hxxp://weave44[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 17:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://weave44.com
Sample260826-vs4xtstakd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4636	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322381720494150"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{BBD78D75-3B52-4BAD-9F5C-26B212D8A427}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3856	msedge.exe
3856	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 3120	4848	msedge.exe	87
PID 4848 wrote to memory of 4636	4848	msedge.exe	88
PID 4848 wrote to memory of 3316	4848	msedge.exe	89
PID 4848 wrote to memory of 3316	4848	msedge.exe	89
PID 4848 wrote to memory of 3316	4848	msedge.exe	89
PID 4848 wrote to memory of 3580	4848	msedge.exe	90
PID 4848 wrote to memory of 3580	4848	msedge.exe	90
PID 4848 wrote to memory of 760	4848	msedge.exe	92
PID 4848 wrote to memory of 760	4848	msedge.exe	92
PID 4848 wrote to memory of 760	4848	msedge.exe	92
PID 4848 wrote to memory of 4892	4848	msedge.exe	93
PID 4848 wrote to memory of 4892	4848	msedge.exe	93
PID 4848 wrote to memory of 4892	4848	msedge.exe	93
PID 4848 wrote to memory of 4124	4848	msedge.exe	94
PID 4848 wrote to memory of 4932	4848	msedge.exe	95
PID 4848 wrote to memory of 4124	4848	msedge.exe	94
PID 4848 wrote to memory of 4124	4848	msedge.exe	94
PID 4848 wrote to memory of 4932	4848	msedge.exe	95
PID 4848 wrote to memory of 4932	4848	msedge.exe	95
PID 4848 wrote to memory of 2504	4848	msedge.exe	98
PID 4848 wrote to memory of 2504	4848	msedge.exe	98
PID 4848 wrote to memory of 2504	4848	msedge.exe	98
PID 4848 wrote to memory of 4948	4848	msedge.exe	100
PID 4848 wrote to memory of 4948	4848	msedge.exe	100
PID 4848 wrote to memory of 816	4848	msedge.exe	101
PID 4848 wrote to memory of 816	4848	msedge.exe	101
PID 4848 wrote to memory of 3912	4848	msedge.exe	103
PID 4848 wrote to memory of 1172	4848	msedge.exe	115
PID 4848 wrote to memory of 5108	4848	msedge.exe	116
PID 4848 wrote to memory of 1612	4848	msedge.exe	117
PID 4848 wrote to memory of 3952	4848	msedge.exe	118
PID 4848 wrote to memory of 3952	4848	msedge.exe	118
PID 4848 wrote to memory of 2100	4848	msedge.exe	120
PID 4848 wrote to memory of 2100	4848	msedge.exe	120
PID 4848 wrote to memory of 3856	4848	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://weave44.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a4,0x7ffedc9bc188,0x7ffedc9bc194,0x7ffedc9bc1a0
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,10732586522966540482,14325383886040043501,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,83498714618723869,3436827315647432470,262144 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,9152063540455508652,9080686252466120696,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:8
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5582969996662432448,9218473187130610804,2097152 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,4060124228686410409,17932239738623726477,2097152 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,6502271899340972032,13974255047757456989,2097152 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,1084834400423368264,11458943954978381549,2097152 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5048,i,177670201361270099,9234956056320033971,2097152 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,17124566162231527082,10718497880525037918,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,7181551374438023661,18258512347440936886,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,7592457896158411154,14607059340893386556,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,7592457896158411154,14607059340893386556,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,8683876822569488210,16952543072567354145,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,12035955321910526768,11794201789785752549,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,9325064329157226999,12943169586842155325,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2820,i,7557244773353323810,16189277751209597348,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:8
