hxxps://himish[.]com/claim/a080f167998b8f520fd679bd19dbd75464bc022acb2a2146e46070a4c8beaee7

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 16:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://himish.com/claim/a080f167998b8f520fd679bd19dbd75464bc022acb2a2146e46070a4c8beaee7
Sample260817-val93avdkc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3084	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314588493887135"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{0F97F73E-3301-41D1-B5A2-D2509CE72636}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1356	msedge.exe
1356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe
3188	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3188 wrote to memory of 3376	3188	msedge.exe	84
PID 3188 wrote to memory of 4420	3188	msedge.exe	86
PID 3188 wrote to memory of 3084	3188	msedge.exe	85
PID 3188 wrote to memory of 4420	3188	msedge.exe	86
PID 3188 wrote to memory of 4420	3188	msedge.exe	86
PID 3188 wrote to memory of 3212	3188	msedge.exe	87
PID 3188 wrote to memory of 3212	3188	msedge.exe	87
PID 3188 wrote to memory of 1584	3188	msedge.exe	88
PID 3188 wrote to memory of 1436	3188	msedge.exe	89
PID 3188 wrote to memory of 1584	3188	msedge.exe	88
PID 3188 wrote to memory of 1584	3188	msedge.exe	88
PID 3188 wrote to memory of 1436	3188	msedge.exe	89
PID 3188 wrote to memory of 1436	3188	msedge.exe	89
PID 3188 wrote to memory of 3020	3188	msedge.exe	90
PID 3188 wrote to memory of 3020	3188	msedge.exe	90
PID 3188 wrote to memory of 3020	3188	msedge.exe	90
PID 3188 wrote to memory of 4268	3188	msedge.exe	91
PID 3188 wrote to memory of 4268	3188	msedge.exe	91
PID 3188 wrote to memory of 4268	3188	msedge.exe	91
PID 3188 wrote to memory of 804	3188	msedge.exe	96
PID 3188 wrote to memory of 2932	3188	msedge.exe	97
PID 3188 wrote to memory of 804	3188	msedge.exe	96
PID 3188 wrote to memory of 2932	3188	msedge.exe	97
PID 3188 wrote to memory of 3516	3188	msedge.exe	100
PID 3188 wrote to memory of 5024	3188	msedge.exe	110
PID 3188 wrote to memory of 2024	3188	msedge.exe	111
PID 3188 wrote to memory of 5020	3188	msedge.exe	112
PID 3188 wrote to memory of 1856	3188	msedge.exe	114
PID 3188 wrote to memory of 1856	3188	msedge.exe	114
PID 3188 wrote to memory of 1804	3188	msedge.exe	116
PID 3188 wrote to memory of 1804	3188	msedge.exe	116
PID 3188 wrote to memory of 1356	3188	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://himish.com/claim/a080f167998b8f520fd679bd19dbd75464bc022acb2a2146e46070a4c8beaee7
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa4b72c188,0x7ffa4b72c194,0x7ffa4b72c1a0
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1620,i,2438296079423990399,416520458102360989,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,11306056439841059185,6192890373143545061,262144 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,5875276439512695896,15645119876559720228,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,18052753580705510634,4216185020998175922,2097152 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,17420356806702118053,14635421044736416082,2097152 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,5968338754546568171,14114452057316366595,2097152 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,4520161402027456614,11638857172213941977,2097152 