hxxp://www[.]keyence[.]com[.]mx/

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.keyence.com.mx/
Sample260831-1pc8laae39

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5668	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326865661305300"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{84083FB2-7587-4104-84B4-DF823482F35D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5696	msedge.exe
5696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe
4828	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4828 wrote to memory of 4560	4828	msedge.exe	86
PID 4828 wrote to memory of 5668	4828	msedge.exe	87
PID 4828 wrote to memory of 5704	4828	msedge.exe	88
PID 4828 wrote to memory of 5704	4828	msedge.exe	88
PID 4828 wrote to memory of 5704	4828	msedge.exe	88
PID 4828 wrote to memory of 5740	4828	msedge.exe	89
PID 4828 wrote to memory of 5740	4828	msedge.exe	89
PID 4828 wrote to memory of 5832	4828	msedge.exe	90
PID 4828 wrote to memory of 5868	4828	msedge.exe	91
PID 4828 wrote to memory of 5832	4828	msedge.exe	90
PID 4828 wrote to memory of 5832	4828	msedge.exe	90
PID 4828 wrote to memory of 5868	4828	msedge.exe	91
PID 4828 wrote to memory of 5868	4828	msedge.exe	91
PID 4828 wrote to memory of 2568	4828	msedge.exe	94
PID 4828 wrote to memory of 2568	4828	msedge.exe	94
PID 4828 wrote to memory of 2568	4828	msedge.exe	94
PID 4828 wrote to memory of 5196	4828	msedge.exe	95
PID 4828 wrote to memory of 5196	4828	msedge.exe	95
PID 4828 wrote to memory of 5196	4828	msedge.exe	95
PID 4828 wrote to memory of 3780	4828	msedge.exe	96
PID 4828 wrote to memory of 3780	4828	msedge.exe	96
PID 4828 wrote to memory of 3780	4828	msedge.exe	96
PID 4828 wrote to memory of 2716	4828	msedge.exe	97
PID 4828 wrote to memory of 1868	4828	msedge.exe	98
PID 4828 wrote to memory of 2716	4828	msedge.exe	97
PID 4828 wrote to memory of 1868	4828	msedge.exe	98
PID 4828 wrote to memory of 4540	4828	msedge.exe	100
PID 4828 wrote to memory of 5108	4828	msedge.exe	115
PID 4828 wrote to memory of 5092	4828	msedge.exe	116
PID 4828 wrote to memory of 2252	4828	msedge.exe	117
PID 4828 wrote to memory of 5568	4828	msedge.exe	121
PID 4828 wrote to memory of 5568	4828	msedge.exe	121
PID 4828 wrote to memory of 5568	4828	msedge.exe	121
PID 4828 wrote to memory of 1148	4828	msedge.exe	122
PID 4828 wrote to memory of 1148	4828	msedge.exe	122
PID 4828 wrote to memory of 2680	4828	msedge.exe	123
PID 4828 wrote to memory of 2680	4828	msedge.exe	123
PID 4828 wrote to memory of 5696	4828	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.keyence.com.mx/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcff25c188,0x7ffcff25c194,0x7ffcff25c1a0
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,4004337884206371015,8613621508728151147,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,2955715846999246910,2153689859722307344,262144 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2628,i,11466877327231344460,18352522785481052402,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:5740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,7698350276527640906,6186710109909021692,2097152 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,5001011874342818786,5670872650430140580,2097152 