fce98eb7f66ca1eedf1618c789ab53d9a2d17d54f67befefa0a220c419908c7c

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
لواط+شباب+ملتحي+لواط+ثلاثي+ساخن.html
Size 6KB
Sample260831-e5rv2avcne
SHA256 fce98eb7f66ca1eedf1618c789ab53d9a2d17d54f67befefa0a220c419908c7c
MD5 daf47a933c90318e0e854e4b554c28a8
SHA1 767afd3a97ddb081a51b84c808eb6717b3b0a3db
SHA512 a4826897eb7390aa4dc99d545fd569b8d907041b257138ac23283b8482108b5e7b50def72ddacd793577fe79125727e4582e893429f818e58850419f5102a64b
SSDEEP 96:PNyoUtoXZzIEb0EaW87jhCkaAwM0EnwM0pjxbCmoNsdNkHgDbmT8prjp+D+nYzu6:PNqtkCBtaHD/DkN6bmT5D+Yy2Dlgw
TLSH
T111D11AD2FB318103ABF3279938B673B81111766D2F610199B29AB66805EFE2F43570D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326243200592954"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{9B0A6777-FA65-412F-A07B-BCF99DA6A08C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1260	msedge.exe
1260	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe
2460	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2460 wrote to memory of 2900	2460	msedge.exe	85
PID 2460 wrote to memory of 2744	2460	msedge.exe	86
PID 2460 wrote to memory of 2412	2460	msedge.exe	87
PID 2460 wrote to memory of 2412	2460	msedge.exe	87
PID 2460 wrote to memory of 2412	2460	msedge.exe	87
PID 2460 wrote to memory of 1060	2460	msedge.exe	88
PID 2460 wrote to memory of 1060	2460	msedge.exe	88
PID 2460 wrote to memory of 4648	2460	msedge.exe	89
PID 2460 wrote to memory of 1716	2460	msedge.exe	90
PID 2460 wrote to memory of 4648	2460	msedge.exe	89
PID 2460 wrote to memory of 4648	2460	msedge.exe	89
PID 2460 wrote to memory of 1716	2460	msedge.exe	90
PID 2460 wrote to memory of 1716	2460	msedge.exe	90
PID 2460 wrote to memory of 2156	2460	msedge.exe	92
PID 2460 wrote to memory of 2156	2460	msedge.exe	92
PID 2460 wrote to memory of 2156	2460	msedge.exe	92
PID 2460 wrote to memory of 1124	2460	msedge.exe	93
PID 2460 wrote to memory of 1124	2460	msedge.exe	93
PID 2460 wrote to memory of 1124	2460	msedge.exe	93
PID 2460 wrote to memory of 4636	2460	msedge.exe	100
PID 2460 wrote to memory of 4636	2460	msedge.exe	100
PID 2460 wrote to memory of 2288	2460	msedge.exe	101
PID 2460 wrote to memory of 2288	2460	msedge.exe	101
PID 2460 wrote to memory of 3848	2460	msedge.exe	103
PID 2460 wrote to memory of 5760	2460	msedge.exe	117
PID 2460 wrote to memory of 5768	2460	msedge.exe	118
PID 2460 wrote to memory of 5776	2460	msedge.exe	119
PID 2460 wrote to memory of 4168	2460	msedge.exe	122
PID 2460 wrote to memory of 4168	2460	msedge.exe	122
PID 2460 wrote to memory of 1260	2460	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\لواط+شباب+ملتحي+لواط+ثلاثي+ساخن.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fffe38cc188,0x7fffe38cc194,0x7fffe38cc1a0
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,906742025975854116,15181658353984168879,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,5021756310290064742,15344421083544940819,262144 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,13641437851496127461,978329932070407193,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,2789499453277807056,10874708200141825071,2097152 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,1600862810743292331,3275174882717924693,2097152 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,6699183773472074239,10782546644089880452,2097152 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,331241000527861626,3933690984199880435,2097152 