ad3cc24a66bae714bcb1536ba2be070d636f61bbdfedf1e66de4d2a610a4f9e1

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Login - Used Airsoft Guns Paintball Guns and Air Rifles_files/a_003.htm
Size 108B
Sample260728-ap8rdseb49
SHA256 ad3cc24a66bae714bcb1536ba2be070d636f61bbdfedf1e66de4d2a610a4f9e1
MD5 67c58a38087e1a243fd14984f663b520
SHA1 d39158107e8711b6d9fbe13be4a3a3156f571e08
SHA512 5cf5428985e4315f7d19fa546e038cbce88a13149772002b4e76dce223270b74313f8fa246368d2486bd06008986671f44a0bf6e1fe5847a23fa8fd2375a4d81
TLSH
T1AFB012F51842000FB660FBE04CCEF2184801C910F0098C40A49031FD54CD70DD8D3790
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5044	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296719603544990"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{27232C00-50CA-4EE1-8DBC-9E3CBFCA9B36}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 2452	3056	msedge.exe	86
PID 3056 wrote to memory of 5044	3056	msedge.exe	87
PID 3056 wrote to memory of 2128	3056	msedge.exe	90
PID 3056 wrote to memory of 2128	3056	msedge.exe	90
PID 3056 wrote to memory of 1144	3056	msedge.exe	88
PID 3056 wrote to memory of 1144	3056	msedge.exe	88
PID 3056 wrote to memory of 1144	3056	msedge.exe	88
PID 3056 wrote to memory of 740	3056	msedge.exe	92
PID 3056 wrote to memory of 752	3056	msedge.exe	91
PID 3056 wrote to memory of 740	3056	msedge.exe	92
PID 3056 wrote to memory of 740	3056	msedge.exe	92
PID 3056 wrote to memory of 752	3056	msedge.exe	91
PID 3056 wrote to memory of 752	3056	msedge.exe	91
PID 3056 wrote to memory of 860	3056	msedge.exe	94
PID 3056 wrote to memory of 860	3056	msedge.exe	94
PID 3056 wrote to memory of 860	3056	msedge.exe	94
PID 3056 wrote to memory of 2180	3056	msedge.exe	93
PID 3056 wrote to memory of 2180	3056	msedge.exe	93
PID 3056 wrote to memory of 2180	3056	msedge.exe	93
PID 3056 wrote to memory of 3160	3056	msedge.exe	98
PID 3056 wrote to memory of 3160	3056	msedge.exe	98
PID 3056 wrote to memory of 3932	3056	msedge.exe	99
PID 3056 wrote to memory of 3932	3056	msedge.exe	99
PID 3056 wrote to memory of 1428	3056	msedge.exe	101
PID 3056 wrote to memory of 3264	3056	msedge.exe	112
PID 3056 wrote to memory of 2076	3056	msedge.exe	113
PID 3056 wrote to memory of 3816	3056	msedge.exe	114
PID 3056 wrote to memory of 2724	3056	msedge.exe	115
PID 3056 wrote to memory of 2724	3056	msedge.exe	115
PID 3056 wrote to memory of 1944	3056	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Login - Used Airsoft Guns Paintball Guns and Air Rifles_files\a_003.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd51a5c188,0x7ffd51a5c194,0x7ffd51a5c1a0
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,16315528441125891680,16744407963526480261,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,17532003343940049145,4330648219937284767,262144 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,14189719476315762672,3019571329300772601,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,11881330859224020099,437019698090235944,2097152 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,10598758977376883838,237437787635028503,2097152 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,9851622549009750011,4660756836255393828,2097152 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,15996034465653137602,17569265878530656955,2097152 