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,7590005234078274133,4976826926031671765,524288 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5180,i,1106386990958059829,6019319500268498188,262144 --field-trial-handle=2280,i,8331915658597465884,5795383698443548283,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3856

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2192

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 48eb1500121506f27c41790ac5276a1a1cbdc5f859640af66963726ebbef9ab9
MD5 a23fce3e2f31387424d85ae5abae492e
SHA1 1a36218af91739dc0c919fa4acce2b2dfd638702
SHA512 cf05c6d8173a943abfe538ae47390b9216cabbf41703447a963291906f9da6da530c41b164e81e53321f59b332367ee872b7fa0949872be4eb9caa5d495f13d4
TLSH
T17E51C4384712305CD75A01F1B1C30CA6B0BAB6C0F9E7EFFA0BA3A475CA1D7AC8814654
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58919c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58919c.TMP
Size 2KB
SHA256 cff2bb5c360a9315935e271bf480b60558c91d6750326381e9a7591a5cba2ce6
MD5 c48e51bdf8aefac57b3b17f616512599
SHA1 4a0131a5d0925cef60e14f1d89c316e92ebfbb31
SHA512 746f43623e5a2b57fd9957e54f6696143a6b2f6d82b2f90acd11065ce84e8325df65f63c9a25ced06a07708ce0146a3dc87e3fb6b02a61abf48207a70d629dec
TLSH
T1E751B3384712345CD35900F1B1D30CA6B0BAB6C0F9E7DFFA0B63A475CA1D7AC8814654
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c054a88470abd845db36e458312bc2a06a968bc0480351bc9f30917b03f370d6
MD5 3d31d13ce00ae07427f0290568893aa0
SHA1 83e860bf45c94bcdd7a21cd02291f69aafd991e8
SHA512 c09b7e5c95316bf806541e4278f07088865acdcd4f20520af5828af9cb499b823ff0974194b791e150198fb3fb91c637311681d2be57d5c3b0c0bc8230cef730
TLSH
T1FB31BBB3C3E5861DC91116F49A646E2BCE2D092843183D2AC9E9FF1B97E2471F10665F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8538cb9667b2dd3f860c4db09d636ad14c37155c94b793039721a8c4dc8d41dc
MD5 fe2c0a4aa914e38c8f7ec1aaf8a0f7b1
SHA1 6fea08b495eeb0f31e1bc84a93314d3fc7b2bc05
SHA512 726194cbd4fbd67ec9b7c315e68ad90bdfc3e813b8f6d9527fd3258eda67ced446b286138762ede5e7cee31d0d21b98b3ca4f444ad1c6affde77e660d044a02c
SSDEEP 192:sxZkRRyM/jK1Ml8Mkj/f1sKTSpIdpytHW6+WNhB//Y9IhUr+UIgrJ:sxZkXMj/f1sKTdmHbL/6N9
TLSH
T1A042E912AA34A97BCCDBD209F955BF53D6F50572D2940E44AAFCCA1C00E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0e90ceb4a35f91e76827e6f7a6132cffec276e30ac35fe1ce477862bd6cc86fc
MD5 1ca3ec497c384ff08d556b3be5886fa8
SHA1 475d04275cb549e5cb0de5526a24c5766c11809a
SHA512 2eb2a3090b3613d0b9b725032a5caa064ac383956dca90f7a5e78cc3aba49ca84225f7a7fd3222d5ce34d4138307e8b395c1964e5f02e7d1954d63f47ebd3a82
SSDEEP 192:sxZkRRyM/jK1Ml8UQIZkj/f1sOBSpIdpktHW6+WNhmLXY9IGfr+UIg5oJ:sxZkXqZj/f1sOBdAHbiXiNK
TLSH
T18152E812AA345977CCDBD20DFA51BFA3D6F5147292940E44AAFCCA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 55ac7f1dbd5f62566b2451276c13c88b8c194527be1693c8cab7f831016bbb18
MD5 0789d766b59ed01d77cee413b562b3f5
SHA1 1b31f9d67945daf6cdae5c602576735aa586cdf8
SHA512 ca5d4a2955f3f24de3e13bd1791bbffd7f548ba9b9aeee2fee1b08dfa67bee10e2033d4ea89bdd5a9ce0ea175cd0da663850edd305a7f638a020588e835b5240
SSDEEP 768:X0cv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNUroog6c:X0cv21wWvu+Z+u1jaeFLeRN/os
TLSH
