hxxp://a[.]http[.]dev

Resubmissions

09/08/2026, 12:33

260809-prct3aer2w3

09/08/2026, 10:36

260809-mnat7azscy8

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://a.http.dev
Sample260809-prct3aer2w

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3940	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307524132967245"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{A05016E6-67D2-4377-836B-322D5CCFF6D2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1208	msedge.exe
1208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe
1256	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1256 wrote to memory of 2444	1256	msedge.exe	86
PID 1256 wrote to memory of 3940	1256	msedge.exe	87
PID 1256 wrote to memory of 4832	1256	msedge.exe	88
PID 1256 wrote to memory of 4832	1256	msedge.exe	88
PID 1256 wrote to memory of 4832	1256	msedge.exe	88
PID 1256 wrote to memory of 2160	1256	msedge.exe	89
PID 1256 wrote to memory of 2160	1256	msedge.exe	89
PID 1256 wrote to memory of 4196	1256	msedge.exe	91
PID 1256 wrote to memory of 4196	1256	msedge.exe	91
PID 1256 wrote to memory of 4196	1256	msedge.exe	91
PID 1256 wrote to memory of 4364	1256	msedge.exe	92
PID 1256 wrote to memory of 4364	1256	msedge.exe	92
PID 1256 wrote to memory of 4364	1256	msedge.exe	92
PID 1256 wrote to memory of 2924	1256	msedge.exe	93
PID 1256 wrote to memory of 2924	1256	msedge.exe	93
PID 1256 wrote to memory of 2924	1256	msedge.exe	93
PID 1256 wrote to memory of 1012	1256	msedge.exe	94
PID 1256 wrote to memory of 1012	1256	msedge.exe	94
PID 1256 wrote to memory of 1012	1256	msedge.exe	94
PID 1256 wrote to memory of 3864	1256	msedge.exe	97
PID 1256 wrote to memory of 3864	1256	msedge.exe	97
PID 1256 wrote to memory of 3864	1256	msedge.exe	97
PID 1256 wrote to memory of 2676	1256	msedge.exe	99
PID 1256 wrote to memory of 2676	1256	msedge.exe	99
PID 1256 wrote to memory of 2788	1256	msedge.exe	100
PID 1256 wrote to memory of 2788	1256	msedge.exe	100
PID 1256 wrote to memory of 4160	1256	msedge.exe	102
PID 1256 wrote to memory of 3564	1256	msedge.exe	110
PID 1256 wrote to memory of 2688	1256	msedge.exe	111
PID 1256 wrote to memory of 3052	1256	msedge.exe	112
PID 1256 wrote to memory of 3564	1256	msedge.exe	118
PID 1256 wrote to memory of 3564	1256	msedge.exe	118
PID 1256 wrote to memory of 1172	1256	msedge.exe	120
PID 1256 wrote to memory of 1172	1256	msedge.exe	120
PID 1256 wrote to memory of 1208	1256	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://a.http.dev
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffaa95ac188,0x7ffaa95ac194,0x7ffaa95ac1a0
