8991664e10f49d768e4d100f6b29aad87e96ede0f040925b87487b81abcb048c

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 18:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
api/__MACOSX/api_olivetree/application/core/._index.html
Size 222B
Sample260729-xmfddsdc53
SHA256 8991664e10f49d768e4d100f6b29aad87e96ede0f040925b87487b81abcb048c
MD5 b1ff28ad21b92cf42f82786c95985de6
SHA1 2e2d4d82a1c8831959af1d85a10c0a811e5701a1
SHA512 02ae858beaef74edfc017837ace8e711c10e9e6b5b66db3cf8bd1b08168c3ec42444658a5c78cf2ab6b08cdaf42fb8bc49f36dabab83f566c28adaf25191a129
TLSH
T1A9D08CF021141D46DA55C2F22986A8D02B36B4B4C2671377744EA0403B40A51B7F0307
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298251927320793"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{02A537E2-7C4F-4A18-B78A-1F8FD90E2EDB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3532	msedge.exe
3532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe
412	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 412 wrote to memory of 4272	412	msedge.exe	85
PID 412 wrote to memory of 4620	412	msedge.exe	86
PID 412 wrote to memory of 1284	412	msedge.exe	87
PID 412 wrote to memory of 1284	412	msedge.exe	87
PID 412 wrote to memory of 1284	412	msedge.exe	87
PID 412 wrote to memory of 2100	412	msedge.exe	88
PID 412 wrote to memory of 2100	412	msedge.exe	88
PID 412 wrote to memory of 3604	412	msedge.exe	89
PID 412 wrote to memory of 3760	412	msedge.exe	90
PID 412 wrote to memory of 3760	412	msedge.exe	90
PID 412 wrote to memory of 3760	412	msedge.exe	90
PID 412 wrote to memory of 3604	412	msedge.exe	89
PID 412 wrote to memory of 3604	412	msedge.exe	89
PID 412 wrote to memory of 548	412	msedge.exe	91
PID 412 wrote to memory of 548	412	msedge.exe	91
PID 412 wrote to memory of 548	412	msedge.exe	91
PID 412 wrote to memory of 2656	412	msedge.exe	92
PID 412 wrote to memory of 2656	412	msedge.exe	92
PID 412 wrote to memory of 2656	412	msedge.exe	92
PID 412 wrote to memory of 2184	412	msedge.exe	97
PID 412 wrote to memory of 2124	412	msedge.exe	98
PID 412 wrote to memory of 2184	412	msedge.exe	97
PID 412 wrote to memory of 2124	412	msedge.exe	98
PID 412 wrote to memory of 1240	412	msedge.exe	100
PID 412 wrote to memory of 4612	412	msedge.exe	103
PID 412 wrote to memory of 4560	412	msedge.exe	104
PID 412 wrote to memory of 3080	412	msedge.exe	105
PID 412 wrote to memory of 3468	412	msedge.exe	106
PID 412 wrote to memory of 3468	412	msedge.exe	106
PID 412 wrote to memory of 3532	412	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\api\__MACOSX\api_olivetree\application\core\._index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffaf729c188,0x7ffaf729c194,0x7ffaf729c1a0
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2060,i,10323082254073230904,13072560744193200566,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,2356100635334021098,13025269998040013236,262144 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,15280894141092102088,13982096244596261047,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=2628 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5617575617846584814,5048760412838277027,2097152 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,13540050436569029264,8704660206773760568,2097152 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,5290834212805530798,14504576569364441321,2097152 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,14358469867855378005,11267609001032605155,2097152 