hxxp://www[.]highperformanceformat[.]com

Resubmissions

29/07/2026, 02:32

260729-c1ghdsseqe3

29/07/2026, 02:30

260729-czb7aafj8z3

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 02:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.highperformanceformat.com
Sample260729-c1ghdsseqe

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1668	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297659567655078"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{067A260F-118B-4DBA-AD21-C24734667942}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 536 wrote to memory of 1372	536	msedge.exe	85
PID 536 wrote to memory of 1668	536	msedge.exe	86
PID 536 wrote to memory of 2500	536	msedge.exe	88
PID 536 wrote to memory of 2500	536	msedge.exe	88
PID 536 wrote to memory of 3360	536	msedge.exe	87
PID 536 wrote to memory of 3360	536	msedge.exe	87
PID 536 wrote to memory of 3360	536	msedge.exe	87
PID 536 wrote to memory of 2080	536	msedge.exe	90
PID 536 wrote to memory of 2080	536	msedge.exe	90
PID 536 wrote to memory of 2080	536	msedge.exe	90
PID 536 wrote to memory of 2976	536	msedge.exe	91
PID 536 wrote to memory of 2976	536	msedge.exe	91
PID 536 wrote to memory of 2976	536	msedge.exe	91
PID 536 wrote to memory of 4804	536	msedge.exe	93
PID 536 wrote to memory of 4804	536	msedge.exe	93
PID 536 wrote to memory of 4804	536	msedge.exe	93
PID 536 wrote to memory of 1584	536	msedge.exe	92
PID 536 wrote to memory of 1584	536	msedge.exe	92
PID 536 wrote to memory of 1584	536	msedge.exe	92
PID 536 wrote to memory of 4704	536	msedge.exe	99
PID 536 wrote to memory of 464	536	msedge.exe	100
PID 536 wrote to memory of 4704	536	msedge.exe	99
PID 536 wrote to memory of 464	536	msedge.exe	100
PID 536 wrote to memory of 1696	536	msedge.exe	102
PID 536 wrote to memory of 1972	536	msedge.exe	103
PID 536 wrote to memory of 1972	536	msedge.exe	103
PID 536 wrote to memory of 1972	536	msedge.exe	103
PID 536 wrote to memory of 4280	536	msedge.exe	106
PID 536 wrote to memory of 4192	536	msedge.exe	107
PID 536 wrote to memory of 2672	536	msedge.exe	108
PID 536 wrote to memory of 4708	536	msedge.exe	109
PID 536 wrote to memory of 4708	536	msedge.exe	109
PID 536 wrote to memory of 2340	536	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.highperformanceformat.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x288,0x7ff8924dc188,0x7ff8924dc194,0x7ff8924dc1a0
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,11747387078959937013,66849663615544725,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,658977118763001131,7561742784983909892,262144 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3008 /prefetch:2
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,1599001014777885090,87528836113076728,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:8
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,8920533509418114917,14251845486898445669,2097152 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,12001118126228779265,17313177718879097143,2097152 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,1041885051953820842,2401896099141376661,2097152 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,12523234253220335730,10250668240829580854,2097152 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,13454241891632723358,5397117374419333970,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,6282161685430059064,14200767726484299944,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,16214180159211713218,13541026278004253144,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,16214180159211713218,13541026278004253144,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4200,i,8794660945745081092,10775038462970729093,2097152 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,12173699051954470807,11919019048028397448,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,12017021295383421372,5783878630805009502,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,6942673761758780167,9266435249272634560,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3964 /prefetch:8
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,2088201854025178123,4723310807155464952,524288 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6036,i,10741991069519269951,11626873722227229418,262144 --field-trial-handle=3012,i,11378985530337215641,12841758744131446927,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2340

