1b09b82bc39fa3b80a09b7d2f9713aa09b9f9e0b50ca7fe2e00a8500ea13c123

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
category/guitar-pro-tabs/page/3.html
Size 737B
Sample260809-gx2rdaha98
SHA256 1b09b82bc39fa3b80a09b7d2f9713aa09b9f9e0b50ca7fe2e00a8500ea13c123
MD5 dc5a0fbb32b7de5fc59ce352fe05def9
SHA1 cecd57bfc3fb8d7109194ae713009cc2f96851bd
SHA512 1e745e083ad7eed44d2ac16dfe8b33e6084a34ca2aa03dca2fd89f1f5cea2410cb4ed783dbedb64bbe5681b7525ffd2610146b76ed7297e6f6dcbbd77d371229
TLSH
T1860190EFCC14A1932511D518DD9E7F40B323019A5640D9C68919097CD7A4266A1DF9AB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3520	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307295272348540"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{31949ADC-85D8-4D56-8031-BCBE38739149}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe
608	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 608 wrote to memory of 1968	608	msedge.exe	85
PID 608 wrote to memory of 3520	608	msedge.exe	86
PID 608 wrote to memory of 4972	608	msedge.exe	87
PID 608 wrote to memory of 4972	608	msedge.exe	87
PID 608 wrote to memory of 4972	608	msedge.exe	87
PID 608 wrote to memory of 1248	608	msedge.exe	88
PID 608 wrote to memory of 1248	608	msedge.exe	88
PID 608 wrote to memory of 2112	608	msedge.exe	89
PID 608 wrote to memory of 2112	608	msedge.exe	89
PID 608 wrote to memory of 2112	608	msedge.exe	89
PID 608 wrote to memory of 1124	608	msedge.exe	90
PID 608 wrote to memory of 1124	608	msedge.exe	90
PID 608 wrote to memory of 1124	608	msedge.exe	90
PID 608 wrote to memory of 3984	608	msedge.exe	92
PID 608 wrote to memory of 3984	608	msedge.exe	92
PID 608 wrote to memory of 2040	608	msedge.exe	93
PID 608 wrote to memory of 3984	608	msedge.exe	92
PID 608 wrote to memory of 2040	608	msedge.exe	93
PID 608 wrote to memory of 2040	608	msedge.exe	93
PID 608 wrote to memory of 2172	608	msedge.exe	97
PID 608 wrote to memory of 2376	608	msedge.exe	98
PID 608 wrote to memory of 2172	608	msedge.exe	97
PID 608 wrote to memory of 2376	608	msedge.exe	98
PID 608 wrote to memory of 2624	608	msedge.exe	100
PID 608 wrote to memory of 4520	608	msedge.exe	107
PID 608 wrote to memory of 3952	608	msedge.exe	108
PID 608 wrote to memory of 2732	608	msedge.exe	109
PID 608 wrote to memory of 1916	608	msedge.exe	112
PID 608 wrote to memory of 1916	608	msedge.exe	112
PID 608 wrote to memory of 2400	608	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\category\guitar-pro-tabs\page\3.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff8d046c188,0x7ff8d046c194,0x7ff8d046c1a0
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,10394733095091944686,4272149966086077648,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,7493034523604984581,14719683629233825093,262144 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,6417321025395769473,10795717554451950329,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,6694661880570797513,15712272383516413457,2097152 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,18328491582411039978,7560057797869855266,2097152 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,3882003908118062850,17390095822123498846,2097152 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,9719691105151127419,2715932408606343784,2097152 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,8436672084657963695,6917093867119608688,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,16208755478542993932,15163816258409439884,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5677567100828418058,14189853813030598266,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,5677567100828418058,14189853813030598266,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,14969199190719544453,15478225591269256599,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,1489968495083861240,13566829557176638521,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,8553245686039281515,7952181885284702818,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1000,i,13791426882780467890,5995405832790288245,524288 