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3732,i,10935717419708425552,16218686827983302962,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,9498000286807299627,9139703499474397384,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,17185907480621545051,14792893185077858693,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,17185907480621545051,14792893185077858693,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,11606789354073765870,11318110296944131654,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,7579117586928274538,10432406815773305246,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,17305634246615707942,6766121671784316763,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,18019546409722131995,9126820067900706913,524288 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,4869848067635364599,14108282674892338976,262144 --field-trial-handle=2232,i,13919744076161588421,11259533861932559438,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5ca41790b752f6ba3c4e1ac5a851c5dcaccd9cf53038820c9dc48e61a8a26daa
MD5 31dc984a657dea71d6dc68294b65ff9f
SHA1 6bee6a3cac96a1e9a1c5dc89c99a87a6650ae4e6
SHA512 2ac911807f961c91e49fefde7c6ee718cbc3411027177ef3166534b737cd2a23ebf47d811063b8731c6d94be56bc2e3e20512372c6d11e42261e96561565cdea
TLSH
T1C2813035028E0091C75DA2B9FFC10300F772A2EBFF97AD76C592A97C990375C850AC45
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5853f7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5853f7.TMP
Size 3KB
SHA256 7e57b345e3b23010a30b5e62c7d283256343196fa94c68643873ae292cad9e53
MD5 350fd78d11f51b4fdb54fede4ab7e68d
SHA1 3ec21836f4965bd067e8f095dfe0ffda0e06f464
SHA512 7bb688e6c714dd71e8e3e714e6081c1e08f77a66634a42ed3cdfbe0e4763af4c86e2954946aa39e569501e4fdf90bab133930a05a2a23589cf49f39f87bd59f4
TLSH
T135813035028E0091C75DA1B9FFD10300F772A2EBFF97AD76C4A2997C980375C891AC45
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0e340fc2825eab57565badd51056aba13c82540cd7172d47c3e316870518f19b
MD5 a77bc524c20d711eddec1ab6a687ad10
SHA1 1189b7e1d81768e07f493899bbe331a50aecc080
SHA512 660897929d5facd7822a8b28b3d1763408bb724261a41ee1b0c363e162684a2d7ebc06636b08ee7f9b3eb0c7550b89823fa2f7f349b4ae8e72aa0d6fd5fef4a4
TLSH
T180117DB3C3D5C5AE894116F06A28AE2BDE2D0906832C7D25C9D4EF1793F3475D10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5983e4ad1df0db9b4d5fdd3857935736f9da4fdef7a0a6e8e36d4be539a06f3b
MD5 5690b0c7db8c3d625d29d43358c26615
SHA1 5e09ad284e1dcf01f14f0ac681a30e9a8abcb976
SHA512 78d3fd5561e4d59e3636157a2cec53653609548e74b60c26e291e4cf755c819bc345c5ea862dbd6460bc2cfc4b7bc9e4b1b67e4b14bb2461e83f4137848a9fb8
SSDEEP 192:sxZRRDyM/jK1Ml8UQkk8/fmstJaCHEl1IdpH2HW6+WNGYzRH7n0TCIg5gJ:sxZRlq/8/fmstJaCHEgWHbGgtm
TLSH
T1D952E8166A349977CCDBD208FA417F53D6F95472D2940E48AAFCCA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0b957435893f12867750cefe22d6af42186090b6cb178db915f8fb4871e81777
MD5 834f87fd85264eab87b16aff33b829cd
SHA1 d6696db13ef39671a4de2830456310f659dbc5d0
SHA512 2d8c7206a4776e226e54c95c5bd088c96d995ada8c8c4a9261c574683d0c5d8c9d40336b6a2cde3e9f2e87759bd7a74f4a679d02ea698a099c2e239ddea8790d
SSDEEP 192:sxZRRDyM/jK1Ml8Mk8/fmseJaeEl1Idpd2HW6+WNGYzQE7n0TCIgrJ:sxZRlM8/fmseJaeEg0HbGCt9
TLSH
T12E42F8166A34997BCCDBD208FA517F53D6F81472D2900E48A9FCDA0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 719a38fbc51e4fe81f94072843e4855139855e1fa71be49ca95129caa1fbeac8
MD5 973f63a04f90a6b95a58d5636e594b1e
SHA1 97aadda26da6fe04b93099e48d57e2c398b45655
SHA512 fb55c1a09e96c4a6930db3ac51c488990992d322b97b2db005ddddf69eaf830925439a024531dd089eb69d663ad0b458379d01b9c4b35c8d6dfd46f5500bfa0c
SSDEEP 768:EXW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjOroINidYE:EXW7kf0Wvqidau1jaa5LA3jFAE
TLSH
T185D2FA3B680CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c698d3232b4f9df2dae95388d42f0daccbf43f0708cba9e66eaa2ff2928a03e3
