dd5e58297e1f6e431a99b7dcb523efc09f2b66c5272e576c6444ef52b9a1ec7f

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CEGIC/pages/educacion-cristiana.html
Size 10KB
Sample260727-aghj8sshpe
SHA256 dd5e58297e1f6e431a99b7dcb523efc09f2b66c5272e576c6444ef52b9a1ec7f
MD5 31067ee4bf429a343240944515fd01e1
SHA1 5af2fb8690128b6edad8d75b28dbce729dc3a2b7
SHA512 1173563227d26d3e7fe21e3b6b3f0510b8845491cac1cd01ce0624f2daed4703703015b27ef72bc11243f84493694a9b68b0fcd204a1a0ea08ed29688bdea437
SSDEEP 96:B9HFO15w4hstqm+lis+6+EiEVbP7TCS1LrS2G4y6GHRyDvV7o7I7L7d:B9lW5w4hstqm+lViE9PX91S4TGHIDv7
TLSH
T14422EF267AC410670377678D1D81DB2EB8E3419BDB1B9A0132BD6B8F9F92F04991315B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3248	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295846678819644"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{13CDA2C4-E42B-453E-AEFA-8A63321D497D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe
312	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 312 wrote to memory of 2152	312	msedge.exe	84
PID 312 wrote to memory of 3248	312	msedge.exe	86
PID 312 wrote to memory of 4380	312	msedge.exe	87
PID 312 wrote to memory of 952	312	msedge.exe	88
PID 312 wrote to memory of 4380	312	msedge.exe	87
PID 312 wrote to memory of 4380	312	msedge.exe	87
PID 312 wrote to memory of 952	312	msedge.exe	88
PID 312 wrote to memory of 3972	312	msedge.exe	89
PID 312 wrote to memory of 3972	312	msedge.exe	89
PID 312 wrote to memory of 3972	312	msedge.exe	89
PID 312 wrote to memory of 4024	312	msedge.exe	90
PID 312 wrote to memory of 4024	312	msedge.exe	90
PID 312 wrote to memory of 4024	312	msedge.exe	90
PID 312 wrote to memory of 3896	312	msedge.exe	91
PID 312 wrote to memory of 604	312	msedge.exe	92
PID 312 wrote to memory of 3896	312	msedge.exe	91
PID 312 wrote to memory of 3896	312	msedge.exe	91
PID 312 wrote to memory of 604	312	msedge.exe	92
PID 312 wrote to memory of 604	312	msedge.exe	92
PID 312 wrote to memory of 628	312	msedge.exe	97
PID 312 wrote to memory of 536	312	msedge.exe	98
PID 312 wrote to memory of 628	312	msedge.exe	97
PID 312 wrote to memory of 536	312	msedge.exe	98
PID 312 wrote to memory of 3780	312	msedge.exe	100
PID 312 wrote to memory of 3380	312	msedge.exe	103
PID 312 wrote to memory of 2544	312	msedge.exe	104
PID 312 wrote to memory of 4388	312	msedge.exe	105
PID 312 wrote to memory of 1004	312	msedge.exe	112
PID 312 wrote to memory of 1004	312	msedge.exe	112
PID 312 wrote to memory of 3396	312	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\CEGIC\pages\educacion-cristiana.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x268,0x7fff9311c188,0x7fff9311c194,0x7fff9311c1a0
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,16618251573275816896,13706427544904174263,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,10585852581591049186,683369867228575067,262144 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,1654268135560576229,3326432015152363364,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,14666261692840076287,3766902645583086067,2097152 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,8480690151802346385,3246337183731013821,2097152 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,6463438515592786458,15849006601818956848,2097152 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,8303141295317534499,2739919221098972291,2097152 