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4824,i,569121313542735739,10124685715487395106,2097152 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=3596,i,11748247564590449041,5236778372699799921,2097152 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5164,i,16172144856209540344,16223796699322875808,2097152 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,10368773086979282092,8969590177196595208,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,16473496116440480798,13649697998270622354,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,7546374352116343680,4270243016162285887,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,7546374352116343680,4270243016162285887,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,14668262811269168071,14153578529416775557,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,13586035772156627368,2724700391333744244,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,6566887854513963156,7183443976871414177,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5108,i,16361572048534913898,15802050656788028799,2097152 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,3200391473888593057,16740074219863860632,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,323703889656016377,6754974797272821613,524288 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6780,i,3392867668384340522,3517532414047796724,262144 --field-trial-handle=2272,i,5012844511993251065,5992934544036301217,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 015dfabd5af7d505fa7fea55dd9276f78b6e7b9a8d4150af04073e2921c79395
MD5 6115d3e4f1acb3b1df633a0f07d46f09
SHA1 ccb88e91c697f22fd471a956a06863356ffc480b
SHA512 da5f6aa155f2e9282cc55eb45a632f8fe02c8d177ceb6eaef265bc4944d9623f79fd40f8e1d423ad074949b86b723f77941d86c105f5ac98e975b6654f66db32
TLSH
T1BFE022B6CC22EC2709FE1718A04D864AEB0123573A50895F3A3C810D8FF462A86C9E9C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 be8eda1e07de0cd5a796c1f1aee6827886e254441c3013edd62fe80d696f7328
MD5 0711cd6d3a9da7f405f30ccbb6d22006
SHA1 0ffb1c2cb03f9a2b0b6167d4ea414ff24ebb1fd8
SHA512 2240c061023f952f9048e19b41eafc82e3c51b6a0af3a7895d550da0bca2208ba91fae2d8fd0614ac999c9a6a93b4e16f09d7cb4f2ed0af13b03697d7b0150c2
TLSH
T1AE817F793AA5CAE2EB51C67C7CC80982B973AEC8F9C30E1901583CF5192FB51C4592DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 33af85836bf110178e98ac2787cd289b3fbf81fa8c7f5fe0beb12accd9b4bdc3
MD5 57522b29b11c477a745cdce3b39fa7a5
SHA1 6742b3acb995e5da9861ad99e53773a9e7452bae
SHA512 bcfb6a4f6068ccbe2e85f65cc862f341c7aaa20fceee4f5b26ea4b3cf3adc48f787f406c929d9f61fe9b2fe5bcf8123c74b506b6b3da76ee29ef1b7fd28a4a7c
SSDEEP 48:BosDX4Yl9NsY5Hlm2WIoZ0/x+2T/YtjsU7M7uiHUX+7FdNtxsItIlIxQ:DDXTFsY5HUKx//YtYU7MnHUXaFdNtaH
TLSH
T146914CB4396686E1EB51C5BC3CC809557573ADC9F8C60E28025878F12A2FF51C9273DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58e3c4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e3c4.TMP
Size 3KB
SHA256 09c85ad2d27f883b6d088abf43f354c3b1a9d4ab8a11733f9fbf6b05564f6c37
MD5 3131b4b798e94971acb4eb478c046963
SHA1 1859217d3a8068a32913e5ae3602dd9fda38006f
SHA512 e4c887d72efa423434eec425e91680780a74bc4f51b5aaf87e53b90001e922bd7e9241594e7f55879a06cacb7d4e4e51d948226eec8ab100c4cf9a75bad8c799