MD5 61ce1cc6c992866962adb42205a5b773
SHA1 7c171cbbbfa9594131e820fe25d1d2970bc416a5
SHA512 a5539b03c641e49af0e755de25d02004c946780229fb450456388660965103b4c63afa323702037d8355f5034a6e47f6ca74ae8fbaa1e334e8bdc789144fcd40
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTbaIfK/qA7yy0TwkaeykCehPIhckK4BQSkME0jBa3IIE:KIbCKcba0K/qmOVGKmcJIQKD
TLSH
T105913E02743E4612387D2808A66685668E8271A33469A4FF7BB900711F77F114DFEDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

357a019d-3e3a-42f7-88d8-f81af9a549e1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\357a019d-3e3a-42f7-88d8-f81af9a549e1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7bd1a613f61ae8892052f0656e3800c3fd711c7122b11293d6f6a7c3e57cd9a1
MD5 61efff32337d7f7f8ae0a35ba37d863a
SHA1 aedd909bf5d10afb36d03e8625aba21619b0b9ec
SHA512 0a0f1b22ca4ead88949d943a51a23a71ce839c91255cfc5251b2fefb0a992b64b60108d50c3ff24923134355e6a95fb8d245dc498ca91a6f0ff90d5587e8ccbb
SSDEEP 384:XZcIhsNiyClrb+vk3dMjCEJrnMGOObjI9G6w76:fhftrAi6hnMG29M6
TLSH
T1D6929E36AC349D379962B151F4863B175FF89137E7C82F88B2EDEB0C06A75AC1312816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 20ebf4f0436bee57fbc119080761761d1c89f895c07d846fd65da7d58b66c9d3
MD5 ac8bc1b320a0a0d05e7f6c8f123d1550
SHA1 dce6916248215bb5cc8eba69dceda67eb02a394a
SHA512 2a4654dbdbecde1aefcc5413433b964bc0ae46a93a3360cb01129dd720b3902f03eb0df58fec542c83869af3edee255affa386c69fedb82130f3448a04478490
SSDEEP 384:niFiZcI6zsNiK8TUNTUlIlzlrb+vk3dMjCEJrkMGOObjI9G6w76:iFQSfKwg3rAi6hkMG29M6
TLSH
T1C2A28D339C64C93BAEA6AA51F58A36039FF49177D7D86A94F3DCEB0C01A71AC0306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0534bf630444dd19522bcfd3993369d5cb7ed143452bf5cacb6afb2441fde957
MD5 788242e5fac5968c85cf3f58a7b009e1
SHA1 7b085e427605022a8c890da6a4dc613d7eb8f739
SHA512 cc13206be116b296f5aec9d33c094a9d268e8cc4f28befdbeb4849af4e4f915629efb958601cf7ac6fd5b89dd17a6e670eb079da61323b617742b9187f08d027
SSDEEP 192:MONt64BAQmiUye1hW5GBPKnn+FdGN9Q1aDM9T8U6:MONt6eAlXWMdMRMN8U6
TLSH
T1BF02F935AC796C7B9EB2AE45F4863B176FD8103BE6D45B54E6E82B0C01D765C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 c8bc5d67cbb015313f072c2e2fd6498589865d5ac5f6bfafa9e4cd18797ffddd
MD5 049ab78c40ffd8bf8fd5f816eed70797
SHA1 a4cd6ae72854939864aed81c1617bd99659a8e84
SHA512 fb5251079d3974b90c304545cb47eaf9f6db16dcb1edd4f941f12785793cf4db2f575ab9c87e831bb563f15ac66dfb25b648dd8bcbee50bd9e5b9456d791ae76
SSDEEP 384:mZcIhsNiyzlrb+vk3dMjCEJrnMGOObjI9G6w76:0hf2rAi6hnMG29M6
TLSH
T10D929E36AC349D379962B151F4863B175FF89137E7C82F84B2EDEB0C05A75AC1312816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 32c270bf494c2fd1e50097b49b460d7ca33e1e15a7fda962b3e3c036d9205508
MD5 5efea64f696e44d14ecde5d1a8516330
SHA1 cc1ecfd54a39de1aef87aebd7b702a165063f4bd
SHA512 21fae52ad8132022cb6f7f7b6dd3d0ca5b32d7a3519f88d2bfb670b6e77349f84b52978d2466395a1937e1c5d0fea37b76cd7a253df38a7c7965d84cc729490a
SSDEEP 192:sONOv64BnQmiUy3hk5GBPKnn+FdGN9Q8XFC1SJrQWwM6qhoU6:sONOv6eJckMdMjCEJr2MGU6
TLSH
T137121936AC745C3B5DA2B591F48736035FA44137EBC96B90F2EC6B0C01EB6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 75fafcac5dee58a6f30169a9271dbc507ab22b22ee8c1a4ace7993258feb4dfb
MD5 dd32bbf7645561912c312d196b4c42a4
SHA1 a0b4dff39191e88bf95e43c8754f28820b1991be
SHA512 891bd2da20f548152735816e15fa0c859de312f8a72e8775f028d0e741953f8f876c0c09e817f04c50f887dfca82aacafbd359216b9a094518350bbdcac0d60f
TLSH
T158412998A6EA110873777E5A9FF2A8AE087FBD372F07D45D00110D4F0662A40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download