hxxps://app[.]sendinvoice[.]net/auth/verify?token=UiCxzfdZyuGqyH0ncpYxwmpGSUDkwHvJbLHNccv-O6Y

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 08:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://app.sendinvoice.net/auth/verify?token=UiCxzfdZyuGqyH0ncpYxwmpGSUDkwHvJbLHNccv-O6Y
Sample260803-jwhcfstyfw

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2760	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302176697098207"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{DA6570C7-42E2-4705-83FF-B0D1C5F64ACC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4884 wrote to memory of 3280	4884	msedge.exe	87
PID 4884 wrote to memory of 2760	4884	msedge.exe	88
PID 4884 wrote to memory of 3164	4884	msedge.exe	89
PID 4884 wrote to memory of 3164	4884	msedge.exe	89
PID 4884 wrote to memory of 3164	4884	msedge.exe	89
PID 4884 wrote to memory of 2136	4884	msedge.exe	90
PID 4884 wrote to memory of 2136	4884	msedge.exe	90
PID 4884 wrote to memory of 232	4884	msedge.exe	92
PID 4884 wrote to memory of 232	4884	msedge.exe	92
PID 4884 wrote to memory of 232	4884	msedge.exe	92
PID 4884 wrote to memory of 1436	4884	msedge.exe	93
PID 4884 wrote to memory of 1436	4884	msedge.exe	93
PID 4884 wrote to memory of 1436	4884	msedge.exe	93
PID 4884 wrote to memory of 3868	4884	msedge.exe	94
PID 4884 wrote to memory of 4900	4884	msedge.exe	95
PID 4884 wrote to memory of 3868	4884	msedge.exe	94
PID 4884 wrote to memory of 3868	4884	msedge.exe	94
PID 4884 wrote to memory of 4900	4884	msedge.exe	95
PID 4884 wrote to memory of 4900	4884	msedge.exe	95
PID 4884 wrote to memory of 3764	4884	msedge.exe	100
PID 4884 wrote to memory of 1640	4884	msedge.exe	99
PID 4884 wrote to memory of 3764	4884	msedge.exe	100
PID 4884 wrote to memory of 1640	4884	msedge.exe	99
PID 4884 wrote to memory of 4116	4884	msedge.exe	102
PID 4884 wrote to memory of 3936	4884	msedge.exe	109
PID 4884 wrote to memory of 4328	4884	msedge.exe	110
PID 4884 wrote to memory of 5068	4884	msedge.exe	111
PID 4884 wrote to memory of 4416	4884	msedge.exe	116
PID 4884 wrote to memory of 4416	4884	msedge.exe	116
PID 4884 wrote to memory of 5064	4884	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://app.sendinvoice.net/auth/verify?token=UiCxzfdZyuGqyH0ncpYxwmpGSUDkwHvJbLHNccv-O6Y
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffefc57c188,0x7ffefc57c194,0x7ffefc57c1a0
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,12332955536718634357,5985557898242092889,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,16830473729033043218,16727969197501393014,262144 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:2
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,15025334242617174972,2805786988180312765,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16111945386874038497,1341707617180269181,2097152 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3512,i,13980676658621094887,4932778223262786069,2097152 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,13021374871691592761,6555437888007218624,2097152 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,3690821353708160894,3307925681318832281,2097152 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:2