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,4296596664608886258,15835148301961220313,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,4084320320844331609,16705863338563085839,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,3559304380627807776,8886402158174867863,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,3559304380627807776,8886402158174867863,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,12807107026304698990,8845985910769211856,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,9114929634070448078,6187238505639536527,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,1206898954548933556,3373082585439365607,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,7194234948704887935,5694294677985850595,524288 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6104,i,17529164066414714365,3911523847439553287,262144 --field-trial-handle=2552,i,6845441394198608366,13609064701571771824,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a3be92dd342f53bd5d7eb0d27b704e411667c337d82ac0e365cf0b0f6994f786
MD5 0fb6d68e71e7fc6398429feb88f19057
SHA1 6430f2bbdb3d330a29badaffac54f583cdb2308b
SHA512 84e80ca2f71665e037d55ead6a5c6c28151f84a3324bd183e58484f59676984770e2bcd2f78ca44b1e722f8a430ea3068befc813ee30c88c3c14660e56b62038
TLSH
T1246170394B134883F32B02F0F1C2162639B381940AA79E4A3D64D9FD692DB26CCD92CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58899d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58899d.TMP
Size 3KB
SHA256 15e08b7863e8138bf01e02c90859f1b9aed603ed22e63cd73436bf4c4d88c022
MD5 d2e810f358048edc7d028455f30dc830
SHA1 31ad1ff697a6288d18695307a0fb9502ec96f68d
SHA512 1f20c7daa2b843bb0e5773897612056cb017e47f753c611b434205d5bd8f80d3012ece4063a71f1e111ecb7beb605ddb354266938889767cf48b8070ce4e765f
TLSH
T1D66183394B134883F32B02F1F4C2162A35B3819409A79D4A3D64C9FD692DB27CCD92CD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5cc0906f9d7f0d556df1ef5b40de8e367c3b450c8e422b652c15d6dd0c37ac60
MD5 39af701c3eb5ad67a7074d6a2b41c4da
SHA1 e4aaa167d35e70d165cb5ee7644653444c1ac61f
SHA512 298eb593ae420733ef379c6be08b72ccae0d21b60887126375cbdd750e3031f988ae541acfdf87787f6790bd6accc68f92b3f61f6928857fea9ada1756a68ff7
TLSH
T17F219CF7C7D586AE891156F06A24BE2BCD1C050683283C2A89E4EF1FA7E2471D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ccfab3525f05d5ee90cb1a9816ea5b7e3200fed9163451427e6de97fd0418b81
MD5 b44adc792ee0469800713daef141475a
SHA1 f5d0e539997152f7e62d8c44c54a529d4239589f
SHA512 1d2172016edb7487da39b4ae3074a7703c646c73bf01e67e591daabe1b18fe521055203c73a2b0fdf809ad2cb62947667e3a745083bab9c55cf2720eec770895
SSDEEP 192:sxZdRIyM/jK1Ml8Mkv/fkslT8IdpdkHW6+WNGYHjTJ+jIgrJ:sxZdaMv/fkslTlaHbGuc9
TLSH
T1CB42D6166A34597BCCDBD209BA457F53D6F95473A2900E84A9FCCA0C04E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b9708fba180b850cc7dc26a9b64defa992447f964b0557a342e2107a1c91dbda
MD5 71b0582214d4af928fa4579b0f4f3b63
SHA1 b2fdff6519191b1d66c7d218bb0bc72cb0faad9a
SHA512 9971999d370413699bd3f0a3a19075a15314360e256cb496d13c4861f69034860be847b750872382891e4c85108227d002177ec414c16e3a676898ed1068d5d0
SSDEEP 192:sxZPRIyM/jK1Ml8UQjkv/fksYgLIdpHkHW6+WNGYH26o+jIg5xJ:sxZPSqIv/fksYgUEHbGBcl
TLSH
T14A52C6566A34997BCCDBD60AB9417F53D6F9447392900E84A9FCCA0C04E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3ac99f7ea00913dd5b06ed37189622236c2a59fcb4fb9f319176ea841af95caa
MD5 8c351fdb723c6089ca714ab450b010b5
SHA1 1d0ce3ba04292e18e96cef20664edf37baa07fbf
SHA512 c31c31b1ae1c55a8ea3304749ddb7c56ae37543ba6ba13ddca061080753586335f20a06bd3e372632933716f827d4472ed05160867c35beafffc82efb82a6312
SSDEEP 192:sxZPRIyM/jK1Ml8Mkv/fksYgLIdpdkHW6+WNGYHyhJ+jIg5xJ:sxZPSMv/fksYgUaHbGRcl
TLSH
T1CC52D6566A34597BCCDBD60ABA417F53D6F9547392900E84A9FCCA0C04E7BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 81968bf6182ec6d4796ee182f5be2116270648ef79b390614525e40c93f2fbaa
MD5 93e150f08d994cd440ec12f3c76fa97b
SHA1 2ab7347a25967cd5ba8da6f1115686238a1c1e5e
SHA512 c801d3965c187f5f3123149f5dd9c87c7ff18b5166d41ac48620b9732275a955d95b7afd114db9d9ac4688df514ae163b45e3fd736c90a966c71df8780af59dc
