hxxps://snake[.]zooparkko[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 11:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://snake.zooparkko.com
Sample260806-nyv4jsvsdx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4828	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134304905406972668"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{706D7A8F-B17E-45AF-824F-C4E4D40EF4A9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4648	msedge.exe
4648	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 368 wrote to memory of 4488	368	msedge.exe	84
PID 368 wrote to memory of 4828	368	msedge.exe	85
PID 368 wrote to memory of 2184	368	msedge.exe	86
PID 368 wrote to memory of 2184	368	msedge.exe	86
PID 368 wrote to memory of 2184	368	msedge.exe	86
PID 368 wrote to memory of 1944	368	msedge.exe	87
PID 368 wrote to memory of 1944	368	msedge.exe	87
PID 368 wrote to memory of 3408	368	msedge.exe	88
PID 368 wrote to memory of 3408	368	msedge.exe	88
PID 368 wrote to memory of 1700	368	msedge.exe	89
PID 368 wrote to memory of 3408	368	msedge.exe	88
PID 368 wrote to memory of 1700	368	msedge.exe	89
PID 368 wrote to memory of 1700	368	msedge.exe	89
PID 368 wrote to memory of 3960	368	msedge.exe	91
PID 368 wrote to memory of 636	368	msedge.exe	92
PID 368 wrote to memory of 3960	368	msedge.exe	91
PID 368 wrote to memory of 3960	368	msedge.exe	91
PID 368 wrote to memory of 636	368	msedge.exe	92
PID 368 wrote to memory of 636	368	msedge.exe	92
PID 368 wrote to memory of 2144	368	msedge.exe	98
PID 368 wrote to memory of 2656	368	msedge.exe	99
PID 368 wrote to memory of 2144	368	msedge.exe	98
PID 368 wrote to memory of 2656	368	msedge.exe	99
PID 368 wrote to memory of 5112	368	msedge.exe	103
PID 368 wrote to memory of 540	368	msedge.exe	116
PID 368 wrote to memory of 3004	368	msedge.exe	117
PID 368 wrote to memory of 4920	368	msedge.exe	118
PID 368 wrote to memory of 212	368	msedge.exe	125
PID 368 wrote to memory of 212	368	msedge.exe	125
PID 368 wrote to memory of 4648	368	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://snake.zooparkko.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9744ac188,0x7ff9744ac194,0x7ff9744ac1a0
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,2499245922159666492,13622955121630638140,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,7774341460256136345,10852279499685410753,262144 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,9479463005062639424,12637086957589416080,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,17109274697529771474,14237898400188622470,2097152 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,12268868935335362553,448959524278468955,2097152 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,2033535489505347922,255809717497286561,2097152 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,14290565814692565891,5169641067560223533,2097152 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,2789890949075928339,10993239662596161959,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,14660311427631608812,5488468181056024009,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11159757073121661144,16933485087000193960,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,11159757073121661144,16933485087000193960,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,5263291814833985850,2983056352085136840,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,10512274965083421330,6940806804918484977,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,6221186690623978275,12078802672278457351,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,3977104585507077736,2674434196162755024,524288 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,491990479105925762,2208330356411854001,262144 --field-trial-handle=2112,i,10480643929558633237,6271119460633208189,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4648

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 acf2ca2fd979c7d8ae7b74bb0af4308e4abd3e42e1f32fd1a04b0ca1a2b166c8
