e11215826c1e3fd20fb6da0f2332dff0
SSDEEP 384:HiFiZcItzsNF8TUNTUlIlJEvsPEcszX5od+zOIdm2OObjI9G6w7vb:CFQVQwgcsjEOyO0m229Mvb
TLSH
T111A27D339C589977AAF79A55F88A32138FF550A7D6D4AB80E2ECAB0C01975EC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0e4b10bc443441fb63702f5a16a9729fa3e7426e32630fd0310240281541f066
MD5 73d58f3dd38b83ef094f3cdfaf7cc831
SHA1 89e2a0b43dc34c0c37a21f45d50714ff1181d21d
SHA512 c8baeb0bb5375338a3aa7dceadf13377e54328434f0b8f5db818a520a19c3e0f41b7c92f9d695ee0cc6292a23d523bacac7bec09c0e20f74f2825052fcd3ed0f
SSDEEP 192:yONZ61VWQmiUy2WYgGX5Obd+jvOIF/aC3+YU6:yONZ6WdgGX5od+zOIIPYU6
TLSH
T10502D83568286CA7CEF2BE49F58777135FA5206BEA516F80DAEC1B1C009769C2347C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4535e0319d195caf30249d881efb936c5a05fbc5d9601f0aaad8d53977fa00dd
MD5 3611df31931a3996895ff14de59ef332
SHA1 c58e344c51910979759deac786fc1b8eae52bada
SHA512 03fa9e26a5cfbda828fd61e9b8750f0ad7c8e13ab3097adb7f8d0c55b3729817572608cc0d2b08571fe49d993e753f6879f37be50f0c9746974e19cf14ea15a9
SSDEEP 192:0ONe61WWQmiUyJWY8GX5Obd+jvOId/jJbqpU6:0ONe6Do8GX5od+zOIdd2U6
TLSH
T182121B366928AC674EE2F999F48732135FE55167EA857F80C5EC2B1C01DB6AC230BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 140a639b8c2654f0c5550b2c5414fef94149666a01fdcaec2a24cf0244f067d5
MD5 91cb158543fb5b6b865456b92ad08004
SHA1 385c4d20b9ec33ddf5c57a7f839585b74799ee4e
SHA512 847f8fc29230db5410c73ef80c555a5a57b47c360d932b16b24f496e6ee8cc763e4ab030d55e5713bd62f908e65dd6f90414438c7e5b7736ad3a9d7193facfdb
SSDEEP 384:/ZcIhsN7JEvsPEcszX5od+zOIdu2OObjI9G6w7vb:XhLsjEOyO0u229Mvb
TLSH
T14A929E326C285C739AE7E555F88A36138FF89067E7D46F80D1FCAB1C05D69AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d35a144-0ffc-44ca-a2a2-91be941f3751.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0d35a144-0ffc-44ca-a2a2-91be941f3751.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 18141f36c08d5db268e379804c1017bf2e9d906e07bfd7387a5d62ab24095625
MD5 e7fdb3b1457d36ea8b47a3734dca22b3
SHA1 148a3ab77e63cde3ae8b387e3d1a098a6f2852bc
SHA512 4a0333116e17a86fa75897c92454d3c1a024fe2357de4945ada7cfa0634775aa33343f3a65f2d0618c2643d383ce3edca123455e40e59cd95901a9cd0eca21d9
TLSH
T14C415B58A6F91108B3B7BF56ABF6B96E447F7E762F06C06E10010D4E0663A44C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download