TLSH
T1FB51A3383952CBE2EB50C27DBDD4069075736ED9F5D30E6911603CF92A2CB66C15A2EC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.keyence.com.mx_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 2c8acfd40301cb8f6d84d74eb3f17c83789428ca27607816f10d1166c4ac3d44
MD5 f39e6a951412122a9e16b970bf0d6ff3
SHA1 bb8d663ac50113106dd8a0ea985bdf6107d9f649
SHA512 3129a92d544db7c18992faeb5472440be21889f0a066a7dce9261709a310a4e4d09b193b675b85bc53c213004b5a3d09b17c840a48471625565f9456c3071639
TLSH
T14D31C0F383E8856E8A1095F0BA18AE2FDE1D0510436C3D9AC5E4AF1B93E2471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c9a7326e957e100c394598f56da9194430eeadf78a04350a0dd9e74d5d9c8762
MD5 d37e8d7b31f90fa885dbab2e9075b27b
SHA1 4ebdfd03af6b48383e4d7972c666a2ad9bccf93e
SHA512 1f8a6b952f66039fc3d8ec184ffdb17b5d3105bbe36a2b61b8c843b67abe59455785bfc697d6e467499e4af671d6077fcec84da20501f53405629ce47a3d9bc2
TLSH
T1F131C0F383E8856E8A1095F0B618AE2FDE1D0510436C3D9AC5E4AF1B93E2471E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 2e46c3b01467dc4352fbf850e946c0ddfba576d6cff7123437bc66b55588440d
MD5 a5785b83d766e4ef46f211420f8b82b3
SHA1 a92fe09f68fb116c6529ea11749836a7b8491b02
SHA512 898b30ac5753b33d0f0bbed0aa41a0e273a907a0f53152a68160c2be8ddb04e26eb9eea2efcca85eef04c8795f5c724c4e8221a1bebf6d8c8cfeede281497725
SSDEEP 384:DW1l6ALeJefMbHMBeNl/MQDaaiGW11OKAzVUGkCz8TUnSrM4kpPKOFROx+u/SU0E:+83D0X
TLSH
T1AC529FF653E48E6D9D17A1F09B146E1BCD1E0414532C392B85E4EE96E3D34B2F25068E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 83b6a6d2cee29b1b3f43142e827159a2392f468ce9678e79654b6fbe505d81a7
MD5 cd87e8eac4a396d4be9e3e927a107e5a
SHA1 b3b3cbc9da37554fe5e82fc3656cbe44261084e9
SHA512 c902468691015786a9527adf4205e7724b9c8d58d2a552cf29f5fd747aa1302602ced407ae24d01b03ea35fa14f76dee6b8bfeca336fa0bb22838f3f6b473116
SSDEEP 192:sxZCRSyMqZjK1Ml8UQFk4/fgsXc+Zd/FodpTmHW6+WNlDgZYvUKahelyKIg5lR4J:sxZCPqO4/fgsM+zSKHbSZ4melpc
TLSH
T1F172F91969349D7BCCDBD219FA45BB53D6F95163A1904E44A9FC8E0C00E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 86b23fa9b1eb162712e5760a2fdc9c1e2c0d483e53f9bfc6b5d713edea2b4d79
MD5 80ad6afd8ac4d8da922722e094a01f70
SHA1 b796d9cae3732b6ae61edab9c0a03d72616db3aa
SHA512 8fee98dcd18719bc0e37be122f067e75fce6397e3af8876d38211a8745fa5330259c4873989bfc1a3a64d9823c07446e9a0b7db65d7bc6c54ac26bfdde5cfa3e
SSDEEP 192:sxZCRSyMqZjK1Ml8Mk4/fgss4cFaZdZFodpTaHW6+WNlbL/YvbuKahqlyKIgj4J:sxZCPM4/fgsshFazk2Hbp/omqljc
TLSH
T1F362F9166A349D7BCCDBD219F649BF53D6F91123A1904E449AFC8A0C00E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 26e9c227176c74420b981742f78222ca76ab704183f02da6a00cdd261ae0f3b5
MD5 e404ced6011158de72251fdb17cbc84b
SHA1 173aa465291d72cb09bd70798dfccb9bec1edeb5
SHA512 1fae7e769f51a01ebbe38c39138a72d3a17f73ce2f21a6869f2c3ffc961795eb53df7aa07051f0df70f591a0854776a79de5ce1310c8b5f17f11fb95642a4636
TLSH
T1ECB01120C20B300AC8020A302282A020B220CEB0820223228AA0B0BC8C222008028202
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e70705600003ababef4a841d15df2a9b30ca7518ef4a00807f050f3d81781ee8
MD5 d6bf5294c5b24ce4044003c611f1b155
SHA1 95f63f166222aaa4c2f21ded5789880113bcacdf
SHA512 adc6dffa1d321ca639a8cb5746d889dfa847b8191565bb6685336b865d1b25ffc3a09303c6a87e9eb8c1004eb07298448d50381d645b8ba5abf71d6055561ad2
