hxxp://darkforums[.]ru/Thread-DATABASE-USA-zoominfo-com-Business-Lead-Generation-Platform-Scraped-API-30M-2025?page=9

Analysis

user interaction
yes
max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/08/2026, 05:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://darkforums.ru/Thread-DATABASE-USA-zoominfo-com-Business-Lead-Generation-Platform-Scraped-API-30M-2025?page=9
Sample260824-gl2bgatbme

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2480	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134320244684033014"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{A95ECCFC-7675-48EE-AA80-1B3033C3FE88}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2496	msedge.exe
2496	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe
2044	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 2044 wrote to memory of 4280	2044	msedge.exe	83
PID 2044 wrote to memory of 2480	2044	msedge.exe	84
PID 2044 wrote to memory of 1620	2044	msedge.exe	85
PID 2044 wrote to memory of 3864	2044	msedge.exe	86
PID 2044 wrote to memory of 1620	2044	msedge.exe	85
PID 2044 wrote to memory of 3864	2044	msedge.exe	86
PID 2044 wrote to memory of 3864	2044	msedge.exe	86
PID 2044 wrote to memory of 3664	2044	msedge.exe	88
PID 2044 wrote to memory of 3664	2044	msedge.exe	88
PID 2044 wrote to memory of 3664	2044	msedge.exe	88
PID 2044 wrote to memory of 2116	2044	msedge.exe	89
PID 2044 wrote to memory of 2116	2044	msedge.exe	89
PID 2044 wrote to memory of 2116	2044	msedge.exe	89
PID 2044 wrote to memory of 1020	2044	msedge.exe	90
PID 2044 wrote to memory of 1020	2044	msedge.exe	90
PID 2044 wrote to memory of 1020	2044	msedge.exe	90
PID 2044 wrote to memory of 2140	2044	msedge.exe	91
PID 2044 wrote to memory of 2140	2044	msedge.exe	91
PID 2044 wrote to memory of 2140	2044	msedge.exe	91
PID 2044 wrote to memory of 3060	2044	msedge.exe	95
PID 2044 wrote to memory of 3060	2044	msedge.exe	95
PID 2044 wrote to memory of 3060	2044	msedge.exe	95
PID 2044 wrote to memory of 1360	2044	msedge.exe	96
PID 2044 wrote to memory of 4192	2044	msedge.exe	97
PID 2044 wrote to memory of 1360	2044	msedge.exe	96
PID 2044 wrote to memory of 4192	2044	msedge.exe	97
PID 2044 wrote to memory of 712	2044	msedge.exe	99
PID 2044 wrote to memory of 2604	2044	msedge.exe	117
PID 2044 wrote to memory of 400	2044	msedge.exe	118
PID 2044 wrote to memory of 636	2044	msedge.exe	119
PID 2044 wrote to memory of 2020	2044	msedge.exe	122
PID 2044 wrote to memory of 2020	2044	msedge.exe	122
PID 2044 wrote to memory of 2496	2044	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://darkforums.ru/Thread-DATABASE-USA-zoominfo-com-Business-Lead-Generation-Platform-Scraped-API-30M-2025?page=9
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff90f1fc188,0x7ff90f1fc194,0x7ff90f1fc1a0
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,15581053311403428291,2235946837053229761,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,7238972702241445702,11643811556969814133,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,11694907287417258865,7852971949487378068,262144 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:2
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,2523707285805125945,16339656458984194093,2097152 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,3282182225359628164,17019772351769158819,2097152 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,14209895804838685794,17273615759385189207,2097152 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,3821616420675668520,10490915632411875555,2097152 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5112,i,9749847770553520744,10397774774276786878,2097152 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,15949985525278576609,5231134805984999855,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,17424174632642676452,16070282468018985845,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,9280662633367713981,1180417478781506470,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,9280662633367713981,1180417478781506470,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,5192339360572555156,9082846089423076513,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6316,i,10930823492586493931,15004222457080754675,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,12373553246625470805,13252118110895480521,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2712,i,12016018399945434721,7491186536281857181,524288 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2708,i,14082506052995386845,560331660303893322,262144 --field-trial-handle=2540,i,12020991729719899457,4626476983925118212,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2496

