f8061974c11e2a4aae32f973e959135775b9275b4af4c09b3308fca002992bab

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 00:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
public/test-upvote.html
Size 7KB
Sample260727-asmnbstcnb
SHA256 f8061974c11e2a4aae32f973e959135775b9275b4af4c09b3308fca002992bab
MD5 1e34d3082013296d30d69cd0dd6ad04b
SHA1 4f4abee88730f7fe8be6b666e2bf46881262c26a
SHA512 c3a2739d52189e74091ef6e595724b099db854f8bba13e62454a8ce4445373a6da0091ea4d35660981939588bb1ec6760b31b6542d990f27447a0da20ff9f3cc
SSDEEP 192:vrFYOQ09E8yk7pJVaFUT5sYA8hqUi06jgyog:vrFKb8hq5B
TLSH
T112F1444EE1F705311957A0FA7B57B3543A32C907B045ED107ACC83846F89E9998EB6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4688	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134295857229364219"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{7B092495-38B9-4A83-B2C7-CA63F94B78AF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 756 wrote to memory of 3128	756	msedge.exe	85
PID 756 wrote to memory of 4688	756	msedge.exe	86
PID 756 wrote to memory of 4576	756	msedge.exe	88
PID 756 wrote to memory of 4576	756	msedge.exe	88
PID 756 wrote to memory of 3356	756	msedge.exe	87
PID 756 wrote to memory of 3356	756	msedge.exe	87
PID 756 wrote to memory of 3356	756	msedge.exe	87
PID 756 wrote to memory of 4388	756	msedge.exe	90
PID 756 wrote to memory of 4388	756	msedge.exe	90
PID 756 wrote to memory of 4388	756	msedge.exe	90
PID 756 wrote to memory of 5024	756	msedge.exe	91
PID 756 wrote to memory of 5024	756	msedge.exe	91
PID 756 wrote to memory of 5024	756	msedge.exe	91
PID 756 wrote to memory of 1976	756	msedge.exe	92
PID 756 wrote to memory of 1976	756	msedge.exe	92
PID 756 wrote to memory of 1976	756	msedge.exe	92
PID 756 wrote to memory of 4872	756	msedge.exe	93
PID 756 wrote to memory of 4872	756	msedge.exe	93
PID 756 wrote to memory of 4872	756	msedge.exe	93
PID 756 wrote to memory of 3152	756	msedge.exe	98
PID 756 wrote to memory of 3152	756	msedge.exe	98
PID 756 wrote to memory of 4868	756	msedge.exe	97
PID 756 wrote to memory of 4868	756	msedge.exe	97
PID 756 wrote to memory of 4988	756	msedge.exe	100
PID 756 wrote to memory of 2784	756	msedge.exe	106
PID 756 wrote to memory of 2408	756	msedge.exe	107
PID 756 wrote to memory of 4252	756	msedge.exe	108
PID 756 wrote to memory of 2480	756	msedge.exe	112
PID 756 wrote to memory of 2480	756	msedge.exe	112
PID 756 wrote to memory of 1704	756	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\public\test-upvote.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbecdfc188,0x7ffbecdfc194,0x7ffbecdfc1a0
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,10752756828773491985,18092275719803854307,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,17135064228992970744,9292208781882507092,262144 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:2
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,17779460987868467610,10290820250666587734,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,3363510387774552952,16038995436258729110,2097152 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,6070101330931848496,9395996713614750212,2097152 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,1213358878721491179,15092855821947360680,2097152 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,14527551791719579674,10962501613542358040,2097152 