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,7129999498216031424,17463436047837545852,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,849342893093754290,10746636695625267860,262144 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,4589868534011155534,17220998098094507889,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,12043631244794247888,191918836609796590,2097152 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,8945584475297033268,2955093586044475718,2097152 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,5559243159503701663,12254785866774189985,2097152 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,8191281613351264140,8946985726431407016,2097152 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5024,i,8215659581128164932,2256806630013161196,2097152 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,3048376780546699529,11800439001767585255,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,7414879828006060366,13162613328773995711,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:8
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,16820430328315238016,6082657862708321549,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,16820430328315238016,6082657862708321549,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,16249951939691396886,17260430118847393121,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,13980301224174555191,14768859908233333143,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,8882364724546982703,6473207780413276064,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,1052231110906035338,4259544415938438358,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,18212204729346045726,17167680705870630721,524288 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6192,i,4968213135797296450,4550161290267735181,262144 --field-trial-handle=2236,i,8101431734908222491,10530922901835411658,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1ebb892eec5623cd6338c9680f3d5bbe5beceb777ac797eef782291ddb5394ce
MD5 f02316dd70f23fd4bdf80bcfd1c7bb31
SHA1 83203fa6263571560644f99f37efac6c213d508c
SHA512 c9fdfc3c4bbd30ddd15c74d7e17ee238b92132107eee86926f8bda7a59a353e0363813357703fa009eeecf3b16864ac522f00e6c9ec852013a63410293224c74
TLSH
T197719338C78309A5D76174B290FE0F24797687E8FAF32E85D85829346F1B751C3682C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5919b8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5919b8.TMP
Size 3KB
SHA256 d0b8e7bdbc55a899adbe64b140c1a8403bdc2addbe85c9e5a2c668b416ce5a85
MD5 48b54dfa844ac039a24c9ef3142519a1
SHA1 84d6350e313d50b4fe0a7081234715b2eaa1a565
SHA512 32dc6eef3df6da9f02b04b5f4d17ee0fdf75ca3d571e79d414aaa99f28b1228e77e84a28e065ba6a2b2fef3d22050efb45b1cf6b1207cde2c27e6396e85bdc09
TLSH
T1CE618138C78309A5D76174B294FD0F24797687E8FAF32D85D8A829346F1B751C3682D8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 aaa603e36bbbc13ca2f91db15b46338156b26f616160f0a1ae9359fe0d5b71d0
MD5 2c6fedba88837d790476f242fe7f899e
SHA1 b2ea63ead66352c8e91bbef3ee836275d1f052a3
SHA512 13626b800d6913e939e6a60556b2029c270b0f4b071f9e83495d1473b612b94c77c158f84bc8390929e8c0f9b5da590c1bd8c412e99f43228ad99e5306c87af0
TLSH
T1D641EFF3C3E586AED91156F09A24AE1BCE1E0D09422C3D1AC6D4EF0B97F2075E20295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ebd0b836552cd963a99f4292106ec8794cc3af64364503a5aeb5d7507e0ad759
MD5 c7b8fa1bf16305afa5b812fb4923bbd2
SHA1 3e6a0d77958018df229bec3f9f5bf54b180ac5bb