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,13335809725829628333,4333795885871182737,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,3990593350886956245,12001881178052618128,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,8736266762318202599,557926079913300799,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,8736266762318202599,557926079913300799,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,4255878429739411756,8128435152125360862,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,13261951748408062134,13241169588935069641,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,6759758012321881011,13860367258919835409,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2792,i,14108132108224525453,16155889005206681032,524288 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6300,i,5627078391448897327,2434619110100966093,262144 --field-trial-handle=2260,i,10327424966565040607,10886289199816241709,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1260

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dc3cbdc636712cd0ad246adb60e10a6c82511eff5067261c392024fae841e7a9
MD5 c1825e771385238aa2866582788cf8ff
SHA1 cdd34f1c740914ce98dfac6172ecd00fb2da9783
SHA512 33f14925d45545eb4c68af5b5b273b9724142601b0f5098ecd00afa7d2c73115a7bbfbde0f2118a5645868d8b32a69bd2a748d5d5a3d469656956f8af0313fdf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b16cb2d556154ab6a2a931ec560d823a13bca9964fdae54ae0045cdd13c7e883
MD5 9656aaefe58009b6bcd70200aac9b285
SHA1 c348df30f9f0a2e2cf73a26c7f135e165ff46bd2
SHA512 5f6e923a128c7717d631261da20514c0d12e1303a7ea7018d35e544d7b77575fcf410ab255961d501a0b8df5026bcbeee809957df7b5e6ca40cb8bdf926d0a7d
TLSH
T196613C3407526FADFBE11E72E8E147057432D32DDA73FC2C6060A6BD6107727602615B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c0f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c0f9.TMP
Size 3KB
SHA256 c236df6db730f7e8bea08b877f22635e0329c99bb6ebb9b5ab7a5c5df1258bc9
MD5 817d3e37c6481b56eaef6d8f50b05338
SHA1 9eb0cab8252777b3b4a68a0de0fd7df28903e9df
SHA512 ca5910e9009937c27c3ea9cc06d58c5cbf33cdb94be8ba42ac0ff786a357219e6f01e7ec9354c3b4f30ef5eecc20dc8d3af03b49e3a5d6efd52275a895491726
TLSH
T1CC613C340B526FADFBE11E72E8E147057432D36DDA73FC1C606056BC6107727602611B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 928B
SHA256 345cffc51eb6f62cc8f9cf991bae4ee42bb1c99fb5ea7bd1730edf3fd47bea70
MD5 04bd8e38d22f9116d769e3e6d86d0dca
SHA1 48bdb9366ee8185f1fb88a2838b2e22f7434ca70
SHA512 79f55f17a255fa5355db3d383b87e897ce201314761ab487ff3f2bf1b3e8c66f1db1d8cc3fd499c13731ef98fd2364380165268fc0471a331c1125b961753da8
TLSH
T1BB119CF3C3D585AE890116F09A28AE1BDE2D090682287C19C9D5EF6BD3F3076D00655B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 451acbaee3e0df0bbe6c944e1a836e5ac539032eb427c4d4ad72ad023cd1a0bd
MD5 b2012920e3e7d15c58092af053db1581
SHA1 ef848ee3b3980cefcc7257560c918b4b98868569
SHA512 73d8931f748dfb12d37048ad1a3d564c4e50bd9346d268535da651ac7e864837bf37a0e2b58e9af163a55f58d6458ec8ba7d58b4125d1310d4feb92a6fbcbd6e
SSDEEP 192:sxZFR2yM/jK1Ml8Mkk/fOsxK6IdpdkHW6+WNGYLzXnQIgrJ:sxZFgMk/fOsxKTaHbGb9
TLSH
T14842E8116A346977CCCBD20DFA55BB53D6F95433A2900E48A9FCDA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 493bd0943dee658960b177faede8618ffc64f6b60e883290cbe45ba65a7e1e5b
MD5 c8d309134ea0b9eb2f7d2b631c04737e
SHA1 86322c73e8a2501ccd2b609a05a1060de126af67
SHA512 ebcffb475d803153bc8bedbf96c286b7b6e68f6533c5b3797bf9f1132323030a4528b21b4b544a519d48ac8c298d3ea062e296d0323f88108cff464f546c07c9
SSDEEP 192:sxZFR2yM/jK1Ml8UQEkk/fOste6IdpHkHW6+WNGYLtKK7QIg5bJ:sxZFgqfk/fOsteTEHbGGIT
TLSH
T17852D7116A386977CCDBD20DFA45BF53D6F55472A2900E48A9FCDA1C00E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 62ba3fa4a317ee0b6abb9bc4f7f7a103c34e097884c43a1d67e35450f35764a7
MD5 1aadaaf93f6e31238306a54eb525aabc
SHA1 78f4f6e6392240ecf2c743148d490d595751d26a
SHA512 235e3e56a2fc90555a7afd40d6a46d7750c7fbd7ab057cc3cae464d2202a77ec6405f5097d3e471ff9036f4b20472ac56039a3d7c760f9baefa049d4cfb32db4
SSDEEP 768:mcs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNzrozR:mcs6pD1WvxzWju1jahILIsNAzR
TLSH