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,957469295580955485,3252325533079647370,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,9900181322606024175,13912224391794654400,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10865595869474914928,6559665244014505155,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,10865595869474914928,6559665244014505155,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,15545036734759314932,8255523661565828168,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,16092904358534558216,10797312444555290235,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,7315900335466258903,10097996688501661925,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1044,i,13814268470884636937,13087361678724639530,524288 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:8
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5996,i,8782518536403410300,3099032680119190898,262144 --field-trial-handle=2396,i,1295302799139066817,9279411681157025134,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 398857e60e33102c0621fb0aa5e90c40de8761a38bd28402fc905953555db924
MD5 7a76ad44383257e9cc434fd47986ad55
SHA1 b5e06d9644e01ef30ea492e9eb5c70721feb012c
SHA512 fd4c40abf559e54a013d52f5200c42903c177a8f610b73049c64095d3803624fa018ec9c4ccca4e30b1d3d895fdc964bb4b9b2cd0d095fb7fc432becea51eee4
TLSH
T1A771A2BB410287AFDB2DA2FD60DE71503C70A4D9F9335D569E5047353917B0242CEA88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5845be.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5845be.TMP
Size 3KB
SHA256 f4e12351f1d1e28c286cc6e7bcde9e5a5dde0c9c280c64351869f0e48616e0b3
MD5 4c8bc4e8577ee5674cbb64ab2497d0a9
SHA1 b95e2b122878bdabf0ca00bd0497984ce1d5f2e4
SHA512 ca78d9043761191918099bbedf44f273d5d196f09c5be55e52196277830d2a46c2abaff6d608ba55d349cd71a935fdd068f0cb6a0a43140d2ca97c2501d87416
TLSH
T1A271A2BB410287AFDB2DA2FD64DE71603C70A4D9F9335D569E5047353917B0142CEA88
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 01207a54d0a875caba5a2877aca52656b0daa22ed0900e658927630a0eb6e4eb
MD5 0a482ac930701c9469ec01510489e56b
SHA1 10e8f798ce75ca87560da2bd8c6124f3a1075de8
SHA512 c84e3c6cb1dedc60728c67955703fbd4673efe5cb0ff3d55b608482fdbe76ce1733f7d30221079bda6849866cc16d9b7fd4ccfcea860d390cc35f0358c643703
TLSH
T18E115BB3C3D5856E890556F06A24AE1BDE2D0605821C7C1A85D4EF1BD3F3065E10295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a77607eda16be4cf1c6c8bd2cca273498fe3bded9811c0e2e12390eef044cb60
MD5 814a06bc5e76362b120302772bfb4bbc
SHA1 eedbfc4293e1e2e2c82a4634f19021c78e82f2ef
SHA512 580095c18143eee8948bd84d774df34ed8049cf51bb322c16583eea3a605a789e33821affc6fe95f80614b6205328dfc8b51a7c60508d944192bfc69ed8237c2
SSDEEP 192:sxZaRHyM/jK1Ml8Mk//fvsI2VRIdpdnHW6+WNGYIkErohIgrJ:sxZatM//fvsrVaxHbGm9
TLSH
T15042C6166B34597BCCDBD209FA45BF53D6F91472E2900E48A9FCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 eaf6aaf5f03f3ce01622f22340843cf9ee12b6f46d74893f60b1bdd80dac5f90
MD5 c8df7d323cee61473cbb1c1b6f042c0f
SHA1 411375b3ccb93794a629af6bdf7e882d1a94b238
SHA512 c6677ed0fda1da2b9c93f11775c7491d76cdf94be54e28d7204f5b73b44b9ef6c2b2ec88cc701e6dd6decad981e45fdd59c364131aab29db502f80924ce32c1a
SSDEEP 192:sxZaRHyM/jK1Ml8UQ1k//fvsHhR2LRIdpHnHW6+WNGYIlivrohIg5sJ:sxZatq+//fvsyLaHHbGXBG
TLSH
T11152C516AA38597BCCDBD209BA457F53D6F51472E2900E48A9FCDA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 1f90ac16cd0c3197d1f531aaaf16e905e8be707a158a2bf4643c1469c2f6ee36
MD5 86fc1e88dbd962d93b45a90bfaa94e16
SHA1 b2aa70d0d2a2f45e79bfdb3332c9de21688b6e0f
SHA512 807545a5440f7af49e71dca66428b75e13e04be7f5dc528d7d6daf7d07dba8180407949356f2c66a27fbb0c426d1a5584b515754f7498c16a1ae4594daf5e621
SSDEEP 768:rzsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9orojLS:rzsqxXlWvJD6Tu1ja54LAs9Tjm
TLSH
T138D21C3B694CC77E4F840E5CEC266FD66ED801CBA6988D4447FA884C03CB3EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e628e1292a02ce0ee714a51554d3085f2d64e1405242d8fdd5f65fb2f0a0e37c