SHA512 510028c457cd8cb8924bde0b8a8e90fc10f9eaddf6db54afea8d8ace95606f2671fe50d84c993f3f8afce0a27ebee976a5f79e169239ac9c3518c47ee490d208
SSDEEP 192:sxZkRdkx/f5scKPwIdp+6HW6+WNN+t/YzOfbDtIgrJ:sxZkkx/f5scKptHbC//l9
TLSH
T19F22C9526E38E97B8CC7D209BA15BF53D6F9503291D11E58EAFC961C04E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 54b3c73258b2ca75a481a4f7dcd4748cf6a37904362ec0e18be3d298cdf230a0
MD5 9c86b691f61ee00c5c7dda55f9601e7c
SHA1 082f5802215489eb040c666a5342124be8cfb1de
SHA512 924221b8b9ae171dcb8636b0d4aea82e3c5cb4a4e0523049789ab59c9e329ffc65a4d8844c4d102d67ecaeeb255913dfd45978c6a18992cae583fa6adae9ede3
SSDEEP 192:sxZkRdkx/f5siKPwIdp+6HW6+WNN+t/YzOfbDtIg5sJ:sxZkkx/f5siKptHbC//lS
TLSH
T1EA22C9526E38E97B8CCBD209BA15BF53D6F9503291D11E58AAFC961C04E7ACD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c6e7fa19097262b2352795156e75de602b5715a9b9b705d30618a3d00c78ea21
MD5 2e5e568fc25a01d8a11cff59641e0847
SHA1 862fc003d1fd1369c285b4bde4f26c24495eabc4
SHA512 1447486ac5bf9e767a1fa8df167a41e215e93a8ddf2296f7288dbfd253bda5313638df68f5dce16cb4690aace57ab87fb40d5c9d8fbd0d1f7a9937cc5991ca77
SSDEEP 192:sxZkRdkx/f5si/PwIdp+6HW6+WNN+t/Yz41bDtIg5eJ:sxZkkx/f5si/ptHbC/DlQ
TLSH
T12032DA527E38A97B8CCBD209BA15BF53E6F5503291D11E58AAFC961C04E7BCD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6ac67687e752d55997c3c10c70bf0162bbf6c079d7d4e8f16139581d6d08fdf5
MD5 02057960afb07c0aacc0665108db1a5c
SHA1 5cc647a6169037f8fc19a311ec16b3b1c54b5bf3
SHA512 51c12666f44bb6068c7f5305cb5b69040152fc65d7616763de43d4d85cb84f2fd1b1bd1d1e83185442868baac3f1864bd5e99ac7bbb02b374c27c0d9cb5cf524
SSDEEP 768:zDk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSB8roy3Y+:zDk7u70WvqiEau1jai5LA3BnL+
TLSH
T1E5C2E93B744CCB7E4F800E9DAC566F977E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8d3035db88a4dbff7ff15e753686e0353a08d43c79b7a44ab0d8d43aafdb2f06
MD5 b4c274b16f188347b00d4920daad3794
SHA1 1610a882015894afcbcf5ab147785eb3c6aecea3
SHA512 5868b4a0a68937ebe4be7f77267a1d6b60eb635809b644816321d4af3be153766549d844115863e1bb46ded17c08bdf2554043218372a1cda107a522bcacc19f
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTTIIjK1Kc7y5CI/KT60vHIdK80Ii:KIbCKcTIwK1K6aCgKT6wHmK80J
TLSH
T100914607713E0A5538BE294DB6A7A5369F4232633014B46F7F7804A21E6BE214EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f2ea2423-a006-44e6-8903-3d8ea4ba0842.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f2ea2423-a006-44e6-8903-3d8ea4ba0842.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 e99cc146e030a616b2f4a1a93153d519a935291c79a3b27bf20bc664f1969611
MD5 44c4b4c5cc02ff0edac082d65f667525
SHA1 0ec01b8719bb2e39239b996d6cf65c72cc2de99f
SHA512 74fdc261462747b61d300c40cf047687137e6e8ad6280d0537b7bbcf5195a27998921b63b15f346ea2aedbcd311b138e9dd0e9b2690281cf00d07af82adaa64b
SSDEEP 192:gLsNmRQ9NyDBbi6QmiU1F/U4aGBPKK7+FdG29p9hFC1SJrodNmq8Qjj8SgDdBaKC:2sNmRkqb9brMdtp5CEJrCgRD58yKf0U
TLSH
T160724C329C74AD7B9DA2B141F84A37135FF40177AAC55EA4E7DC6B1C05DA2DC2316C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 cc347e35e1685ba2862392ddd692de74fbc36af7431ec096fce6f6fae580a994
