d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dicktok.html
Size 548B
Sample260727-vrtepsan4s
SHA256 d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090
MD5 370e16c3b7dba286cff055f93b9a94d8
SHA1 65f3537c3c798f7da146c55aef536f7b5d0cb943
SHA512 75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966
TLSH
T102F0909F5F12287F2E238571F4C35169CF680A57FB9925E28748011F7ACA04549F1FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4604	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296460338504644"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{5A5ADD3C-2A3D-4E26-A22A-0C709D9E855A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe
3980	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3980 wrote to memory of 4148	3980	msedge.exe	85
PID 3980 wrote to memory of 4604	3980	msedge.exe	86
PID 3980 wrote to memory of 2132	3980	msedge.exe	87
PID 3980 wrote to memory of 2132	3980	msedge.exe	87
PID 3980 wrote to memory of 2132	3980	msedge.exe	87
PID 3980 wrote to memory of 3968	3980	msedge.exe	88
PID 3980 wrote to memory of 3968	3980	msedge.exe	88
PID 3980 wrote to memory of 436	3980	msedge.exe	89
PID 3980 wrote to memory of 436	3980	msedge.exe	89
PID 3980 wrote to memory of 1452	3980	msedge.exe	90
PID 3980 wrote to memory of 436	3980	msedge.exe	89
PID 3980 wrote to memory of 1452	3980	msedge.exe	90
PID 3980 wrote to memory of 1452	3980	msedge.exe	90
PID 3980 wrote to memory of 1244	3980	msedge.exe	92
PID 3980 wrote to memory of 1244	3980	msedge.exe	92
PID 3980 wrote to memory of 1244	3980	msedge.exe	92
PID 3980 wrote to memory of 4460	3980	msedge.exe	93
PID 3980 wrote to memory of 4460	3980	msedge.exe	93
PID 3980 wrote to memory of 4460	3980	msedge.exe	93
PID 3980 wrote to memory of 4116	3980	msedge.exe	97
PID 3980 wrote to memory of 2648	3980	msedge.exe	98
PID 3980 wrote to memory of 4116	3980	msedge.exe	97
PID 3980 wrote to memory of 2648	3980	msedge.exe	98
PID 3980 wrote to memory of 4044	3980	msedge.exe	100
PID 3980 wrote to memory of 3132	3980	msedge.exe	103
PID 3980 wrote to memory of 3804	3980	msedge.exe	104
PID 3980 wrote to memory of 1912	3980	msedge.exe	105
PID 3980 wrote to memory of 3808	3980	msedge.exe	112
PID 3980 wrote to memory of 3808	3980	msedge.exe	112
PID 3980 wrote to memory of 4876	3980	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\dicktok.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x264,0x7ffc3d9ec188,0x7ffc3d9ec194,0x7ffc3d9ec1a0
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,16835394339380735669,1770817113105881221,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,14787388573702053099,3942967243934266729,262144 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,3582717137793322668,12234957904713664741,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,9603263094937922258,9773916551935770679,2097152 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,10122437120662478453,16310202936934022611,2097152 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,842714120701536036,967545242986828189,2097152 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,1964008481376335713,17851070877469932692,2097152 