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,18423761369805155815,10593552240126192463,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,7566480402144845180,318204993265140427,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9073069300646566415,7841305848071346423,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9073069300646566415,7841305848071346423,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,3303591106050955661,10569753499835502009,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,4244656770411905749,8319081949538455343,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,11645730967281710353,2429498566793835203,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,8645064099116870683,5321245735400410313,524288 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5336,i,9614238622928899926,16799290602533450471,262144 --field-trial-handle=2084,i,12147761163473580114,10145303809081947898,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3532

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 76473a964509affad0529bbe26d0982f6894247b3cd4642dc4ad06d3c363e83a
MD5 d2587a17b3ba73ec1202a9e74e246d43
SHA1 4d4623c67914ef37a3792e196c2cc18e71cd06d5
SHA512 0e603beaf44233302c5b57cb1063dea549d84f33cfed91899ae139de510a3b20ff79439ca4f2131adb572cecb39d9d33a3d70a1c51993bf87d50517fe5867000
TLSH
T197712ADD3322D492D3600E30F7DF0693BAF141880A8F6D52F208597D6A0AB6F427B638
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d31a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d31a.TMP
Size 3KB
SHA256 a69ab797927f5a8beabb0e52a50c83a91290dbc286b10cfc31da271b8d7ad626
MD5 2958bce8eb5160934ec2d625814aa27f
SHA1 2a54cb16e0917c7bffa801f69b16397503960bfb
SHA512 6e9f92f4c69921760d23865c5814f358e853e308b9cae182fafac0dd8beb9092522d266122788c10053cd05c839810aaf0595d39b77169b14bdc9128f04a388b
TLSH
T1F7710ADD3322D492D3200E30F7DF0693B9F141980A8F6D56F218597D690976E466B538
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 bb4d33c8afe76158b04ff1cdee464726595d8bfb39880045302ae4df068ba04d
MD5 ec90a7eb28e3dcce2cc6b2e05b2940d9
SHA1 49254152104b3ac7331d0aa8c8ef0c0d72144b42
SHA512 f1b2709a2ef7f0b8e77a599abc42473611accacb20145dfea38012285b973adf911d97683dd98ef19b33b0eb0556dbe3e184a921d97814ec2c5077f0296bcc1b
TLSH
T156117DF3C3D5856EC91116F06A28AE1BDE2D0506832C7C19C5D4EF2B93E3075E10295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0ee686aea358a679c15eec4438d815b6f7835917fa43e1ec55996f7d61983dd6
MD5 b373972e731d5a223f833157ba11d9c4
SHA1 818fe09be75486368e090797ec90d7cc8e45003e
SHA512 5b614e69ffca9df8f6b66d870081cf870271c4493a4c4eac15e8962249ccfc19ff5f07ed2e14cc530977708acf6b440f6e64b79173c017f2e771d99e78a774fa
SSDEEP 192:sxZ3RTyM/jK1Ml8Mka/fjsQNLDmIdpdsHW6+WNGYwKxzLIgrJ:sxZ3pMa/fjsQN/H2HbGE9
TLSH
T1D742F906AB349977CDDBD209FA55BF53D6F94472A2900D44AAFCCA0C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6bf920806d6ed16b4dd98f40c09048db21233250cd9bf31f456021ecc6be96ce
MD5 877d779dbfc918ded1e07005d20f52ce
SHA1 c094297c6c084330de6d83e17e870abc3597c31c
SHA512 5bcc0ce5f655091f6df4af17598db71425b2dc7303151de5a95703a0b5bbd0f920a68cfaea9307405dfd06d6e6c8ece502b7db152ac5c9fb43184184aa317f14
SSDEEP 192:sxZ3RTyM/jK1Ml8UQnka/fjsBoLDmIdpHsHW6+WNGYwmyXLIg57J:sxZ3pqka/fjsBo/HMHbG9D
TLSH
T12F52F806AB349977CDDBD209FA55BF53D6F9447292900E44AAFCCA0C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b84043e8da981ff32c05da44232e90df23b4d181da0973a0822edf04ae9e8189
MD5 bb6d82f7d27a9bca0da94376b9c0a039
SHA1 7820ce3c23cf2cb58163f56067456223cd45abd7
SHA512 53bd4619f8999dfcee5b6817f0fecd9021f2208b3dddba8282c61d7976f1037fe9f148a8d957c1c1b188a5a0fdf98090035bc91a53db1990dc011faa069aab77
SSDEEP 768:gp4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dZrohKc5as:gp4jeXmWvmKLEu1jacPLZQdSb9
TLSH