MD5 80eaf72bc0ff9c89a5c23f07f38ee8f5
SHA1 cbf109666417a1db022b3f49a91481b9755a1b8e
SHA512 b21d0ebff096128eae96a603cc0e96af95cbca34e613c40faa0cc8c5c17961106d997b66011c3051ead599494bd80939479f2526a2e65ff25600b04b19065afd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T15EB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9aeab2c92c5f26a8ca39382cf1bb4652de05a24b8d0a9ed661920c6197bf4c98
MD5 722151c3c2c9d1bf9273dad578c24b92
SHA1 8c73ee2f65f9c7a61550c77f0ff7f3b2e262dbdd
SHA512 2d701005e69967e2b1d86e637b7e1011658167d340aa89a1d8a3826c1a0cd883f9a6d2e8ff8530362b27f034273eb9c1e432fc1a63348092e3fcfc9ecd12dada
TLSH
T19ED012323A18644AE656A1F0A413CB411637516624535B21B215949D9AA80D562C6192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 46246483d08868ff03d5f9bb48e547ca61f651c3e59a4138f5a5da74c69b3ae0
MD5 c70fc44a424269679b1300a5be3376a5
SHA1 6162f1576d71e2726435c2e688415ae394c1369f
SHA512 c7fe73655fb22ef9d6d3620fa11cc8586300f67f906224e15b5de9802f495a10b66f3fdb475a44e7ed7af1a7d84be1c87f05f52d39641755f33237ede51a6e35
TLSH
T1F9D012323A58684AE656A1F0A412CB411637516624539B21B215949D8AA80D562C6192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e645bbf5ad99834925fbef0ff2f81a1b95603d0c52a9747f66d4938c45bd2736
MD5 5a17182c1a0d82eb7130d9f6726261e6
SHA1 62b0a0096ecf62657233a85e97ed88edec4850ee
SHA512 ad139792d0e9c21049a618f9a45bb5ed5e21696826bbd30197e66d4a1427267e1ccf4be7e19c5df544dc5fed69df459aec067bebf74829813b516d2125c17d36
TLSH
T19261093812CD349DEB603D73ECC30000783195D8FA33AEF966AC687D7A01B1546E8D90
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58991e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58991e.TMP
Size 3KB
SHA256 2652e5c46799a7ebfefea47eeeb231344953f18bd77aa359a9102e1630a2e76b
MD5 1a2cbf6580f70683aaf6f3283ae79d3f
SHA1 6b65f8fa07230603af2857bfe1ea6fead6d2f313
SHA512 58534d7eceea2328706eab18a495a179c3c6c4250f1fbbcf43654fd381c713c0266a13fe185a8b35e6a99bb5bd0062a9b93963a0f8675ab7e0e1bad25d1e081c
TLSH
T1FB611B3902CE388DEB603D33ECD30100783195D8FA33AEF966AC587D7A01B1546D8D50
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5524a1b3-f067-4686-a507-65b16e8523e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5524a1b3-f067-4686-a507-65b16e8523e7.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d1035b3afa18dc0ed92eeac153beb3d3506d243b21011e2982210fc9937758af
MD5 fec2a5a47ed16eef5d51b317ef59b7b5
SHA1 b14095c4c645544afa59596a22fb3ccc2c260218
SHA512 e09af3493f909c7b41e300662fca4f9158e0d7758f93ea176284393ecbd83821328b2f7745782c2370a71a74ccba502d5a8103b519a83f80e75f55ef2d8533c3
TLSH
T165319BF6C6E5866D8D1156F05A24AE1BCE1E060943183D2AC9D4FF5B93E3472E21264F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 626d6538a3428b278e42c7283fcc5715f38938f51990b43423a610f7bc2dbb3e
MD5 59107fff392802a0da04c5653a0e5deb
SHA1 1f62e00b57dc3c910f86f0385b178947d1b1bd22
SHA512 c0e3e244ffa06d14d824e6909471e7d84ced8b5ad0413a7d85edbcdb4d4ae8d0ff81a13183a2e3ab259700632ae956865cafcf93620f64660655e0662ddb4152
SSDEEP 192:sxZLRhyM/jK1Ml8UQik9/f2szPYXTIdpY8HW6+WN7NS/Y9I62R65Ig5pJ:sxZLjqh9/f2szPYcVHbg/x09
TLSH
T16D52F712AA3459BBCCDBD209B945BF53D6F50572A2941E44A9FC9E0C00E6BED3213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 03634fb73755953d60c4194ca10ffd18329d1fed52272803a6e012413d2682f8
MD5 ee8d337831acefc3f2e3f103d33cf788
SHA1 e0256934fdf2172258503f2ce2756855ffa9cfca
SHA512 4137f1738e07d62729e9466adf4612defc2e354d4fc576bb0d86bece388169244ca9d7890d7dbb7beb25d1c3b81fb293dea1c4d536605c7b62d6db4b89378501
SSDEEP 192:sxZLRhyM/jK1Ml8Mk9/f2sMkYXTIdp68HW6+WN7NS/Y9Ih3765IgrJ:sxZLjM9/f2sMkYczHbg/F09
TLSH
T15152F8016A34A9BBCCCBD309F945BF53D6F90572A2941E54A9FC9A0C04E6BED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 b44da66eaa77133db1646ee9aa3f1af037902edebca8f76e137b1adaa1ec5a73
MD5 bd504c68d061c7f75c722a13e44f7de1
SHA1 a0fd4cecf84619ceece174765d9cdde02cc616bf
SHA512 f85d8380f67bc27974aaa814056e48aac07c9582cd3272bc040b9eda0c97107017e30aa75a3d2276bdaff90b60132b553d0a5b5c26902334062204aa7a244494