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d9c46011ea006cb7482f0cc2474eefa3bd7130ab7bfab376ba57b24a39d200ba
MD5 b52aada583f5b80e500b8c129b53b7ae
SHA1 697fa1c1c0f6c53f05dccc18cd0d7a3ca4b4a566
SHA512 913b92209ba1cb0f359df2763fa0af6589dd2b52bc28b0aae073e17a07e9fac5109131fb2db42aaf83c4eb8c95bd0510a0129b062bd3dd9b89bdf7693d78c5b9
TLSH
T1AE7193D4F1759896D3A2837DC6E1C625343597AB0B8FDD470660863DE50FBE343AE118
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f4a12f20731641fe2a066cede70663aae5837a23a9833d35a9bfd493fde11a5a
MD5 f4cd81476c127ec96c46967795a36b45
SHA1 54a293ae3a820e228fcf7b2b1b7438c58936b369
SHA512 be4ec3ee77a3370187ee40a505fae03634a7cbbab4b0e77102a84e98bc57ce82721908a31657b9d28501ab879132a9e84c7dbda5a661fad1472d7b0335c3f082
TLSH
T12271C3C4F1758886D3A1833DC6E2C62834399BAB0B4FDC6706A0463DE50FBE3536E108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590797.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590797.TMP
Size 3KB
SHA256 46e847999fd539afed8f54666563a643fca503f2d0aed313f059851acf8261ec
MD5 e55c1a4e0240184b52c02724a0c63fc6
SHA1 13a1bc92ce6beab8e2c21f6b370c0098bcc12bde
SHA512 7e93ee83e905911fcd233f005b39563ac0097d6c6a9cf30ae528a0a2c19493f49e486146dc2f06db7e1259cac213e0e294a41913d44932789c54eaf419784e3c
TLSH
T1897181D4F1769896E3A28379C6E1C62534359BAB0B8FDD4B0660463DE50FBE343AE118
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 a1e551f168390c0a11bf5c6e40bf17bf5c686411a05e2cccfa0434d880b8c7ce
MD5 7f41421179e1e1577a1f606ca713c352
SHA1 c537fbae74059252607c9e53ce185af4a804a527
SHA512 721218ef2973ed5f8844f4419fe018d7576f75e8ce70a4c151850f4cf8e5ee61061d689d2861fc5d5cc173eeccf57e9fe9ac86034227174d2bf3288fd876202f
TLSH
T1F47178F7C3D9C21DC94116F49B15AF1FCE2D0A24432C3D2A89D8AE5B93E2471E21675E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f208575c0b0c0e41feab9392447df9ac8a1d1f428ff17aaf16616f88aeb60372
MD5 4836f37594dc5fcec68cba4e7157392c
SHA1 8f8a9a17969d43907df573aded7edf970f40a378
SHA512 8a25037e8df14998ddbe69cb2b859e9225b3e0392b72f04571dbced198e443c4c0c47f980dd22abcdfd9496b6f6205eeab0cab79754ee06d519c4d524861155f
SSDEEP 192:sxZGRLJyM/jK1Ml8Mk4g/fosTy6IdpJHnV6+WNGYw8FLcIgrJ:sxZGtMp/fosTyTJH+Gf9
TLSH
T1DA42D7066A349977CCDBD209BA55BB53D6F90573A2900E44A9FCCA0C05E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 883b404e37dac4ed7f4deb939aac1b25683a750230ec61d5a6e751186f61daa7
MD5 509edf57614194e7aa617cb1c43ebfd7
SHA1 97c19dc39c15670e83eb1a2ca97a0fad91f312ce
SHA512 d3100a9ba2c5754955f406b4a14b4a2f053f83475c75a9cb6d0f96cc4e977be9549a5799a47bbfbfd81d5bcab04b27a3cfafeaf43dd637138ef68f4ba9b10c02
SSDEEP 192:sxZGRLJyM/jK1Ml8UQfik4g/fosX2NOIdpodDHnV6+WNryHXYw8Yu0cIg5nJ:sxZGPqfhp/fosX2NfmH+cXup/
TLSH