T13ED20B2B280CCB7E4F841E9CED2A6F866DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f19e218c210b95fdd0cbe4a39888a0eab9d059c9b5f55e8fdb9aa95110bb52b2
MD5 d496b098217944467d4cc63959823865
SHA1 35e823e3bfb0688f8a89ad1143bc019223011204
SHA512 bf03a041324a66f7a0a1762e08234061a210261b6a268033b3724aa38cfbfc72bdf780041fa6495fc5b1e14a6479f95dd9c19bd22eeb7969333c16097fd8c0da
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+HyKokuK2EKnqPw:mThJ39
TLSH
T1B2913321317A0282387E7858A3D987375E4236937518A87F7FB845A14E2BE117EFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ff26ce84-a9fa-4be7-8dcb-ab8e61f4872e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ff26ce84-a9fa-4be7-8dcb-ab8e61f4872e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 78226247182066fe0f29780a6a65860898d2be4c8ddbd4652f11e11179557f53
MD5 bcaf6d501a7ae18eb3d447e92df34381
SHA1 0b69aae7ed4b0cffd581c5f417c7b5114f1ebb6c
SHA512 182247219a863fa2565669bd9e2534172985cedaaa415cbf432bcd45fcd1ac8c990e4e7f0e94c21ed40347bc92fc90b0bffe6bbdf9a074c6dd9e984bc764db01
SSDEEP 384:OZcIhsNtU/A4ziRliBe+CnOqEl4kNSv9qmhhHIJKtAjejeg:sh/ii4/OHlXNSBeWF
TLSH
T1DE827DB169B45C769AE6A255FC4736235DB8D133DAC16F80C0ECAF1D06DB558130F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 356c97c621eaf8ba7550cfaefe270e8d803dcf68458993e0f1eb6c0c82091786
MD5 8ae30c1bf00ca12baa63f527396d8b0c
SHA1 36f5e1e71c727678ad014fe2c65c0eb2f661828e
SHA512 900a3944562928ad9173f793712cb9fd8a65dc4e962c743234df1a303933d4a00c14c343b64ecb5645729d50451bf60482f082ff472139a6de3f07f6b8373c3b
SSDEEP 192:JONt6v+YLNQmiUyGCaZh+CGVgOq8usxT7U6:JONt6vz/6aZh+CnOqyxPU6
TLSH
T1D802DA356D782C7B9EA2AE45F58737276FA4217BE5912F40D9D82E1C01D764C2306827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de764e72b8bac66a1fbb7735bb590698bc0b77dfaedad24a5d4c21fb3dead69e
MD5 8a15c9a1507d1ad333fd8bdc4e80eaf0
SHA1 42115c8106d6e3b428a5821dc575e064e7f4afb9
SHA512 74ec5926a89f6f951cdf5c5da83e0c9ea7bfa902abc7be6d85cc25e318b56c634214b011a3cd24842fadbed56a4408d4cf245e170e1f05d19763c4ad5136591f
SSDEEP 384:eZcIhsNtUAA4ziRliBe+CnOqEl4kNSv9qmhhHIJKtAjejeg:chsii4/OHlXNSBeWF
TLSH
T1BA827CB168B45C769AE6A295FC4736235DB8D133DAC56F80C0ECAF1D06DB658230F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c45d0ab854597fab000d55b059fda0ffe3c7fdd9c26b1444a45774369f179309
MD5 bc8b43e6dcdb0d41378ad9cefc738a3d
SHA1 67a016491888c705bfaebb29f0b9db09dd169ca0
SHA512 3448113e3ce878c1adcbbb14ba729bda859360c8a899630f23498927ebefcfd7640e1d004c9925171310a422d2318f0625465f60ad3c7bb90b11b21e2b8ca62d
SSDEEP 192:HONP6v+YLqQmiUyUCazh+CGVgOqEl4PCHLqvSU6:HONP6vzS6azh+CnOqEl4kNU6
TLSH
T12F122B32B9785C6B9EE26541F88736135EE85227EA857F90D5DC3E1C01EF65C230A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b345dc3c-dfca-4a51-b11f-7988b38de7b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b345dc3c-dfca-4a51-b11f-7988b38de7b9.tmp
Size 26KB
SHA256 64467471b4e60041c025e81cf3aebd7d9876ce6059206f70443765bbfb96f979
MD5 b6fbd1bf7bedd70c56aa3aefb14e194c
SHA1 aa7f5f37b035e7159972af0858254ebc0cb98d75
SHA512 568b43fae97c6184983260f5a9eaf5f4abeb3dfeabfe37f5f20ce68a88074c102e87c51590a8038d00e8a9069ed5678576916f2ca64999677b2d83e2e728d3f1
SSDEEP 384:miFiZcITsNe8TUNTUlIlAA4ziRmiBe+CnOqEl4rNSv9qmhhHIJKtAjejeg:NFQTzwgI5i4/OHlONSBeWF
TLSH
T1C5C2F7F258E78836D9AE9747BB3E2D134DBCC163B5816A50B3D85A0CCD9617FD30A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 74ee432e4e5e617b3d31045614878b6c4b951f1583bcf627a21cb9dbcc695db4
MD5 48f2a8f9c231f81c154e27629603f940
SHA1 7462164c2b5754ba27301200a33ddda08883776b
SHA512 c050c9ce6871e1fc00168bca1c19a9637924a568cd856118ae44fc9fec16ed881b58b74ecacfb3b55ee8dbefadce69adb5d784a323fdcf9fb19b4892cac68c07
TLSH
T1CA412858AAF91148B3B77F5AABF6A86D887EB8372E06C58E00110D4F0522B40D8B1777
MD5 SHA1 SHA512 TLSH

Submit Download