SSDEEP 768:Oncv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNZroAg6h:Oncv21wWvu+Z+u1jaeFLeRNSAx
TLSH
T12AD20A2B280CCB7E4F845E9CED2AAF866ED801CB57988D5447FA484C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 1156e860a5638ab4e0fb12610b042373bc43ac912aa7d4bfefb1bf9b0a3c4030
MD5 61ad6ccf2ca25abc7e8216d6c037b3e5
SHA1 0e3da661ea5e7f639a7157d7a8c1421fd8ad3ff1
SHA512 a0dfaa9125d902caf4f928e0131153fd6f40fe8befb3a89c6572c2766c4ee6244f7636767411afdcf437993a154dd1f806c9f57bf16ba482ab5e5b57b651ecd5
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDyeAKTi2+IQZC2QSyhjWD8B+hKZIBQh1YAN:mTnDyBXM
TLSH
T119D15406313B02423CBE3948A2A6CA768E4231673814E97F7FB911A25E67E111EFD5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593752.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593752.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bddf2c08c332dfdd80e982c5e6f96b95d8c2b87ef95bcefad4e08415a1bfa7c0
MD5 68bdb4cd60afd33d1bca76c41db416f1
SHA1 a0b8c49186c14fa31f9aa87a58e148f3604a478d
SHA512 994e29280b51d6f953727dc8c8dcfa8ad0bcc33824ccb113f74dfa7830ca9dbf11c93f13dff186b5b7a2a626ebd9e708a27fd05f5340c1b655a1b10f05412e04
SSDEEP 384:uZcIhsNSfIlFf6ziHlPfe+C9O3+roS+2KpXnTKwBODNZOCegh:Mh9pwPGFO3CLlKpXnewBKZOYh
TLSH
T14E927C72AC385C775AE2E645F94736178EF88173F6893B9495EC7F1C01EB698230AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ddeed05478b906466d760f3b55d4bfd4e8c9c88ee50df9782976028f88cb245a
MD5 27f1184956b956957c02f9d821f929ae
SHA1 d17c593ca1ee758df575f9764dd394a999f984e6
SHA512 a4fdfb42827f62a5abc347c3858974d6349b74412d16a489a92acaee3810cfed115a027f7e6eff7b31203213201b54f1cc2e8c780a28c701952ff9c0afc3e47f
SSDEEP 384:59iFiZcI8zsNSB8TUNTUlIlDlFf6ziHlPfe+C9O3+roS+2KIXnTKwBODNZOCegh:iFQA9BwgAwPGFO3CLlKIXnewBKZOYh
TLSH
T1EDD22AF258D7487AD9AE9B47AB3E2D034EBCC163F5856650B3986A1CCC961BFD306C10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d600210e62f4177c7dc521212f3c47df3c19303185fcb46f538f9d4f4915ce14
MD5 bb4a5309bed0525a83465ca1dd6bee76
SHA1 3f48081923ba4b0ba721aa7f990a10490445be18
SHA512 c0091834cd79298adc8de1db332dbd298c0123fcb520148ef1c32485202dfb1f263b018fc21c5ff6b09c97433025bf9935f4ac7bcdf2c6d53e8046cd441bda0e
SSDEEP 192:JONX6v+YLNQmiUyC7Zh+CGEOcs+tVus30uU6:JONX6vz/rZh+C9O3+zZU6
TLSH
T1E902FA35BD281C7B9EE2AE45F58B3B275FA4213BE5952F90D9D82F1C01D774C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 78d102ad7d4ac70e6f10e47fe3defc62aef8fc354b79a646921dcf0935d3321d
MD5 b26a6b991b1b38da006f750d8c431e7f
SHA1 bbaa0fcf2fe2546058434aa47329cb23596b24ce
SHA512 7d300fdf9b2be94bbac355a63bf0a50ace4c6e6b09d5e59e37ec06ad3521ebd9c2eec0283d3ff688401aef4c1d603308687dad0ef47e8cd14dfad1060be6cadf
SSDEEP 192:TONeO6v+YLyQmiUy7O79h+CGEOcs+t1sFS+2KTCH6qS8U6:TONeO6vzy6e9h+C9O3+roS+2KgXU6
TLSH
T1A7121A36B8285C7B9DE2A554F48735139FA91137EA8A7FD1D0DC2E1C02DF69C234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 003cd37c1b7a647f59781a6cc5f9bf52ced649382234bc4d10c8c570a9efc504
MD5 38f8b8da69554d62d1ad7b6e32efb9bb
SHA1 190fdabe9a664c072c0719289c3821a4d5fe33a5
SHA512 6bcd96f77705b63b85751d777b3772ad2e6e08d4453337e5d7839910a07eb964fdb06cd75bf937da0a47bcee9a6c526de19b54ae07832daaadbeef1301aefa37
SSDEEP 384:xnZcIhsNSfDlFf6ziHlPfe+C9O3+roS+2KpXnTKwBODNZOCegh:9h92wPGFO3CLlKpXnewBKZOYh
TLSH
T175928D71AC385C779AE2E645F90735138EF89173F6893B9495ECBF1C01EB698230AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ac86c0ca-6b8e-463d-a0f1-57ca7f2d6048.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ac86c0ca-6b8e-463d-a0f1-57ca7f2d6048.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 81dc6742e9cc92d63fd2bbfba89afc05fdf4378fe8675ff30a9aa54eb8d4a527
MD5 f74b632e3b869ec9d974887b03ea185c
SHA1 0ff857bc3acc8ab82d81a9c3b362a5b34de848a8
SHA512 ee3f12d5797e1bb14c0138eb96b5892a7195dd44c54a6dba24ecc91faa39f53e61b54528fd03ca85fcb792ad735fc618f89ec4c35cf08ba0cb9bee9dcefb0173
TLSH
T1F3410758A6E91148B3B76F56ABF6A86E487FBC372E06D55E10110E4F0633A01C971B33
MD5 SHA1 SHA512 TLSH

Submit Download