T1ADD2FA3B680CCB7E4F841E5CEC2A6E967DD801CBAB98895447FA844C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 010306f7a73b80d719df462a8199e008a7481993263ed399737c1b7437be20e3
MD5 cc2a9982211ad1aec6b4f7e82f5f1cee
SHA1 f5d9faaca9e64f6dc02e263ac2e563cd86cf0df1
SHA512 4a9785caddb3d3101fcfddc1c278008688a5a00f76007a17eec4a106eb5bb772df17a497fa43663ea92c07e2e943423a17f1522411b08648fd622b14ecdcc8fe
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyhoIrKVicPdIxK2cUjy4nIZKYIsj:KUAAKtePiogKVi2dqK2c6bneKYIU
TLSH
T1BFB1081736B602423D7E2A4C83D58BA78E8272533119A42B3BAC0471DE6AD21DDFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2319a596-9140-45f3-b04e-afcce5d32581.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2319a596-9140-45f3-b04e-afcce5d32581.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e279e683e41b48840ffd6eb51815fd55fc476c24e95a6243c1af0463c8b8f0d6
MD5 47ebc23515b46b48872e366bd0d50d6d
SHA1 fd6f6e5d85ee57d276a8b13d9639ebcb1b454e1a
SHA512 ddeafca0643602c55c7aa583a637f7e9a47096ed0c06e82568a3f48836efadc2e3af9679e11972528ea0cb69217ee084f80da8cd716304a6a6412a0f10e40a13
SSDEEP 384:IZcIhsNPFgLbIba91O+MzozJrIKaHSpSP:2hXI+HOZMhIKaRP
TLSH
T13B826C715C745C7758F3E146FA4B3617CEB88177969A2A84D1ECAF1D00EF9A8230EC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 1e5b2c2e40bf0f38b74951edb86a13f383721b8d1ac2884d74fd1a622eaaf1c0
MD5 db7026bf32537f32d14a2ca24cc05a8d
SHA1 2ee741714571a77f9827610d2e890a8cf79464b9
SHA512 8704740de955dbd75f0f0072c6351aeb733fd80bd2dfef53db1f9045aa4f814f697b661ffa094920d95b9c644ac906aa8fdbd524dc05f666fdcd19d67296f274
SSDEEP 384:3iFiZcIHsNx8TUNTUlIlIgLbIba91O+MzozJrHKaHSpSP:yFQHwwgnI+HOZMhHKaRP
TLSH
T1E7A26C724C648D7B5DF79A45FB4B3213CEB58177C596AA90E2DC9E1C00DB5AC230EC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c25832380c8cc2e5508f6307e1eb526163b6d3637d8c2d78aec013af8becd673
MD5 3f0cc33f867f8274484910410ca28887
SHA1 130c781dbf5c2049e47122db6fd3a2d0d78d8e0f
SHA512 2fa76e176f0dd568f58798f7bf108cac774d5373b503cd8094cf57c39637ece1fa69598cb439f2fe830cc63043913c7f5b9cdc5ffc65b874af0baf041fbe707f
SSDEEP 192:qONQ6O7+3hQmiUyyWGttb0IO25h2sgGIv1U6:qONQ61sGt91O+MC61U6
TLSH
T18E02D8346C786CB74EF2AE45FA8737279FA5112BE9962F44D6E81E0C00DB65C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0abe298b727b222a68655f156294b5d1c27831032d19bd77172262bf47358a90
MD5 ed8793568d52e74dadd9f1ea0655ef65
SHA1 cd1159ccd0a9880b450f8a754fb479cc5e227fb8
SHA512 23cba0cd237d3633645f284d662a13af82ffcbdc9df8010486b1a79c673dc8a4ebbb34d876e947eed58dfa4b367f239b19041fb2721bb849d0deae6853b66c19
SSDEEP 192:1ONy6O7+3pQmiUyVW5ttb0IO25h2zMZF0SJrecNvqXNyBU6:1ONy6x55t91O+MzozJrvKaU6
TLSH
T1D3121A35B8289C775DE3A185FA8736239EB5412BDA8A7F80D5DC2E0C01DF96C334AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1eebfee10c1c0e4c251edc0845d5d17b1f9c0aadf81b33037bff1c0f40b73fba
MD5 30d73bacdece656bd06e9cff9d8833a8
SHA1 7b90e1df11bd0db9d13e5b96737a7730acf1663a
SHA512 c28c142c92a77199f143928a08f627a32b14a855745734edc94a5e6c808aac16851fffcef817eabf803545112118e430660e2c70dc88f5c95a5634d619f4f3f3
SSDEEP 384:VZcIhsNPIgLbIba91O+MzozJrIKaHSpSP:thKI+HOZMhIKaRP
TLSH
T138826C715C745C7758F3E146FA4B3617CEB88137969A1A84D1ECAF1D00EFAA8230ED1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6e811d6-c7b6-44c9-8daa-0d9ef4a865bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e6e811d6-c7b6-44c9-8daa-0d9ef4a865bb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ff0df730f3fc105f3252b4e27900250a31b06584bede3f65ca2a145d59e52a82
MD5 9552a06696b7c42e18098a1936ee578a
SHA1 a8059d5d1e258a1dda13bb32fa7862606892d75b
SHA512 f3f49ed5f378358a1a431fa1ad808f9f3c079b36946cbdce6aa5b0e993ec226f01f81933a01c7e2a1e24397d1d67a16d8e2f0d6e7f8b714a27f1592772265b94
TLSH
T1A2413B68A7EA105CB3B77F5AABF2A86E487BB9372F06945E10110D4F4662B01CD71733
MD5 SHA1 SHA512 TLSH

Submit Download