SSDEEP 768:s7UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RbroV10Wi:s7UZYTMWvg0Pou1ja7eLZmRokWi
TLSH
T15CD20B2F280CCB7E4F844E5DEC266F963ED801CB9A584D5447EA894C02CB7EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 fc9095a05b00065d640789834b635264b5c622c8fddb39916769c411a4a6fc42
MD5 e54d1dbd468a6d51db2536390312b53b
SHA1 d90bbda6bfded0919c0a7ba57407819ef122d0b7
SHA512 988f3ec56cb7249afcff024691348f62a90d29e4f2b69cf9cf04c018b7362bd9f0bf5c20f52b9b01fc7fc95234c7d6460e887574b3c51d57b9167e27042cfeb0
SSDEEP 96:KA1eK2AUkQKJW6+DuKY033yKUAyGbOKUo4:E2bppRdd
TLSH
T1F8D1384A70BA12412C7D2A489354971B8FC271633228B42B7FBD41B28D67E21DEFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfef1a3e-1305-4f9d-9043-1a522f4ab427.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bfef1a3e-1305-4f9d-9043-1a522f4ab427.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1f31a5e20595647dfe6b5deefdf94a6ab965393a219b3b01882053be58d4ab81
MD5 c2b585fd2bd8cadd9bebdc6c9502cd6b
SHA1 09d0580a30686cc1a2b0b7010c8d4c659b9dd542
SHA512 12ec9322753bcd6010b8636b7451f92fee051e820cdc33133d61c561a557c9ce6660344df158e8990a3be189363869e058dfd7b0682cd72ee51d58f9d2ef7891
SSDEEP 192:upLsNRUMfQKkAtGuUQmiU1Z/m4zX5Obd+jqjzorvmsX8ySJrm4QdcqlU8:msNRUMf9mDpzX5od+685X8tJrKd3U8
TLSH
T1EC321A36A838AC6B5EE3F595B44B36139FB45127DB892FC4D2EC1B1C00DB6AC131AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 c98a7f6aec920d9e75976c2927f0e87f8df25a10221a4a9847ea94af15907745
MD5 f719c5020477821001bbf136f55efba5
SHA1 3786341f3e4e39e0b4ca15795bf1defe1ede5ec4
SHA512 801c9a649d3eaa99314a7912cd0879219ea3db846ac313c8b41562005027f9978c50723cf2dc5b1d5453c4226db9b784c6e00d254106c5fd203315455b07ec29
SSDEEP 384:miFiZcITzsNS8TUNTUlIlN9mDpzX5od+685X8tJrcd3OObjI9G6w7/US:NFQ3/wgYRO0Ghcd29ML
TLSH
T1A7A26C739864D97BAEE7AA55F48A32138FF55177C794ABC4E3EC9B0C00975AC030AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 deb8f381ca8847b9ccfd5f5137e956b7c5f288e63f68891420a3b9179f9d6651
MD5 e5d968f4abcfd0cb2e00d50465a7f63d
SHA1 01c64d154016df815d33047a4f7a2e84995100f4
SHA512 b03a72012c503b3effda5dfda1ec2f18a9b77b61bdb98f66f5ff0567375717329a5f1b29ace61a97681598adee9ea57ff8bb8eb8d92640b82a519424ea70fa0e
SSDEEP 384:PZcIhsNRUN9mDpzX5od+685X8tJrKd3OObjI9G6w7/US:Hh4RO0GhKd29ML
TLSH
T1D7927D72A8349C7A9AE3F565B48B36174FF99137D7D81FC492EC9B0C00DA9AC0716816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a40bc89cb73aef9bf61695a680f2e8e253a5cd4403a797fb366b035ceab7d8f4
MD5 ae44537a4d4bb2d326104222d8b18686
SHA1 6503fd793242e17c77efc6f619c404e18b208d0f
SHA512 b05cba0d7c4967c25debae1bd8f933e69d5fc3887d0db9a397c96c9facb41f6c290959dc1077b155c4419b37fea51936f5593d0cb059ec15d30fdbae7625938c
SSDEEP 192:yONo61VWQmiUyyjgGX5Obd+jqjzorvmk/aH3FOgU6:yONo6WPgGX5od+68UVOgU6
TLSH
T1A202D935A8687C6B8EE3BE49B44737135FA92177EA542F84D6EC1B1C00D769C2306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a32ba014bc9d8c000365ff26e18c44b9b1bca57eeeefdae00ea33697054ffa4c
MD5 a821431040025c79bb5c06cbe06e5502
SHA1 b486c11575af8fa464dd9cf80f67f533ba636026
SHA512 dda27ff1e0bb5ffc2f8ac43d29c2db7a4dacb534c5fe01ca296624a27a12cf84e00daa718cce8483b2e387080bd9c900877bd26d19951e0de66fe457a8ddf197
SSDEEP 192:DONT61KWQmiUyTjLGX5Obd+jqjzorvmsX8ySJr6jJdcqlU6:DONT6X4LGX5od+685X8tJrWd3U6
TLSH
T18B120A36B468AC6B5ED2B985B44B31135FA95127DB856FC0D2EC2F1C00DF6AC171AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bb8fffd78ba29d9248bb9c15e0d0bf8d1d0b590988245e277f71ba783703343a
MD5 53ea12f9051e15950905b798611309ef
SHA1 8e48ac4d49aecec006db0e961d12b48cfb57d5e7
SHA512 db0bff47b5d2713dbc69f3c2294b17deb2173519e474600239bb4ef9b80c4d5c8f0eca7ad51da67967bfc4296fe877a393231da61fd29b00d7de89b876c254dc
TLSH
T1E2411858B6FA1148B3B72F5A9BF6A86D487EBD762E0BD45E00110E4F0632B40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download