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,317773177294874126,17783255546012603826,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3416,i,16904851641250018084,18223740314108498378,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,1057990037601733496,11139246930286389113,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,1057990037601733496,11139246930286389113,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6408,i,6061136375080699964,17733095658239974768,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,348148202458445527,11028338081853640077,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,13012129319337563165,1058327568129698048,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,14916880297173990702,1868402068304435734,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,5011088390116987020,624216029853307887,524288 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6420,i,6252939346274811109,828077258462827210,262144 --field-trial-handle=2236,i,14024307666401463813,2121501299746775181,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b25a29a57b115e134f4db49f81c4a8e37313c157d89b0e4569d3e4fc217e6830
MD5 fb83112520a2dfbb8c9a8b31c48da571
SHA1 aea338f3b58754ec708b72175f6292465a8bcdc6
SHA512 fc0f8447dd947b33a2358406f8eb4d893c2e4413c96b774e9fe9925cc3132e5c72c9beb0a09f8e2b55936190f08437bb787065caff3633ad5603e38333d2acfa
TLSH
T16481B4370951B490F7900F3A70D20543FCBACADAF6638E57906DC9BA5536BA0413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588325.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588325.TMP
Size 3KB
SHA256 28bb130e059b5c9897d0e6e2331b2f2d2b64df0f1839ebb9a948abf314f2bfe8
MD5 b96048d875cfd44d03b961f7865f1880
SHA1 36d8282b0a9d82828d48d37b11e13f5c1b019d1b
SHA512 9ccb8282b824c2644172f23b7290db028462f03a7db41d278ede6eb30ec0524000ad14c38c70a088ce954c9fbe8898830025135e00921aadc11a1ba841cd7492
TLSH
T1FA71E7350921B891F3901F3A70E64557FC7AC9D8F7578E9790AEC9B86927B60413E2CC
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 402f95657e8034cf0a70a5907f914cea9cb17dc6a116a53d394bd432ae4e9f32
MD5 676469f44a43789007f13d48c82853a1
SHA1 41f15ee312dda12aa74bfbd9fd1a67dff81c24f9
SHA512 0d6cec1ecd14b04c40549f294cb1363a5fedc56c86a217939ca0c57cb72c979cf1651a7f95429f1db069dba463960d50c7923b3b0b947f00d4f073f9a938c9aa
TLSH
T196213AF787E585AE8A1157F09A14AF1BCF2D0615431C7C29CAD4BE27D3F3465E002A9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bed94a98853a55239355623e5693ce961ce58fe0aeb4cb43732a036f7573f6eb
MD5 534bc96cb158d115a362f15568777218
SHA1 74c91b195997a9d56cacb9bbf1aceed0f5d9efe9
SHA512 a5f9e59abb03eb57f9cef507347eb61c10aedde40bba8b40481aed6963b4b9f152a0a22678b0b5a32203d7403439c132864dbc336970d73af92c66fb003ae3ea
SSDEEP 192:sxZsRWka/fssTlzIdpGxHW6+WNl89/YC0QrBqIgrJ:sxZsfa/fssTlsWHbO/F49
TLSH
T1D422C9126E38A9774CC7E21EBA15BF53E6F9503295D11E48EAFC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7c0dd792535342d5378f41e2ae3522ab0d62f50e2e5110f6e2262fb123061480
MD5 56c78f176574c452fba20286a9556f76
SHA1 a1d4071314d8f9b321baa96d2af905978cecbfe6
SHA512 1e43fcc2876db8c3af51236fd7fd17abae67bb7cb9d5528e7e382d2bb50c185d28da84d663c98ad5067d9045fa121874b76be54267eec1f9bf2f4f401b9655dd
SSDEEP 192:sxZsRWka/fssAlzIdpGxHW6+WNl89/YC0QrBqIg5YJ:sxZsfa/fssAlsWHbO/F4K
TLSH
T19822C9126E34A9774CC7E21EBA15BF53E6F9503295D11E48EAFC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 65d324bbd7a6d919679aae5384a06d769e4fa4edd323707f4414e90e850cff26
MD5 d8e3daaa4ea8049037f2f3568a01e0b3
SHA1 3344ef07bdafe45f8540d5d1441d3bb070a3af71
SHA512 04a15073101b8cd65315b1078b43944c059c5029f8793538ad56d1a02105fbf852c05c59c1e455b8218c76bfbd1a0f20b344e80e76cb7e2edd5d2ffa6e8aa0e2
SSDEEP 192:sxZsRWka/fssAH1zIdpGxHW6+WNl89/YCxWrBqIg56J:sxZsfa/fssAVsWHbO/C4Y
TLSH
T1EE22B9526E3469778CC7E21EBA15BF53E6F9503295D11E48EAFC961C04E7ACD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 cc4190f5fb99f1a7bc7456533b0b8754b779dfdf370f951c92b53c5e157e8814