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,15570901021943012749,8100034705214969088,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5717810785088538072,2075594166247376649,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17980743765203735801,6390811734338612333,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,17980743765203735801,6390811734338612333,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,9532453466736804752,15775715681165920999,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,2327930443304760503,6611843323652181065,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,9754670440814832938,17370711347205864930,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6432,i,13598263685233892166,12845987891755772323,524288 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,14536660676538273875,6749261986611820389,262144 --field-trial-handle=2276,i,11516718469020734383,14416462087648927938,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4904fde429c46252b9aeba96dee8f5fb2f23df2aae8e85855a7e7490e65b8e71
MD5 6640f5c0d11d4c143aa1ef99191dec6d
SHA1 3b33d5a9105282ee66c85a97309c1fb4947333ab
SHA512 cdad684d662bd106d21e63bf8ca8f33383cf7222032bc88f0d89fbbac615cfe23507395293a13bd65090070c0ee06e5e823fc769d74cdcaf82bac70701934bcd
TLSH
T1607181391286C8E1F3720132BCE9525EBB73B5C9F9A7AEE151D0BC372508FA2960715C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584ac0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584ac0.TMP
Size 3KB
SHA256 fe4d117168e061dc9b5cf6fa2e981636cb29ed8491fb4948e5793dfa02cfc504
MD5 334dd91540d0fb47b28c508c77020d4f
SHA1 7f95fbd9a065ae862e95b0c4d42632e567eeb9e0
SHA512 125e93e5b8bf0266259c6a95dd4f474a8450c2814bcb2abccf0f07a4346c82e7b64ca8f9aa16b34cd6187be497f0b67b51a22e4fe7dd48b4493af0db5cee94cb
TLSH
T10B7170351286C8E1F3710032BCE9526EBB73B5C9F9A7AEE251D0BC372508F92965715C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 b7da72967376d469df951d4e5a78aad302b75dc0890bddee0eb013659533a894
MD5 8fbb1edddf72d29b0526516583117de0
SHA1 381e0d650952f89b0ca8671bdbccd26e28689416
SHA512 7203d1ce3ef7deb2b2b54e968a98a6bba6db84af3b8421907de96d9a844e43193757fe9e3e641c0ba7442456cdd766adb4dd757d12acd90b2d0299f3dca00e98
TLSH
T1F80190B7C3E885EE8A0052F06A149F1BDE2D0906831C7C56C5D4AF1B93F3475E10145F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5cfe9f48a0097175faa67f68a79c069047455434c622c3f5281f3586bc284ea1
MD5 839768c56a97f7a5d7ac18bf784e866e
SHA1 66a9bba99d7713c020237ef60379ae51448f3732
SHA512 a6413435deaafa9330d6f187b124a6594fdfaaf02fbda75ba0a4cd9f9980763cf5ff1ae57385ae8d8826e8b86288d32c0db67ab337c2dc93e79385a365af81a1
SSDEEP 192:sxZfRuyM/jK1Ml8Mk+/fAsqjmm2Idpd4HW6+WNGYIkncuIgrJ:sxZf4M+/fAsqjmm3eHbGg9
TLSH
T1C342E716AA349977CCDBD209FA55BF53D6F91472D2900E44A9FCDA0C04E6AEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 355e9c74c1fe861bd1c19193758ed41443a78b1292971a5300a0bb42eef03d7b
MD5 b4b84ac1826056e30636b39a1e62997b
SHA1 d60faf62fbcc0b782cf882c73f02ceb101bf462d
SHA512 9cb18d1c96d465f8c23538d797d47db5a246adb6a74a6da3461ba6b18135933356381f94eb47de2e2b6b583f98406b126b9d1f804a90e43e93c2f1b0805ae226
SSDEEP 192:sxZfRuyM/jK1Ml8UQeik+/fAsRjm82IdpH4HW6+WNGYIl64uIg5xJ:sxZf4qg+/fAsRjm83YHbG6d
TLSH
T19852F816AA349977CCDBD20DFA45BF53D6F91472D2900E44AAFCDA0C04E6AEC220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f02977d64ab878d1cbfde360704c865e8d2c714a03fdb51f6a7f36cc8b7d2cd1
MD5 fbc70c9b6bb06dc42ef514f28f48d88a
SHA1 fb846f4a22c585c3c02710b9db75b989d4c5cd8f
SHA512 aa4f9b2a3e97e4d7b8d8c511d36d5b6ea5f6cf366dd21f0b40ad8f429ad0e07cabb1bc50dd44cdcecc82342bb1694941edec0fb2baaab915d8c40798ca76fc1e
SSDEEP 768:UysqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9vroRTa:UysqxXlWvJD6Tu1ja54LAs98R+
TLSH