T17852E7166A3899B78CDBD209BA51BB53D6F54573D2940E44AAFCCA0C04E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 aa60e7af43aef11941ecc3d6f86248028a3e800b0954ef606913890262ce2fb8
MD5 c2c09c6daae8a4a443af74fcd2badd13
SHA1 194bdbb7bb04f63747d69453797e79d375383197
SHA512 db922cd1925294f9b14f004f6abe6ab3b75609ebff1d5f41c5ee2affd9984e50b22b2d4c0f12dea84cb94a1f7d386193be10c4fd95cf18570a5b4f5c0badc1f0
SSDEEP 192:sxZGRLJyM/jK1Ml8Mk4g/fosX2NOIdpqdDHnV6+WNroc/Yw/ZLcIg5nJ:sxZGPMp/fosX2NfAH+j/M/
TLSH
T13C52D7066A3899B78CDBD209BA45BB53D6F54573D2940E44AAFCCA0C04E7BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d8fee7996b93291efdb6182a9ae4808e2ee0f050ad4eb80b25961dc0d0314437
MD5 8b293b0d7331f8209cc6023ad8bab706
SHA1 1a71a2f187272321bc9aed5f1a966b6c9e52ed11
SHA512 5d8cf2dec52b7be93b082db808d19f5558c5e74e0380041ed5ea50219b463b8a8d102b2a2a4dc1a5a554dcd7b6c5321dc9d9248dc11dc8992af2140382d3aba9
SSDEEP 768:R+4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dKroh0cMa+:R+4jeXmWvmKLEu1jacPLZQdhhm
TLSH
T138D2093B284CCB7E4F844E5CED26AF976ED802CB6A584D5047FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 7de121593b7bda873b2d12ba69dc5ed1006c9a7facf8dbbc8c6e538aca11b398
MD5 e4c93835af422e405445628c830870c9
SHA1 aef18ff35e38dd5a357dbea7c5a1c8c88dd241b3
SHA512 dd378d28ece084ed784e10c1d553b433ba188693400071760cad3a233701b396c785a10c40e4e183e1f3703a6b3f6b91192b72b73e7dead5486178467bda90d1
TLSH
T1ABA0022441C40CA5C89503775C8AF1906210FC10B3099F17B39F24948C932C966DD106
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 76e29d6bc5148a899c0bf73d94f4b0c8eb9be6469a208d87ebffbb9a0cd22589
MD5 6b646a9645f19f6ec794cdb789925d34
SHA1 db2a22a00553ec8be8cfb78d2338bc01de671f25
SHA512 8415ed6960ba92a59e4b7ed52a0ff40e08f41f98c26bc33926c3a44944add3373bbc47364b2a6fb345ec5985e78678370fc4bc188b05155a20a522a9e7f6f1b8
SSDEEP 96:KkHC7ntll+n1AldH+KFLdB+pfHoxXfm3uKQ4/QAKti67:zHC7ntll81A3HHLdBwfHoxXfV/37
TLSH
T16B91714132BE66022C7E34089294D7569A81B5773148E42B7BED41720F37E668EFDEDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 40f55c350d6baaeb2be14304e5c52f3c912484b2577db4c9611dcbdace7d783d
MD5 e5119033573e2759f336c1cf1e4ea365
SHA1 bd7ea2389ca27d7f5e9ffe57ae8f354b0234c557
SHA512 d483a2e5a6b5fccbd6b4e2fc719efa03bd0c4a1460089fa7882ac8c7648847e1ef4584130ed38fab4d2d34ba2409f59dc79b49d647607ceef75987f8e6bbdf6a
SSDEEP 192:uILsNrvQhR1/eZEOGQmiU15QO4H/+jVEBO1Tm6//Eu5cFTuqvXb0rVo:ZsNrvmrfvERf++BO1/cBFbmo
TLSH
T1DA42283668789C775DE6A685F44B36039EF8116BDAC53F84D6EC6B0C04CE3AC130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 cbd4c59ad1d6b31816bf631a0ae844d118557c68cd30eddfe31ef0ea6938554e
MD5 7571c244d2bcca9dd2d14a17229a7ffb
SHA1 1264447d29564f3cbe6fad07be60e680a3354bd5
SHA512 46c6ef3e4f8c503aabd2d023a787243f48d6fecc8598f747fcf30c7cb2b8d9cea23e2d83f855f7225ee0248129bcbdbe1b8306fc5d0ee7b85c7fccc518f52b8e