T1F1D20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7ad5bed0106f5dda95ad72691d9713852d914e6d4d95c4f78d22fff7c416a04e
MD5 d2be6aba94e08d597c8d95ca210b228d
SHA1 0eb42ff7494df387e594351314f228004a6c2983
SHA512 70cc469593c48b26105872a698d40418f9c5e4a73e4705a5e2349e0d3addc115f619c70b0505d02697d2261c5d29d8607eddcc4d715ce7b6eeac3d4091c73c27
SSDEEP 48:K0CFI9K+IgXyp6IfKP6AQ3ERF/ppd69+QIDNdKQcYfdUnNtmdpmyD:K0CF6K+Iq66UKP6AAQKZiWg
TLSH
T1B491620270BB56413C3E280CA764861A5B8271633558B96B7FA840B71F37F694DFE8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596ebe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596ebe.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 33af2a3414e0f64a3b3ee8c5424fa0c1f5fdc8e8f07db93b877848e884d2e5f3
MD5 7b033736f6e058b0fdc875f69a5c4f10
SHA1 3a34224b15becb081804b7ae3b3d0b2740de7dd7
SHA512 19559a3d8bdc1ece8bb70ee8d56037be61f4e012f9288792149c57e143fbe9645aa6bf79bc9ed69fdc7f013fe7d61e4de2bf6733b2570ddef7b9e5ee7b923760
SSDEEP 384:dZcIhsNxL85cmMf+G8WYWX9FsScjmw2zX:FhTMxXs1jCj
TLSH
T132927E37AD78AC7A99E6A145F48B36138FF49023DBD45F84D5ECAB0C00D96AC131BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 bbba3968400bbf5a96a1716559b077a8cbb0721de4420193afb2cf02b89d3042
MD5 172fc73deab2089ea8d313be4833a5f4
SHA1 703be1f7508752e584498aaa3d1c987d680391bc
SHA512 1b8670af0195986f3ba5b49259e14c04a88da75cdd8836556fbbf3b4b6ab051fb26068d80209144d267183e9a2d003a1ebc76ea4e3ef8ab10c678a8545699128
SSDEEP 384:OiFiZcIwzsND8TUNTUlIlO85cmMf+G8WYWXJFsScjmw2zX:lFQs+wg5Mxjs1jCj
TLSH
T1E5A26D339D68D97AAEF69A45F44A32138FF45063DAD5AB90E7EC9F0C009A5DC030BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 04485b9329ffe2f1f5c3a02e574643c44dfff696a4cf274cb66933a37f5db4b0
MD5 d675e51e5fa70abf8fe67b0d500708d5
SHA1 61412dfb30d03e8f0bee466941f0626023ec419d
SHA512 2b4af9f744b05c2bd38b2665128f7668dcc95256aab8a49dba8cc89050df394e421bca995fde51ad17ec144a2accc60508927628736c0db126a0b1e59beb97e0
SSDEEP 192:EONC6hZ0QmiUykypc/+jV0jzorWYt5wOZJbiU6:EONC6oCpu+G8WYc2MU6
TLSH
T1BD02D935A8686C7B8EF2AE45F48B37235FE5112BAD956F84DAEC1B1C00C775C2346836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 5fb06743fb7e726cf978fea43ebdd1dc667bbb82cda0184570abb3a3aed0c9b7
MD5 8eb73a75f8d292b1477b1d1563ecbcb9
SHA1 40987e8a6e46e288612c1b09d834da5c13c31ca8
SHA512 c178bbbec642a47aa54628587e91abb493cf2eb7e0800605457564117d8144e3d198ead83e4b06db00830c04608893f15047abe5670a9f1f06750af532e80060
SSDEEP 384:BZcIhsNxO85cmMf+G8WYWX9FsScjmw2zX:JhwMxXs1jCj
TLSH
T108927E37AD78AC7699E6A145F44B36138FF49023DBD45F84D5ECAB0D00D96AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6d7211e1de3d8c1f4688e4c87a1fcc591a421ece0dad66fcad506ae8b66d4156
MD5 e520edec4f1c639bb40f34c3124895c6
SHA1 c3ae2c203d104aebd3cace57e26ebb21ef6739cd
SHA512 36defe1c198990bc4664d5166f588f217b939c81f9fcc518b80dba254b44277f72abc484f38698b2556d77d5fd5ae1a0346222fa206aedf9e7719509cc1c4667
SSDEEP 192:8JON86hZnQmiUyly5Gc/+jV0jzorWYWX65cOqJ0qcU6:6ON86dxcu+G8WYWXV9sU6
TLSH
T1F512FA36A868AC7B5DE2A541F48B36134FE55117EEC5BF90D6EC2B1C00DF6AC134AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7254212e-3a8f-47f3-9c86-cf15648c3743.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7254212e-3a8f-47f3-9c86-cf15648c3743.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d4ce9dbdb0ffd9546600eba66a895475c22ccc9376312ecf2d6bc13c18ab43b9
MD5 79f724c9e1c17d6804608228bcaa8d80
SHA1 04840d446fad79bbf50b0bc8d2b30ed297df9a6c
SHA512 561656673e880dee5e5879c41278e0c023b0fba414be700eaeeb62ab43844ec6a7904e7d4aff40ec4a3c2fb53aeb9693960e2b3b0ca7190475ff90c73af68fc3
TLSH
T18541E998A6F91148B3776F56AFF7A46D587BB8732F07D49E10110E4F0A26B00C862B37
MD5 SHA1 SHA512 TLSH

Submit Download