T18BD21B3B694CC77E4F840E9DEC266FD76ED801CBA6988D4447FA880C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 45c0e1a982b647255c8a403add35bdfbc9806bc98be59d89841c4d5396b0de8d
MD5 aad6a36af6eebb521a5a0f5b1520d981
SHA1 97fa07de113231d46914cfbce20598888102454f
SHA512 b94bda54ab5bf0bb884c05762819c9ec65a8775a0b1c9cd2d510b043953d74b89289b0bab4f0de6c58443437f61c185cf680e8e3afc500a89afb9b49781839b6
SSDEEP 96:KYbaKYIK6G0K/ai2t6KWElUgKxmSONaK2Aq:ExH3ZFDNP
TLSH
T14AE1361B3136076238BE2988B2A6C93B4F4231637118A57F7FB950A55E6EE110DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9bf11c9b9a4dd24909cdfdad5225efa83455aed885ae932d9fd2eb213b0b8147
MD5 6c76d6551b015e73dfadf48d4bd8fef3
SHA1 88c22d5ec9a2bba6f4d59ed0d1bfb2df5b4de681
SHA512 40663da7f8afdda58e10e11e6824b0bc65185e06ada2152fdbf367546f1ccefba93b57f68e1da0be15d9a196c258a8fdded043c7247a61ee000ab6652523a5c0
SSDEEP 384:rZcIhsN+VnbRkSVRN5Oj9z9d+2fuBaEOObjI9G6w7b5:zh+gH5Oj9z9dlmBaE29Mb5
TLSH
T1CC928E36AC344D7699F7A551F48B35134FF8A07BD7C82B84E0EDAB0C06DA9AC531A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b80810c429b8026c57300c7288c474b1c70435448a15f32b8c7cc67f2026c8d0
MD5 ac4d3e116861059cebd43b582f34275c
SHA1 df6b3152e60a2a434ff3db37ad032bb525c9d5b5
SHA512 84a3d6b7a2250bc908502006d1852382e7da2f955b88dbdca94a7ddd717b0af143a2998205763d6e2d26a0e7c9213105a4bbccd2e56e4827913ad8b4e27799b7
SSDEEP 384:1ZcIWzsN+YnbRkSVRN5Oj9z9d+2fu8aEOObjI9G6w7b5:Nm1gH5Oj9z9dlm8aE29Mb5
TLSH
T181927E36AC344D7399F7A555F58B35134FF8A07BD7C82B80E1EDAB0C06DA9AC530A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f6cd2f8a2321a14ddb9ff8d73e3fdfd72e7332f6177e181ef3f5015caf47eb9e
MD5 0912ab59c1108222f1a685dc1592e39e
SHA1 f2e7285eaa05db99af90ac9da9c075c387e11457
SHA512 a6ae37e36c3234bdaddc3939c3e30f02bafd99f54efe9a16a1de46f2900e142812eb8a90100d4e68eed531572b7316a150513392e7256a877907332d76ca4f8d
SSDEEP 192:tONiD6JkRtQmiUyU4W+RN5Om5o92h36CRXU6:tONiD6Ur0W+RN5Oj9+1U6
TLSH
T12802E8356D386C779EF26E4AB98737175FA4207BE9852F80D6E81B0C01D769C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 12603ac7c5df2511c7c8745bd3f3b5ab3d348dbc1beae37da416e84c5085848c
MD5 a1585a649f3f4c7754a3ab4ba591136d
SHA1 a6e7500303ecc40a9de92cec020c7023bb5f8ea3
SHA512 9b31a359596dab14bdbd4f3196d9acc4fe9fa8483acebab3ab2007c370dad7a5f8c072f57a4b72535666420479f52875c3f38c49d5a5cc513c707c2c5dd29462
SSDEEP 384:wZcIhsN+YnbRkSVRN5Oj9z9d+2fuBaEOObjI9G6w7b5:Oh1gH5Oj9z9dlmBaE29Mb5
TLSH
T19C928E36AC344D7299F7A551F58B35134FF8A07BD7C82B80E1EDAB0C06DA9AC531A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 30ab028b1dc71553d31ed7bcfffa80ac0c33f0dc081cf36a9d8872467e0644be
MD5 a2c2d3ac351bf307f4cc47ffc76037df
SHA1 ff3e35b4abf7bdc9e117b65bfb80f2d523a4e788
SHA512 23cfbb9de3369f8674455e11730c6313ff83506598afab2714469efeac8e667db92d59bcf1085f69bd0740386400e188733419d2dcbb6823035d3350461d2e5b
SSDEEP 192:bONn6JkRQQmiUy44O+RN5Om5o9nz9d+2fuyVc60qttEU6:bONn6UQuO+RN5Oj9z9d+2fuVaEU6
TLSH
T102121A366C385C775EE26946F48735134FA9516BEB8A6F90D1DC2F0C02EFA9C234B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 06c40a31b64cee407e863aeb811f96c8efcda56c3f0f94c142bd997dc050dd02
MD5 5edf43c8483af1782004419c11138aee
SHA1 395e6024c29b57d32071e8bcf7733899c73b19ab
SHA512 5ce650944632d62afec54c50a794b795b5010fef871f94d9c84019dadc3c17cb786b6a53884e2ae29986d61256d1aac44e2f96a1a93c04bd4343b7bf3179b25d
TLSH
T1C541F859B6F91148B3777E5A9FF7A46E887FB9772E06C4AE10110E4F0A63A40C861733
MD5 SHA1 SHA512 TLSH

Submit Download