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,557137877389062897,5043433099963953056,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16925031766366813967,11664752779684842049,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,7623513608041031512,16333498481041264974,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,7623513608041031512,16333498481041264974,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,2191534919039349025,6670293396672264238,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,15412077350094853602,13954459706344286668,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,840781103035297490,999711387562988471,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,7620652422008985913,6112043648361218235,524288 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,17655070318603539550,6885600886663823339,262144 --field-trial-handle=2376,i,10112409499431258927,10349951061608240205,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 64cf7adf13e875b415330ac3657ce5672efbf3fe1e27d486548e17589aa3a1f4
MD5 53ba21c908061701ed89d58977fd5431
SHA1 22c15a7c711919b311779b49362665f68b242b4c
SHA512 21913acc2e29a5c12b144cefab51d67eeae1375155e130ca8822891a4e7242d8a5ba5b53050c45771e39f1a55d230820ad8d169ca80cd1a13e712d95b4bd743d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P75:fwUQC5VwBIiElEd2K57P75
TLSH
T1DAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 94fa2c67abc65d2320266808f9d67e58609cd863942b7e53318916faae8845fc
MD5 ea4cd5eed373f6357f857dbbfffafeda
SHA1 83b1bad175a403a324991b4fa7dd670f43a70991
SHA512 a557aa9846ddefdfefe71595e0800d8568c06dd229142985d966a9fe98be6f19f3a41ae6357044fc96a9d12f5ab962aab8481c6759936e5ed5c0db47c7f8e111
TLSH
T10881941800F10F51E7726FF1CFD21ADA3DB34DD88AA74D7206849B7E593B76086D5505
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5938d9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5938d9.TMP
Size 3KB
SHA256 c913018760e0a4af05c32894396bb481461584e516847db002502dd7871aa1e8
MD5 4aa3afb954f51866b68e7f120f3733b7
SHA1 39dfc663603cbb1f29c4a7e5696b939416006ab8
SHA512 c41f7f62eff3ef2a03ec75abfbeb499718ad6d99197390d7693d0f3063cf3bbaf98c8430a5e68c40c09023d3f4fc7b77812e54249d36c01404b65c9dbd1533e0
TLSH
T131713C1805F10F91E3B26FF2CFE216DA3D734D888AA34D3202C49BBE593772084E5545
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 68871fe1a2a60b000162e88b2c547dea30bfdf47ea761bbba48db4e3ec337d78
MD5 255d2796065f9736ebceae22cd8b5f33
SHA1 120dc1d6c32c12e7e8a301f47decc462389778c8
SHA512 7e04e53c4661cbcf1512ef8e7f9bebbd8f1e647bcf8d3d470c5b97ba6738ca60690523633ea920e38965828d7e6531cfa00fce62cc70ba9d8e368021d91cc23e
SSDEEP 96:DmAmm9mYm4mr+mDz0mVmtCmpm/mtamym16m5mBCmimc5wQ:DU4/Jf6YWSCKMSan26MzJnT
TLSH
T150918BB2C3E4D6BDC86592F1A6147A16DE5D0918822C3C66C9E6FF4BA3E2472E20154F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 44aa7f9378c941e59d0a9b5c0ba2343525441912ebcddc871c0de835df2eb93b
MD5 740df3b670c3347f6741f4a96402e920
SHA1 cc4e9a29c2645948b4cb1e5de5d05fcaf6e91f93
SHA512 f4c4284ad49b4b27405caab19d1bf047ecfdde2990255c5a54a67ddfac1050bc65cfd32dfeec3b65d0bb18aed0aa91b13f6e906932b4ae0e37145922beea3c74
SSDEEP 192:sxZiRfyM/jK1Ml8Mkwx/fesL6L8UIdp/zHW6+WNNrA/YwD/wpIgrJ:sxZi9My/fesL6L0LHbi/G9
TLSH
T1BB5209116A38997BCCCFD209FA51BF63D6F5047292940E44AAFCDA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b8bfc14a67ab2128e151a1f3be1a52c323f348893bdacc3b7e3f3bb3e58d0a9a
MD5 16247a4408a68358fe029f95cee7b6e1
SHA1 8456e2d65d31aa887b25db49253d9a342110eda5