SSDEEP 384:nZcImzsNrsmrfv2Rf++BO1/crFbScjmwV:PWI2ZTBO1/cZb1jx
TLSH
T1FDC229F258EB5835D99E9743A77E2D134EBCD023B6845A84B3E85B0CCC9527FC30A821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 6302a229735ac8fcc05f119ca90bd12c1d8ff58426d2e4ccbaf21b68383f2b84
MD5 d8db1d9a38291a2be59c1411984c7182
SHA1 347f30cc67b97276968a965d3c813c0bf1961810
SHA512 bc1394f28c5e1365e3ad8aec2d49ed771abc4ff662280925a998b813c25f4e242643375033ed2e8a587c96da3c63a0906cf3e90418df77c35f5bfa337f3cee4f
SSDEEP 192:uKLsNrmQhR1/eZEOGQmiU15QO4H/+jVEBO1Tm6//Eu5cFTuqvXb0rVo:jsNrmmrfvERf++BO1/cBFbmo
TLSH
T10942283668789C735CE6A685F44B36039EF8116BDAC53F84D6EC6B0D04CE3AC130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7836dbc0bef178a53d56cd1e8919d93ab6dc31aa24728574b767f2559b6e6065
MD5 41bd39b1bc7861cfa22cd3cbe0e19bc1
SHA1 0fe3a2bcba82546297c823ede4a86e4eb45bd541
SHA512 e7772c34ccd30438013deeb58619b093f205abc3605cc951913ad8ca7caabc91ea66739b3a94f437637ed4947d733b01d0c89203050eb85e2f5f447602a6e32f
SSDEEP 192:uKm+xasuheOwQxMGsNrsQhR1/eZEOGQmiU1/QO4H/+jVEBO1Tm6//Eu5cFTuqvSk:8ZcIhsNrsmrfvORf++BO1/cBFbScjmwV
TLSH
T189929C726C789C66ADE6E545F88736138EF85073DBC46FC4D5ECAB0D04D96AC030B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 514f2ef03933b09d3c365e17fe6c5cc085855acc0a58fc0b6ffad4ab65b8a0da
MD5 bbfdbcf19c452884fb7b426b57ec08c3
SHA1 7f6c24662310f435de35b075c2cb960663be8e00
SHA512 bee8d8951020d1eeecbac094dda5e0d7db4644761f829f29a9947f23e7ce7c8803c10c4051aa4767004b8148068ce6b19a3bd57dd417a37be711ba59ac938cef
SSDEEP 192:EONI6hZ0QmiUy1lpc/+jVEBO1Tm65wOZVgfrU6:EONI6o8pu++BOU2uDU6
TLSH
T14402D835686C6CB78EE2AE45F88727235FE4213BEA956F84D6E81B1D04C775C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 440da80278411c60afb4bbdd8a478140834c404f84261aff333055b0d56a564f
MD5 a12114c29f6a252527ab1613e0ee1b55
SHA1 30721be58f7836e2e0450bc6d0d8c030d197eb33
SHA512 2d31fb1847fe96ac895f290c449b342f4b2765f708469bd17ae5396346dac2a4064e73d688f087d34d60361a18fe671eeda3ee8db9f1623c94cd9df6343e66b9
SSDEEP 192:bON+6hZ+QmiUyeljc/+jVEBO1Tm6//EZ5cOquqvU6:bON+6+1ju++BO1/cM9bU6
TLSH
T18F12F9366868AC775DD2A985F88736534EE41127DAC57FC5D2EC2B1C04DF79C230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bccd9561-af35-47db-822b-38affb371e40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bccd9561-af35-47db-822b-38affb371e40.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7289161abd003c02660834bd975a63adad6b2cdf3023b9896e717098621e438a
MD5 005aa47be73f521cda3556a73b9d7b08
SHA1 83c84dcedf3cb2cbbd3c1caf92934c5ca5f79206
SHA512 f95703382278d4360fe26b111e52b9665702859feeb16a8d2fc98f3734584411dd1c0d6c812ab22af61d60c223b4329126e44bb916dc3d8bee674d19bc93c69b
TLSH
T12841065CA6FA1144B3B77E56ABF2A86D487B78772E46D46E10110E4F0A27B01CC62737
MD5 SHA1 SHA512 TLSH

Submit Download