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5000,i,3933332095416303916,18344590352543239601,262144 --field-trial-handle=2112,i,6119029683911222607,3726281702330310905,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2400

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b82f3ed4d6d857ec07ec9208e2b4720b0252188b092045a9944c3bf4df2dc466
MD5 2fca869d7ed50b536ecd2d93f4589e0f
SHA1 85f04ab3ab5e3656ccd7dc5b241cadb7d23ae9cd
SHA512 612f9306b4e0a8bd9c445d1b4cdf9d1d2dd5c92ac76295b6aeb1fdba6fde5a8ebc06afadaf416b8ce69622e767cb5fd85f0a6e22e0f16dc33863adf3980129cb
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1E3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9cd9aa95f63add364b1474fa96d0c300649ab2702c1e62f2b69f8fea6c4a5f31
MD5 02aa1bfb8c9a263f591245ee03518cd3
SHA1 b9579b51086cd5df3e996677e0b555c7f2dbed63
SHA512 ccbbaedd330cf52a3665acff578e8322f52eb9054fd85e1bdc50d37e19c88ed7cee8b5ce7adc366b80fc2484d3518f292f6d226416f1a3b5f135622592a62422
TLSH
T1F0710B3A25030C95EB62153DC1D9C31176F1A2EAF1532F65D25085753B7DFB2A21BE84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587172.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587172.TMP
Size 3KB
SHA256 96c068c793208f2a3602c08ae1c744fcb0717ef43676481b20b18db469932ae1
MD5 27a7dc1dd4eea4d8dbaeaca553a3d74e
SHA1 e03ef55eb575965f44f57c0af146f6d1282c8134
SHA512 ae69fc12fe9941fbc302107197b8ca24f13462fff915476c06abf9b475747fb32d1baf0c39f4935d307cf39c69cbf55d82562f6f6c55b8036ed04f3253fe8ad1
TLSH
T183712B3A25030CA5EB62083DC1D9C31136F1A2EAF0532F66D2508575373DFB2A20BE88
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 cc206dc39a945507654e662b9632e9d9cced565adebbe432397e24e3c45b8e22
MD5 a817890474fb18232811f72a6f2308ae
SHA1 f76f84a67924ded2464c27d8656a97b509a2e325
SHA512 7f4bc88e3ac5453182f5cf4e13196c07c1397f463bbd86463fcde1b6b20f2800182c47f96716b599259a09052638f82166cd65be07ab6f9431b19aba5cfb63d2
TLSH
T15D117DB3C3D585AE890556F06A24EE2BCE1D0906421C7D29C9D4FF2BD7E3079D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c004054f3c614e04780af2e2dbd9d21cbd7cc5fc9ade4b709db987c04839ca82
MD5 bdddcb0a83310d053ad97e64f3b3761d
SHA1 d9487f4ff977ae498a2cb03f17c2e714e5b4f0a8
SHA512 f2ea401597582668fe9bb735c522e0f442fadb9bda69c4c4bbe9fa87144512cec376f3958999b029d1f1866c1bacf31ed8ca5db8a9d3922a0e0b4888f325e7be
SSDEEP 192:sxZIRgyM/jK1Ml8Mkv/fQsTD0IdpdiHW6+WNGYIkaFkIgrJ:sxZIGMv/fQsTDt8HbGc9
TLSH
T1FB42E711AB34697BCCCBD209FA557F53D6F80472A2900E54A9FCDA1C04E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c4a751eaf2b6bd00d97da7bef92d26d13be51efef97aafb5b04519f28f1e8a8a
MD5 3c10faca08da53026ad3cddf3f692e5a
SHA1 aaa4eac92dce9b993d98f1fd6d21c48a8bf90380
SHA512 c4a24e17bdc3da8b0df8cc9b6572abd57f3d1a554026c94a35cf6bcb2759154ef933ec1287f4e807f58c374765b78b2d372a52bb0db249af5e3d09681ad0726b
SSDEEP 192:sxZIRgyM/jK1Ml8UQ+kv/fQszR0IdpHiHW6+WNGYIfxykIg5lJ:sxZIGqVv/fQszRtCHbGvx
TLSH
T1BE52D711AA346977CCDBD209FA457F93D6F54472A2900E58A9FCDE1C04E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5a3f9f1fc121e4ae5bd6bfd5cc49132eed813bf2a8e9bc9929c9835e947db297
MD5 ac2dcea8d928db3133acd1e686e35d1d
SHA1 b8486f5cb7632288dbdedb7a07aa1f382dfe26c9
SHA512 50e0194d35aeb923ff650e2bc5e84a76dee485b8c5f9cff483a50246459195f3df34bfc88441270d084a37a0d67385e98f2408dfa6240cad312303dced975637