MD5 7899a167c3c8d607121ccaf57435fc93
SHA1 a4a2a769e9c2e1788d3670f131caf30a3c2137b6
SHA512 2bf59e45b2d023181959cabaf73b510f428151bdef9a7548e8dad59e741f648eb5ee7898932c241b7c759d9c4626efccf57d91823f6deddc32a39ce614a02ed2
SSDEEP 768:HBqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKr0roL:HBqbUj+WvSCs6u1jaaZLbWrfL
TLSH
T1BBC2D83B240CCB7E4F801E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590c99.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590c99.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 d4895ce58d625dababcd7792cc117c7a36f865dbd8df5f3db5a0ba54190c6b63
MD5 6c905131cd2962694d1156baa9041fe7
SHA1 dc1bf991ae2ba6a44822799eb5c9d31e32065916
SHA512 ac41c62aa090959b320c97939ec80ed04707e820bf51c41a420b5cc84c0a2e1439a480bc300411761da708acd3d64ee154f713c091f393864430c4ed33317b84
SSDEEP 384:9ZcIhsNV19wyJAEa+lOy+HVYo5AKOOPrXLpe8C/lyy:lhmza8Oy+VWKOi9Pyyy
TLSH
T139928E71683C6C666DE6AA85F48627139EFC5127E6C52B84E5DCDF0C05CB69C030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a1b9540ac707fe138aa6c96e00ab10e338c8225540375122f8e5c71d92386118
MD5 681e2360f5658f49b66ef0e99c26beea
SHA1 8ab65fd7b623700e31a0946f83e65e94f5fedcad
SHA512 30c12ce859b8b4eacbdfe9edc6a5b0f628d372fdce788d41074f49ca4082d21482f17c2f9dc71b9660e054c85690ee7f9c85ccf09fe25cbf7d7b67ff45fe65ce
SSDEEP 384:+iFiZcIIsNv8TUNTUlIl49wy5AEa+lOy+HVYo5JKOOPrXLpe8C/lyy:VFQI+wgsza8Oy+VHKOi9Pyyy
TLSH
T149D22AF254EB5976D9AE5B47A77D2E038EBCC163F5856640B3889A0CCC8A1BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dacfe8856e724ed6af5721b1b07cc6e0af597973b9edc771e2a519bdc3754b62
MD5 787a3b7ea653946b49cfb06d0dc68c76
SHA1 21e508a00a0dbd3e418d2559aa8bf91be0025b3d
SHA512 aba4d5b7e95501473a5e4793ba00b78eed3a31e977033aa100da44192f75c92f72419dc0366b8a00c4753048084ace02736fc6d3da45c3324a44c2ea2340e088
SSDEEP 192:vONf6Db6QmiUyXPHBa+jpOmN+BRgtRrU6:vONf6u6HBa+lOy+IzrU6
TLSH
T1A602F83968786CBB9EE26E49F48737279FD4203BD9566B94DAD81F0C00D765C230B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 bd58cd04ae6e184a317bc0b885bdabfbdd60898eb5c7be80e4f55bafccd559ef
MD5 8441f48b8762640706da2f8672e632b0
SHA1 8cd875939167962b9c79e260e7f1ec6124f0855b
SHA512 eb235781ad8fbe52319dd3668a1eb8d4b35ef0b19df5a672427fbe9b8388b4a02f6e9f999bad120fb8001bd75e91bf38699f788f64278af338aa494fe7d58fd6
SSDEEP 384:WZcIhsNV49wyJAEa+lOy+HVYo5AKOOPrXLpe8C/lyy:Eh/za8Oy+VWKOi9Pyyy
TLSH
T140929E71683C6C666DE6AA85F48627139EFC5127E6C52B84E6DCDF0D05CF69C030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 086923f89e389dde6447d78777d45d2b90239a2d26ff32675b1214f6f654268c
MD5 6418df3245ade008a111ea8bc6582393
SHA1 b9badd2254cf8163c313350ee93ece3ffa17bc44
SHA512 0d844bad02c57116cd723f7d360d4e32dec6d13e72bf48c8dec8aea0e8bcccc515b74e7f497eacc2d9b4e7055426ea8e7be3775492540554ebf7f1d84f18d8fc
SSDEEP 192:UONA6DbEQmiUyZPgBa+jpOmN+HVPPwo58Nz3dqfU6:UONA68WgBa+lOy+HVYo58KU6
TLSH
T1F1123A367838AC775DD26585F48736139FE81127DA8A7B90D6DC2F0C00EFA9C134AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9326e661-b276-48f3-9a57-f62ec42ed65d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9326e661-b276-48f3-9a57-f62ec42ed65d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c940abc7263a956032bfb1d7fcdb80a176884c97bd5daf8de82c03f2ae190d0b
MD5 03bbc24039056906c6f38d174ea27993
SHA1 fbfe01eb902f026cf4f3a91c8bcfe27450715b36
SHA512 c06a91d8709d5d63458935bd946f2e5987e1ca9dd95f871163b5907370cbc27e830bb2979697d98e66415e3adc9c0bc1d6606d40c9b294a2b68bed9639e22949
TLSH
T17641D69CA6E91108B3B3BF56EBF6A8AD487AB8372E0BD45D10010D4F0A76F41C861737
MD5 SHA1 SHA512 TLSH

Submit Download