MD5 9e79fcba853b47ac3af635d00944ede8
SHA1 ccdef16e79eac628e78ea4755ffc765fc53ab14b
SHA512 ccb767693f92ef04803a25296b78cd74762546f769f60e77c245866f7b3814600fa600b6d84b2f1fd613224722987199f6ab5940586242becd3ca7d8ed9e0a04
SSDEEP 384:CiFiZcIXzsNm8TUNTUlIlANkqb9wrMdtp5CEJrTgRD58yKf0a:JFQDzwg2LWIphTgRmyKf3
TLSH
T11CC23BF248E7993AD9ADA743AB7D2E034EBCC027B5815654B3D85A0CCC561BFD306C05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 b1559e04d3da52b6ea9bb002280301772278a992e687d581e8081d405f9f5953
MD5 feab2342d7155bc806fc1978e908f619
SHA1 3e171eab24dce1c57a2c76daaa0ff53ff1d7e2ac
SHA512 1bb9f9f3309bdad70c4df3547ec7efcef8d434dbb9412bcfd348e949cf7a20a45adad1953e6277acc91a7839c9615f6a639febb4a37f67e02edb4bf4baf26f6f
SSDEEP 192:wLsNmEQ9NyDBbi6QmiU1F/U4aGBPKK7+FdG29p9hFC1SJrodNmq8Qjj8SgDdBaKC:GsNmEkqb9brMdtp5CEJrCgRD58yKf0U
TLSH
T13D724C329C74AD3B9DA2B141F84A37139FF44137AAC55FA4E7DCAB1C05DA69C2316C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 6077e836c3854347c8301e1f4728bf6d6cbbcf74d42b456af1db5881720e51e0
MD5 c4ba26cd439d1d65856cd02b7dc0ad20
SHA1 700b859544e1f0bb1d6d0ffe91ddffe4f5fe0d89
SHA512 322181cfcf0d1ec3cce973ddbff3c711543864d33fa7527ad7789f2c819051fd8aef6f38bfb73cd3d658a85587b4883b964c8bd70083aaeb38d25f269f37a2cb
SSDEEP 384:zZcIhsNmANkqb9brMdtp5CEJrCgRD58yKf0a:rhCLJIphCgRmyKf3
TLSH
T14E928E329C746D3B99A6F141F88937175FF45037B7C55BA8E2ECBB1C019A69C1316C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 17582d54476258d45f3a3b3a77bb06fe99c15370d7f2b88b317056e43a9e9cdd
MD5 805d94fa7380d218316740e637569d6e
SHA1 9b5422f335f347a121636d44b90279e6c8dc7c1d
SHA512 dd694dd5bfee45f17edc7da5849cd641c6a56dba5cdea5b2a2f6062af35abfbf1e60156490f86cf5e983046ed27c20dceee485c0a3b5c309c6cfa4b3cf1d7529
SSDEEP 192:MONY64BAQmiUyt1MW5GBPKK7+FdG29poaDRUxU6:MONY6eAq6WLdtpRkU6
TLSH
T1290209346C786C7B9EB2AE45F58637175FE8103BE6C05B44E6E85B0C019765C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bfc1dc6842a159b607b9a9dc3ad6ac64263d14cb0726803e6b9908f17b11afba
MD5 1aeeb1c504284e8e83680ec3d70a165f
SHA1 2055408db26abe1687d8e36b5d36e736ce22b359
SHA512 1e567895d66176f2cd29aaa6f423d59f796da67a6bce5a98593e01fdf07c929dfa278521d9ac68d77576054b7bf1774267b460ee7ac4ab91cdb8748b8636c552
SSDEEP 192:FONH64B+QmiUyMMp5GBPKK7+FdG29p9hFC1SJraWwmq8U6:FONH6e64pLdtp5CEJrYgU6
TLSH
T103120B35AC78AC3B5D92B541F48736035EE8413BEAC56F90F6DC7B1C01EB66C2716816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e7a691b-7caa-4b20-9b58-88e1c5038eb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9e7a691b-7caa-4b20-9b58-88e1c5038eb9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 293a4631e1b8aafc91b6b5f2b1de1342aa6f74c55a6a5d3e064a3fbfc6d1f3ea
MD5 8e1a75b75960a011a3ded2f20272417c
SHA1 813a2cd20a7194c7936aa25780993de508a52f0d
SHA512 c515b94fdb6c0b3d2c8804574c9e66ac118ea1d6d9155a5b8fded91e4fa03766c9a7bda07063158b8894bd52d12903f8f3d670bb49d8947bf941839565081e4a
TLSH
T10941E669B6F90148B3B77F6AABF6A86E447E7D672F07C45D00010E4F0766A40C962B37
MD5 SHA1 SHA512 TLSH

Submit Download