MD5 d37f6004355ffb46aad76ad6e3c511c2
SHA1 26740f54bd6a9979cbdcc0664e82c2507894ec46
SHA512 58a06a5c912228afde53a776bbc488baca07d82cfaee52ffa2f14ac51cc7e2d255072c05cca5c3ad13e366e1c776683763b0561e5e135c2dd137cc92bd1aac31
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyZ+I/Kjiojy5EIfKdmsf:KYbaKYIK6+EKji2qEAKdm8
TLSH
T17191164E363A0212383D2958B2A796374F423A637018A46F3FB941E55F6AF121CFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58e23d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58e23d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a7ff002ec06ff605e88a5377c8d60abeaa73595c1c3be1c529fe07c2d4af1048
MD5 b660d34a371ab70d8316a8d5de343fa4
SHA1 f04fe038bd34acb81943a94e21627bf2be304869
SHA512 1ce60acf34b0e3a35eeea8c605ed7fbd1dfc280b0ac433dbeea53de4b5994872ea4c238d606e6208abfad22bccd10eb219bcf70cffb444ace56ca2a3f5a0c876
SSDEEP 384:1ZcIhsNr+H+WbM4NoVRN0OKq9BtOObjI9G6w7qw:NhdJNeH0OB9Bt29Mqw
TLSH
T1C5928D37AC344C769AF7A511F58735135EF89037D7C82F84A1DE6F0C05DA9AC131A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 66de79cadf7e25754a860999d37258fe937f569207f866dc5f7e936ddc1ccbf3
MD5 cd1b0c52d5d6995748661e6e638334b1
SHA1 ac17543fd327c0e659a06a65592ffa2b122a0ea9
SHA512 5744bbe963ee1ad8898d3c3ab0472df9eb5fdbc4ee00ead3bba591f8ffb9ee3fe59338b2d0db27f11046f2b900f200d296f5fcda7cba2b1e20f111323dce775a
SSDEEP 384:diFiZcI/zsN18TUNTUlIlnH+WbM4NoVRN0OKq9ytOObjI9G6w7qw:UFQ7MwgxJNeH0OB9yt29Mqw
TLSH
T105A26C33AC248D7BAEF79A11F98A32138EF54077D6D5AE84A2D9AF0C01DB59C130AD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c489a98c13bb1041cc5cadb07190b3ccbe573af5fabe952b675c8930f1d8a67a
MD5 506149aa5004d33ed9b4d62449273ec1
SHA1 9bbcfb120a0c8bfc984a721cb7a7bbbb33e89578
SHA512 678adc5baaf7e5132132c03fcac75ca21f9bae2e644af781e1379c3de8e29b984daccb252c8f8abeb65c9cab718ed3a13e51fbcd04136a2e819c4595bab326f5
SSDEEP 384:RZcIhsNrnH+WbM4NoVRN0OKq9BtOObjI9G6w7qw:5hYJNeH0OB9Bt29Mqw
TLSH
T1D6928D37AC344C769AF7A511F58735135EF89037D7C82F84A1DD6F0C05DA9AC131A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 589d53ec4afe750861f0a4ba073cd5971da079d0150cdedd9713fd06f01ff9ab
MD5 f993d5babcf1fb12d73bb704462f8365
SHA1 4b16a2828c940548dbda01aa51cdbd409dc19f1b
SHA512 91abf31da8eaf0f60002269bc755c2d6303dc7a4335b8c7c26f4d28bd6791da7409157439e6940b825c1807c1524761e57c579e4ec8fedce73a7f17bcff9c17c
SSDEEP 192:tONr6JkRtQmiUyCuW+RN0OmheR2h3ZR5U6:tONr6UrEW+RN0OKFhU6
TLSH
T19D02FA35BD381C7B9EF2AE09B94727175FA8207BE9952F80DAD41F0C01D764C1306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 06f486c56869f17b55bc9f4d1c81ff069b72d8277d3ca09333762d9036acdd0e
MD5 44dcf78ed25ee8f6b7d5993d6427383a
SHA1 d2300631d7c23dfe4f47b774e1cfa75f6e0decdf
SHA512 4714f41e275b4e8311075407c07efcf4a84c49a8f63d0cda010a3a6ff7bee899ce70f923d0a69ce4b2d03d02a17d33d0bbe21815d07fdfc458a2c0136bfc1046
SSDEEP 192:ION26JkRFQmiUyqCuY+RN0OmheRnX90VcPqw5U6:ION26UjRDY+RN0OKq9jtU6
TLSH
T10E121A36AD285C7B9EE2A944F58732135EB55137EA897F80D1DD2F0C01DF69C230A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b014619c-f468-4ad9-9ff4-0baa1ece22de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b014619c-f468-4ad9-9ff4-0baa1ece22de.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a9efd1b173c6a56b4b35c5349c5ab621b5ffed31fde751ec141791c53aa0a109
MD5 fd20d7e818bcac4c73f3b15e31b55b72
SHA1 5c52b4fa06285c45eabad30c6f748e8818551364
SHA512 23399f6faf58dfc0b95e11a938c57c4ec347fae02e135cec6f67068616dcb1c9cc46c7e49646c5cb6a96a49751ed7be1d1c82e95356a82302a4cade4d3199d72
TLSH
T14241F959A6F91148B3B72E5A9BF6686D487FB9332E16D09E10110E4E0A66F40CC72B37
MD5 SHA1 SHA512 TLSH

Submit Download