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4392

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 144626e54be666c37edefae30278de1b94c01f40a4b10a48823f9a2b42053558
MD5 640904e700b4ed5abe76ad8a832d5222
SHA1 91b3f95e4844370d624fc5bf38459a7b6e3aa05f
SHA512 4626a698799ac39609d571d480b1c6f582c5c65f43fb7e86022d2361bf6597a260f8654ddc01ffc519e9a0c80754e1f6a6a8765ee86b28b607abf705a02aa6c5
TLSH
T1A871503D09660961D3A18832B8CD5284BDB0C5EDFE371DAE0179FE74E60D31B912B0B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a39e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a39e.TMP
Size 3KB
SHA256 431328ee9cee4641d2183065d8c2209ced69d233a1dd02015c25b56e4435bd05
MD5 348b0b33cdbecedc8437ceaf5798ae37
SHA1 44a3234aacccd3d995c628169ba82a2a3a191008
SHA512 e8a130ad033ee29386d83495ffb2f943fbe1f16ef3f7cdc0863e2659f9193e7931d69f1e7717dcf0b6e0b321b9151d0ab6d7ce9b69db8b6a8a62def450f975f4
TLSH
T1BA71523D192609A1D3A1883278CD12847DB1C9EEFE336DAE0179FA74E51D71B812F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d10b6e2703c0e66efdd1af3f5bc039d7bc1bada22c13c961ba11e657b905def8
MD5 a8342d1fe44e875336ba8ba7c511e667
SHA1 182cb9ae5b109f0f1e05fc07691fb4c64bf6c416
SHA512 80ff3d936527f56a36a625f7c11f37782541b58a0b9b8f73446a9489dd83c42276f81e294239a19b12b3d8eaec8583fa71c468c156f6ea874d6c9626b7a0c165
TLSH
T1F2317CF6C3E5D65EC91116F09B14AE1BDE2C0905421C7C2999D5FF5B93E3172E10264B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5dc0cf18da1e10eadeb9855d49ba024f7790d2030e31e9953b31dccad93e6797
MD5 1b2e78357688ab88c9304b4b3099954e
SHA1 4be2a27b727bba7b8105b4eff6d23d4b2268df50
SHA512 bb3b8125110d9057a2d31259ee53086a31e8f203f496b8c1b5c0a876f54977bf8c443eada6e8170d2bf11421c8bdc33d91d0007a2d7eeb424d5f8a327bf97f52
SSDEEP 192:sxZlRrk3/fJsxxTIdpyaHW6+WNhnl/YIPtGV5IgrJ:sxZl+3/fJsxxMdHbH/U9
TLSH
T1BA22A7126E34A97B8CC7D219FA15BF53E6F9503291D41E48A6FC861C04E76DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4598edc14130220be799d869d0532f06a6c559f6802485ac86f71061976c8a9b
MD5 f68c85fdfa91133a448eec9aea2cd0d8
SHA1 3b2af7112b19eb785101c2b700a6ffa57601ee57
SHA512 6ab43fd08450b7c7a732915c815094595fe2b5af7f5d0d5c77a76ff8a94d94ddb7a242c95ff462e5a51d900e1ea77627e38c8356f487194ffe30c4dcefe9a5fb
SSDEEP 192:sxZlRrk3/fJs3xTIdpyaHW6+WNhOmXYIutGV5Ig5yJ:sxZl+3/fJs3xMdHbxXh0
TLSH
T12522A7126E38697B8CC6D219FA15BF53E6F9103291D41E48B6FC861C09E76DD224B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 52da2a4b4601d3ead118a87359993d412064a98731d2be4bed17951f602ed2eb
MD5 775cbe479d12c2a1817e52ddd9ae4346
SHA1 59fb5e17c8d32d9517da59c6e19f345b9b37b38d
SHA512 3a81f5396bd14d14519791a9be1fc198c168ee0cec8344222765b62a6499a83c2c65cc2d90d214196ac3e6f4bf774a59d1be5939a90f341deae2bd5ee64e711e
SSDEEP 192:sxZlRrk3/fJs3mTIdpyaHW6+WNhOmXYIhDGV5Ig5YJ:sxZl+3/fJs3mMdHbxXwe
TLSH
T18732B7526E28697B8CC7D21DFA15BF53E6F9503291941E48B6FC8A1C05E76CD224B80B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a5e749c0a73a2910c188b5b1b9db8d7e661de68d28caf9097719c1969d2674b6
MD5 24fc8bcf5ca40ca82ea594adf514a9b5
SHA1 f144b5c22ec1cf2e4f704899de12068b25f7146e
SHA512 b8972fbfee5ea2118424e9b2de8088d8e67ea26f690b9c7724be53052f8ad8bed5716039ea59dbf56e2454657734348009dd9a44c74033a7488503c27e49f033
SSDEEP 768:J4yqbblWvJDbT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR7KroPOw:J4yqbblWvJDbTu1jah4LAs7hPj
TLSH
T1B9C20A3B654CCA7E4FC00A9DDD2A6FD73E9802C7A6588D4047FA994C02C77EE512A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c7114d73556e659c8ee030725ff0f1e3e6f57cd244b007f4df46655be96574b6
MD5 4387f8eda34dc0d5566f68be26a50492
SHA1 4a9b7c56574a9f1f2066bde8ab637de8c3321dd0
SHA512 26eae8acf68979d9a9e11797198f24d906ff30c843972fd26c6ac65902b06a4d125abfbc7f9d75746a049c937447fe9bb7d2a66c1a45267d60c3b5bc88f87e31
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyuEVQUK+agembzIfcgKU1cCgAswpLikW:KYbaKYIKOfuKQY+S2gKnK7
TLSH
T1B4915916757E0342783D2958B3A69A374F4532633018A4EF3FB850624E66E220DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