SSDEEP 768:TrsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Arowmx:TrsqxXlWvJD6Tu1ja54LAs9Lwi
TLSH
T1C5D21B3B694CC77E4F840E5DEC26AFD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 f9c755e59e5e4cf774163418dda55372aefee35bc31675bac057726c0f1b4830
MD5 1f241944ea56b10cc4dbe2d5ec9488aa
SHA1 192b6e3d96e4e279cb0d63cfe2d6535634b210a0
SHA512 f096d864eb4946a6ef95a2e2f158065ede71aa0a923d208074a388d94c2ac7c60712e9f6229361a9608b9a1ac838f936c9e752970f5f18ee8399bac5ba15f4e3
SSDEEP 96:KYbaKYIKeBOKy8CeH+KccvaMKvaO21KKGcq:ExBlRXTRT
TLSH
T1E7E13D12367B424238BE391CE3AE85774E423163341C697F3B7864621E66E616DFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c89f83-d89f-4c33-a8e4-9aedca18723c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e5c89f83-d89f-4c33-a8e4-9aedca18723c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 fc6bd1c409711dfa903ee5fadec388e467b6cf15710801c68500477d1463356a
MD5 7c5b9da460960ce776c585740e82fc99
SHA1 297346720ed91109276cb23c5dead9eeb0f0d5f9
SHA512 913e91d095f74ba46e4cdb24c94a4803c74252206b5e3e5014e219e7b288511016dcf2d5c3f5b516a661a4bb74abd909339dfc2e81f99e947710d68aef548564
SSDEEP 384:uZcIhsNrbDbnv5G8VRN3AaZ2nTKwBODNZOCBKDm:MhmGSH3Ao2newBKZOKp
TLSH
T161927C71AC385C7B9EE7B506F88731174EF891A7F6C92E54A1EDAF1C00EA5881307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 b5dbd3df2fa78242c54d8e0197f9bb2751764d34e44d2926c8d586a7708661df
MD5 b9e128e1b3d157e397e201cada414a11
SHA1 0fcea18f4504b237c07fc8fce56e820c4e3a8809
SHA512 a6a5c9cf394c3f5d278afaea3cf10f5a7d658e551b5a3f4b60106b47fd7a527108d20d0c08b5180dc17cc8b4cae009584abe51bab7f789311015efb667489261
SSDEEP 384:hZcIwzsNrqDbnv5G8VRN3Aa+2nTKwBODNZOCBKDm:psBGSH3AF2newBKZOKp
TLSH
T1BC927D71AC385C7B9EE7B506F84731174EF891A7F6C92E54A2EDAF1C00EA5881307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2d5523818b491f3b3495b42edb46646bfa7f4db5ccd0d8771caa5dc3545e956b
MD5 3be71b20d801832ce6f317ee191da87a
SHA1 b226d857f3593d9cf43e6c1ad04f0a8ecf868c5f
SHA512 91199a5e480f12e37c83f79fa79f3116ec6eea3187e52ca4631ca8eba89950b33ece58d0179698c4f5a1de8ca9cbffec9afede5d94c6c92df8aa9dd6b3823fef
SSDEEP 192:tONt6JkRtQmiUyfsPW+RNoCk1EoPh3NRgU6:tONt6UrWQW+RN3AB8U6
TLSH
T1DD02E935BC781CBB9EF36D0AB48736175FA4206BB9952B40EAE81E1C01D765C2347837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 99d03eace52e7b742e700c8825bdb52b84967e298ae507b8e7fe0b1201b60fc5
MD5 5535029b29996d7c1a1b61964b96f6ca
SHA1 f5ac8f81b355c3faeca466de48dfed3fa062a77e
SHA512 c191be9afeecd6f1d5b636eb4bd3d162258cad7f2fb4f7da401935dd4f5b4e20b8187edfe925f5dcca29a3ab787e7dd72c2a5e1aa94171e60a51acffe0a11659
SSDEEP 384:FZcIhsNrqDbnv5G8VRN3AaZ2nTKwBODNZOCBKDm:9hBGSH3Ao2newBKZOKp
TLSH
T186927D71AC385C7B9EE7B506F84731174EF491A7F6C92E54A1EDAF1C00EA5881307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 19647f2bad78d939377454601e309b433ed6529375a84e7906cfb0f969d2464b
MD5 1abb62427d276e3d8a848448728b67c5
SHA1 1404a592abbc8e3bb62ae775ff5a47dff8bcb54e
SHA512 88d7235fa469e99179550a856b26e662e243a6c5b6b422c99aed1b9f52f36160e66c3de92c90d5bc8266a5fc3ecf57fdce208f26c50765083d0c58cd0a0cd119
SSDEEP 192:DON26JkRhQmiUyfgPs+RNoCk1EowFVjbVcxqZhU6:DON26U/Wks+RN3AaS2U6
TLSH
T130121A32B8785C7F9EE3A845B48732135FE5516BEA896F40E5DC1E1C01EF69C134B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 34f8fda0d09330969989adb54a5742934e8e3d6f272aad94aa73b1ebb4bd7530
MD5 36b16748db5303f806631d81e4fb4ab6
SHA1 ebbc351dddd980e3f6c88464ac4d6e485714358c
SHA512 4879f65da95b62b7f491381ec2d4810931ddd3c642ba25becf52c9ca70f6dab82e59b76667cefdf5138fca26e5e4f2703f13271ef0fdd98b94d5b222092ad0ab
TLSH
T115413A58B6E91108B3B36F5AABF6A8AD487BBD732E0AC15D10010E4E4A37B40CC61737
MD5 SHA1 SHA512 TLSH

Submit Download