SHA512 27570b1e45b3c618ab5a1a5eab131db36e176c5e328f9bf94920a71b5d4ed240ee3f75ed7de2c8558a4ea1eaf2e9465e06b70456af7c1c6b99625ddc979f1f6b
SSDEEP 192:sxZiRfyM/jK1Ml8UQFkwx/fes36y8UIdp9zHW6+WNNImXYw70wpIg5aJ:sxZi9qOy/fes36y0BHbzX7g
TLSH
T1F75209116A789977CCDFD209FA41BF63E6F5047292940E44AAFCDA0C05E6BED621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2c8f991e8ba385b54f1f3c98f9751b80059b2f3b6ab8db6411738d9d1ce5a012
MD5 b8f6ae76293ce12f3e1030de0f0a0455
SHA1 e1dc53e4aabbcafd2eac24152d412a59276f5797
SHA512 ba86db6d54eba0dcb7856bd044691bf5b02c86a63ebf5dfa7f37d0c6f510d826cf3a7d2789c40150039204bf88f4a3bdbe11cef4b9ee9a4ed0b5557a345f831d
SSDEEP 768:hS4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dWrohhcca44:hS4jeXmWvmKLEu1jacPLZQdtwQ4
TLSH
T1EAD20A3B284CCF7E4F844E5CEC26AE976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\280a073277c2c20234f1db69d926db1e6c268dc5\9bae0d7b-b98a-45ca-a91f-a9ff5fbbea4e\index-dir\the-real-index
Size 2KB
SHA256 5c95d61b82517596e2099a59bfca14d837b99f097ad266621de673646f1bfebe
MD5 d9edba4bb654196c7b4d7e35b0b7bc04
SHA1 fb6b1757bdc990f9de19fe3eb39ee63eb3c88895
SHA512 c11b044648e048887d00a01743f25fbdf30ffe9056c59e07fa0754ffd6e7f7ffe8186a135c550c4481e0bee0fa3cccc030fa976be0ff467907e07f7e5ba8bfc4
TLSH
T10941196A1C13230BC1974BB1A007DB003F7BB4527AC52F4A4324F82D4C7136B66EE90D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594d3c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\280a073277c2c20234f1db69d926db1e6c268dc5\9bae0d7b-b98a-45ca-a91f-a9ff5fbbea4e\index-dir\the-real-index~RFe594d3c.TMP
Size 48B
SHA256 113b409e1e75840052fd43b8cb1ea4d2d807d2eadc475499dc1976b40ebe0de4
MD5 bdd239fceeca4e0ef1ce805230363482
SHA1 04def226dfe836e4211ff3bc8bc81c53a6126431
SHA512 6d123bf9d1e9779c91afd6f89d950401e266dc34d5d92ad439b6deb10420e2752a5d8af3c8994e24e01197873e8dfcf9e43885509a6fe4307990e2a2eb8a16e0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\280a073277c2c20234f1db69d926db1e6c268dc5\index.txt
Size 171B
SHA256 a3c544001d6b72350e2e256c16d2ddc9a72758ceacdeb1266df9bb4195c216cc
MD5 c3c25c9e41440666ab4ecf575834e7b2
SHA1 31c732cf069389b7704749dd5908ac9b998a857e
SHA512 2ad57d136eb49434f1fcd47a6e14239690ce225c135cc14d78fb6924f397b0ec97150540f0241af388ef5bb6a15c1224ecc8fe9da21fad009a40a35bcc0412b4
TLSH
T166C08CBB49F2563ACBA15A4C0030B71EC95F38511E64CCCC6B0380044E73AB4F2D1FA1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe594d6a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\280a073277c2c20234f1db69d926db1e6c268dc5\index.txt~RFe594d6a.TMP
Size 175B
SHA256 b2071f7e244efc5f0972ca7fbea994d89acecc796e7e38ef510a195a354175bc
MD5 3f74e197bb3c57c623cf600b285f02fa
SHA1 2270e7f8084c339712db18dea61ad47d0a1cdd90
SHA512 9b1964b012d90f7b7cebfd533f07502e1f273618ce2f4e20b0e4734d0d2863bb995b1ad5a4f6d516ffa813d53dffc45744a3119ca87dc50ecd2f4aca87ce88ab
TLSH
T15BC012BB09F2462ACBA1094D8030A74E89AF2C511E54CCCC6B03B0045E736B4B2D4BA1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 321e92106fd24c052ebde9d587bad63519f67c2e5236d5fa158b252714621227
MD5 5e8c11ad511782433f6e4773504bf982
SHA1 f2ed65826f555aaba1fe9bbb9c1ad1987ed1a2c2
SHA512 fdf64dfd79fa2e434d66e4e20bb0be72ad6a51fcfec8e168b993808c49fa27a86a8b3c0cfd41984ea9a3b356501af969a23cbd157fbd65d7191c4d8466d1f7c1
SSDEEP 96:KA7aKMMtOpOKCkqGXymEcsW+cddMmWKUzMgWwOGFwGHDcB4MSWX:0aJRGXymEcsBcdmmWzMgtOGFwGHDcB4s