342ef086-05b1-45e2-b230-25a3761dcd75.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\342ef086-05b1-45e2-b230-25a3761dcd75.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fdc6080fa6723c1becc6827acd730e47a5d4bd0ff357b130f810abde5a298f79
MD5 73f351c36aa00c4bd6c8dfa57c82d9ce
SHA1 482cc3dfae47f9d94d3c83286d4b28b3721d3ad6
SHA512 de9f2847ca66c4d2e774917febfe27b757a7eea857d1702cfe97705475de3eea657636c65b534b8a9eb2c9d2323af8c5c43a7260525f5cc3397394f47aec8515
SSDEEP 384:HZcIhsNCWkwLlbDVEVRNT6bkVivv+aOow:vh0pLPaHTdViHlOP
TLSH
T1E6827C325C344C7BADE29501F88A36175FB8916B96CC7F4095ED5B2D01EF998130B93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 7ef63a2746035c764c9a46051d5ddd497172ad54e6ce088a8e7f6a3c34869e76
MD5 212d1a058987893ae524ee29f378b617
SHA1 87791ba6ef5369f6cc8294d2a9af62e5e5873871
SHA512 a3a077d5ce4bd636fabfad947faf048b592733b118e2f05ed0e4e4b2956a37f6d0f50efaabc2aa57db330c2c3e47dea57d337a3c86be75fd78d9014394274ee4
SSDEEP 384:UiFiZcI0sNa8TUNTUlIlbkwLlbDaEVRNT6bfVivv+aOow:vFQ03wgFpLoaHTcViHlOP
TLSH
T173C23CF248E7487BD9AD8743E77D2D134EBCC067B5886940B3985A1CCC9A5BFC30A925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 23c03788eb786522fe02ad61729070113b438cef9f02a2d08d9c560c6a931cc6
MD5 67e9519589d9ca291fe42a1d13cac8ab
SHA1 e21b8e1204cf1e124feb92228f78c3f4c254fa5d
SHA512 a4d01dab01c92802a7de91c9b6f7001b2920d7f78c9a88f2fe5ec329e395670dc3276af744acffa85c190c08470ff9e604d2705a02a2e61382af7519fc36d076
SSDEEP 192:tONb6JkRtQmiUyaGW+RNKFCk5dZDh3LXREU6:tONb6UrAW+RNT6bVGU6
TLSH
T11602FA35BC386CBB9EF36D05B48737275FE4117BAA952F40D6E81A1C00D769C234693A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f495b0a19b1631327fa4d64084dfb59de160b51ef3ecf9dc6bf56e848d2ac14f
MD5 04da79bc16b0cfac914af34bcf7f98c0
SHA1 805ced66cc3cb90b0519c412ea57454e1ff3332c
SHA512 0b2d388fbb8ca4f7b7f6ead44a4da2da82ff637b11fd2cfa192c8e7d7463afca3e9e1a5c522e5065ef6093dfbe0c692bbb092e47a9d8f630698bbf463da6fdfe
SSDEEP 192:yOND6JkRvQmiUy3GE+RNKFCk5dZc0vOVcL4q/bU6:yOND6UxrE+RNT6btVU6
TLSH
T1DE120A36A8385C7F9DE2A811F48732135FF5526BEA897F40E5EC1A1C01EF59C134A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 83ef274fc6e1ce41112c99c5a0465f81cccb9d3852e084966ddd070b2a6a388e
MD5 a66c24c8d5a9d5d9822b19e5d4923083
SHA1 7f07fa963dde6ac087995aa6bb66fe9e2a33f073
SHA512 4f664f251d5b50bc6db1c0dda568d030ac4f088520899ad32ca4eb66dc130331842eefa912755f125c17170d76f09d21789b9c380d7f4b73d414c4ebfebfcaf9
SSDEEP 384:nZcIhsNCbkwLlbDVEVRNT6bkVivv+aOow:PhNpLPaHTdViHlOP
TLSH
T161828C325C344C7BADE29501F88A36175FF8906B96CC7F4095ED9B2D01EF998130B93A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc4393af-cb02-4edf-a138-b004c5f1cbc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bc4393af-cb02-4edf-a138-b004c5f1cbc1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 681709cdc88f62adfa4bba66624bd1257c9fcd3a55cd120c1c765045111c8835
MD5 e8056cbd1a157fcbdb40de041a94607a
SHA1 e4c6ae30b0d78e122f1043b0686cee2cae360170
SHA512 5ad591137036ce344cfb17df932109718da4d46d5843e3d66b73733b9e35a8bdc70138f8b4567114c3108101ff9ab875c3d8666b883b0aeb04653531c7740cc4
TLSH
T12441D898A7E91104F3B36E5A9FF6A46D447BB9372E06D59E10110D4E0A72B00C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download