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGr:05ppxnY753RNBvRJJdt7p5J9D7nz
TLSH
T153B27B5A713A0212397E2948B39696374F4235A33058E4BF7FB814A14F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 82d5d2fc5252f7eb57d5c44a0c7867ab7139c69a7ac65e4a6d1e479ce87e6e4d
MD5 7ed2775c458848cf79a234fb7fbcba81
SHA1 b7c752618a08f5127b29753fec4febdabe19a5be
SHA512 86f7fbc9f5104626e8b87ed1a18cb1055d2e6b3726ffce9ecd0b6c163450a803a671b048dd2f44d7f140b1a2a8fb8ebeecf96bdce52110ce7a26a0d6f44f152e
SSDEEP 384:npviF9CcmyWCs3sNj8TUNTUlIm2QckCr9lxKphifGGY6sKnpwe4KV8p0lHrty/7a:p6Fccps3CwgbkUjkFGYaKI8p0V7
TLSH
T1F5B25C36EC58D9BBEDE74F89B74E7A07DEE0112785989AE4CAD81D0D10971DC070BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 6942d9fe362c50195f18991b62bbfbe5d2bfea0576583b10b83cc0959f50dbb0
MD5 dfc9bac8727407239718cf043c306a18
SHA1 8b13d0857da963e67b6906a588a5907627cb9eb0
SHA512 d14c9f003a400320eceb54072b96630d9779e400aa9d6eabff2961ca99cad7664fb729b415373c76830ec84e70f5ab2dc44fefe66544a496e14ddaab7db079bc
SSDEEP 384:npeiFiZcIV3sNV8TUNTUlI4OzQckCrS6jphifGGY6sx8rNI30X1puLmQtty/7Igl:p1FQV3AwgJNk+tFGYBCNI3syLmQlw
TLSH
T110C24B32E8A4D9BBFDE78A89E74E7603DEF44123868C9AD4D5D91D1D00DB19E030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 df5e97034e686ad4a43844079d942b7f61ff9b1eaf262ce9ea42cd1ad57fd06b
MD5 f26c853de1c753957f539418cf6e50d2
SHA1 19efd82654fc387162da8f8da2c98a00de328fe9
SHA512 562a952d518ef7d53623f657dde8539d14354db32ac2bf045d9998801ef7f51202b483f126af10b66f2839733e2b00abc91e3e1cc03f6233af74e4dce969ddf4
SSDEEP 384:n3iFiZcIj3sNV8TUNTUlI4OzQckCr96jphifGGY6sx8rNI30X1puLmQtty/7Igow:yFQj3AwgJNkjtFGYBCNI3syLmQlw
TLSH
T1E9C24A32E8A4D9BBFCE68A89E74E7603DEF44123868C9AD4D5D81D1D00DB19E030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 554d37881506ee3db481a7dc3525ba0bf7933855ff7df57ddc12bdabeb2adcbf
MD5 01e001449ab946e65458a4e62d7c6aa6
SHA1 cf81de33a701f1bbd4f91ee12e114182f87fe9b9
SHA512 67ff562d1b857ade8c987b5cb457e37f09891caf9f502cf875bc415c38acdec4fa1bda567d33bbdd21787d3594adc9752d29ead41d2b1812bc7cf2479edf1772
SSDEEP 384:nptiF9CcmyWCs3sNJ8TUNTUlIm2QckCr9ClQphifGGY6sx8r/I3e4KV8p0lHrty2:pkFccps3QwgbkUeWFGYBC/I3I8p0V7
TLSH
T1C0C24A32E858DABBFCD64B99B74E7A03DEE04123868C9AE4D6DC1D1D10DB19D470BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 cca2133b7dd518ce4105d1874f5735d997a896581ff3becddeff19066297dc4b
MD5 a9f79fc1369469416654306d83ac06ae
SHA1 85480c973b220418a5ef09480d02b76ce9e75b3a
SHA512 483b644911d548221b6d74c0423083671c1133e692e7c68b017099b340cdf7a422dddebd49adca2e430b40653f6b2fcc1d817193b5d2e3ed6d7ea36f41a889a9
SSDEEP 384:nwiFiZcId3sNV8TUNTUlI4OzQckCr91jphifGGY6sx8rGI30X1puLmQtty/7Igow:LFQd3AwgJNkAtFGYBCGI3syLmQlw
TLSH
T11DE2A3F198D79977E8AE4B87A77D6E0299FCC113B5885584B7D81D0CCC861BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4f73d391a1bd4f646d5abe964f5a7264e0cb89b833dba689574ab5de6506adc3
MD5 567fe5a92a87aae1423596e2c659e52b
SHA1 0a2d308bcc384a4efe19215fbb391e00f50bcccd
SHA512 a856d74b0259c6845e42b3e75ac5e6bfae5bc0e04ce57a1c403d2821c05c00d61032cdad977832b7c85161ccc7a017ef0b16c42cf1f812e5cfad66a025113a00
TLSH
T120412A58B6FA1108B3B77F5AAFF6A86D447B78372F0AE49D10110E4F0622A41C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download