TLSH
T10291411271BB12123C7F390DA266AB174A82B1673109B46B7BED00728D67E641CFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

102fdebd-9304-4cc7-806c-be19f73e6aa1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\102fdebd-9304-4cc7-806c-be19f73e6aa1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 97a85baa1024025f3bb273892f573ddd60f96410a8238cceed85679e0375922f
MD5 fb31818f9aeeb6b6f03ebcebdd845b6d
SHA1 dd28e3fc6bdc19ee70185f51421094e93be46b7b
SHA512 37807e01c35f7c9f74e3ec91e82445708839ce8d3dfffe9acb8034eebaac7601664df5e981dc7f8a38ee03da4c1218d00b7364e0b90ce6fd1e2f1c43c748c8af
SSDEEP 192:uaLsNMwQ14ZZElIQmiU13I14H/+jVSjzorh8F9XMEx5cFTmPqIUrZ:rsNMw44oimqf+o8hy9XPUFAU1
TLSH
T15C423B367878AC775DE66681F04B32139FF8512B99C92F94D6ED2F1C00CA6AC2307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 13f25f636928d03fe5c788574e8da35a52b83e122b8da9433d4bdf40a562374d
MD5 f45256c2a2861e3c1fae0180e6e3408d
SHA1 0850467cd9c57a62b2885958dfb21ae0ac347d1f
SHA512 15b27f7a056c2f60bc85718382fe2e88825f3f5503f5707a2dfd57b6a402956b427bfc9fa0f74b0d408b915a7e9df016dbad26b9816b3d0da547f3618e6b135b
SSDEEP 384:UiFiZcIkzsNE8TUNTUlIlK44oirqf+o8hy9XPyFAU6HlytEDq1Z:vFQYdwgky3PEAUoy6DqT
TLSH
T1FAD23AF244EB9436DAAE5743E77D2D128EFCC023B594AA94B3D95A1CCC861BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ccbfe13f39d6d2976e0f70cbde9123ab779681518d52e12500e80765efd3d0d
MD5 1473741eac0fa280db71b5a9213651fe
SHA1 5dedabe6101ff62786ace1f9e24576f5b10b7858
SHA512 fcfae785842e3251834980fa13782bdef7b4b2c4fabad2dc6d034bf421f281449248199cbcb6edb52a51baf5704df2a4a233128ca8648259bee17eeb8bf578d4
SSDEEP 192:EONT6hZ0QmiUyFUpc/+jVSjzorh8F45wOZm/jU6:EONT6oBpu+o8hyH28U6
TLSH
T17202D93568B87C6B8EE2AE45F48727235FE5112BA9956F84DAE81F1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cdd402f0ef990c89664899fbf5a822c704d393c6f8f649f0d63096fc4e9086d1
MD5 2d763d8dccac1cc97dd12815715c8561
SHA1 d68d5fedbff623902df680f86ad4e99fa1ea2a98
SHA512 69659e1ecfa8d1ec44395637701a2f34606426a2b930d8128360cdf404f259aa034c92a139d917efac8234d14c85ac25e695c5230462e2da623599d9191215d2
SSDEEP 192:6ONN6hZvQmiUywU2c/+jVSjzorh8F9XMEf5cOqmPqIUU6:6ONN6dO2u+o8hy9XPS9AUU6
TLSH
T1D112EA3664ACBC6B4DD1A585F08732235EE55127EE897F85D6ED1F1C00DF6AC130AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 07512c6cf0170ee33476e2fec1b9b2c51734bd14e8d268522960100c721b69b0
MD5 c50bb46e0bd7b9495d55662e36c6ca98
SHA1 1e4144ddc4e8ee46d330ecc67998ed10fdb1f1eb
SHA512 f7d72d6ad022ac5257f6307632c8a17ab507a02b60691be049192caea03af17fa72b2f37d973e6828de048440ce7d6a47d93f40658efabf8b1ffc00257d04bc8
SSDEEP 384:OZcIhsNMk44oimqf+o8hy9XPUFAU6HlytEDq1Z:sh1y3PyAUoy6DqT
TLSH
T157929F3164BC68375AE6A581F44B36238FF84017EAD96FC4A2FD5F2C04C96E9130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c44f4dc-f21f-42a6-8260-f1354123e32c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8c44f4dc-f21f-42a6-8260-f1354123e32c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ea5e9c67a686b18a5ad829d8113e379fa5dad01fc03072a9d15b9135e2c99a15
MD5 0f273703bf052cfd38bc191e3716c280
SHA1 682528826bf343541aa5f7004695a577c53cbd84
SHA512 b3d36256cfc71598c206e425f382f37818a4ab701b5bb497259897c9424c99dec6662074b7d1fcc1248ae1776732365994b0cbd4a13af3498dcf3289bd22cf85
TLSH
T1AD41E75CBAF91148B3B76E5AAFF6986D487AB8772F17D48E00010D4F4A23B04C861B37
MD5 SHA1 SHA512 TLSH

Submit Download