hxxp://0q8jnro0za[.]execute-api[.]us-east-1[.]amazonaws[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://0q8jnro0za.execute-api.us-east-1.amazonaws.com
Sample260907-2wvxnavyhs

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4152	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332953947893026"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{97A0DFB5-E381-4634-816A-8B282B03EA24}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
628	msedge.exe
628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1192 wrote to memory of 1216	1192	msedge.exe	83
PID 1192 wrote to memory of 4152	1192	msedge.exe	84
PID 1192 wrote to memory of 4820	1192	msedge.exe	85
PID 1192 wrote to memory of 564	1192	msedge.exe	86
PID 1192 wrote to memory of 4820	1192	msedge.exe	85
PID 1192 wrote to memory of 4820	1192	msedge.exe	85
PID 1192 wrote to memory of 564	1192	msedge.exe	86
PID 1192 wrote to memory of 3328	1192	msedge.exe	87
PID 1192 wrote to memory of 3136	1192	msedge.exe	88
PID 1192 wrote to memory of 3328	1192	msedge.exe	87
PID 1192 wrote to memory of 3328	1192	msedge.exe	87
PID 1192 wrote to memory of 3136	1192	msedge.exe	88
PID 1192 wrote to memory of 3136	1192	msedge.exe	88
PID 1192 wrote to memory of 2772	1192	msedge.exe	90
PID 1192 wrote to memory of 2772	1192	msedge.exe	90
PID 1192 wrote to memory of 2772	1192	msedge.exe	90
PID 1192 wrote to memory of 1028	1192	msedge.exe	91
PID 1192 wrote to memory of 1028	1192	msedge.exe	91
PID 1192 wrote to memory of 1028	1192	msedge.exe	91
PID 1192 wrote to memory of 4116	1192	msedge.exe	95
PID 1192 wrote to memory of 4116	1192	msedge.exe	95
PID 1192 wrote to memory of 4116	1192	msedge.exe	95
PID 1192 wrote to memory of 1568	1192	msedge.exe	96
PID 1192 wrote to memory of 2012	1192	msedge.exe	97
PID 1192 wrote to memory of 1568	1192	msedge.exe	96
PID 1192 wrote to memory of 2012	1192	msedge.exe	97
PID 1192 wrote to memory of 960	1192	msedge.exe	99
PID 1192 wrote to memory of 4368	1192	msedge.exe	110
PID 1192 wrote to memory of 960	1192	msedge.exe	111
PID 1192 wrote to memory of 2016	1192	msedge.exe	112
PID 1192 wrote to memory of 2204	1192	msedge.exe	121
PID 1192 wrote to memory of 2204	1192	msedge.exe	121
PID 1192 wrote to memory of 628	1192	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://0q8jnro0za.execute-api.us-east-1.amazonaws.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ff90f1fc188,0x7ff90f1fc194,0x7ff90f1fc1a0
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,302706997910699524,2368936254644699972,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,11049049141089082942,209626306394949592,262144 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:2
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,3008388861868255840,14741169453113679859,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,4148538308482349319,13785552257218421166,2097152 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,9246634507934581896,7417242782652075097,2097152 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,7719090017423394059,6118587942730886814,2097152 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,582235230255526458,2439010996258026598,2097152 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3644,i,24791366563857892,11914662613454103760,2097152 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,799923977828789530,11509145877267974482,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,18018559463618155328,8546037377321285491,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,10210035405930316743,11246192083404982028,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,10210035405930316743,11246192083404982028,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,4417944338298250969,18403938649536078295,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,9998452093850778335,5935123241279147546,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,5114085488523343046,11371843379561140820,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:8
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,7649921345646064206,12417717542591059229,524288 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,3597888071493104730,5881162573316710326,262144 --field-trial-handle=2520,i,11167820442293236167,7019709294346502461,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2324

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5dcd8d3db379e3a414b4a8bc3cba79d16738d9ab0605ff661cb4827273509c60
MD5 da8f6bcc4a6e8af8713849c2c6fd7ddb
SHA1 20e7e9ce8f7fc51b82c952e351acf380769decaa
SHA512 89f1a291daa4aec061f9e1eb4d5e0b9273e251af8194a6616d983225921b78f5f11590a852b0dbe2511c33ce153182968d3654c5f0ca8e35ebaa9e0c1f9bb084
TLSH
T1FC71523D192609A1D3A1893278CD12847DB1C9EEFE336DAE0179FA74E50D71B812F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5897d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5897d6.TMP
Size 3KB
SHA256 4bb4463b98edde22b045d394d26fdf28365775ae01028e05e7d625d8ee16e844
MD5 881925492b7565861376eab313f5c7a0
SHA1 5e9faa2a1af891fc0fc0b4d0214ae2e25dad5063
SHA512 124204264ed8d8a716343f064f1741db07c44744813855c29909543013b65e65bb0cacbcc714d19c22267142119a6f2fd5c3e22b0746f8f2571b4de67f8810a4
TLSH
T14A71533D19250961D3A1883278CD12847DB1C9EDFE335DAE0179F974E51D71B812F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8e75f1748ecbb8eff4c1a01d3351bf4fca018878307c13e1f55d9edd737874c5
MD5 4de19dc089b081c4902d07e737c77f7a
SHA1 2b8a6bba7cf02f9ed13f8497b8c51d9825d5f6b1
SHA512 c5b1c5af0d219ace599886e82786d0d0cd2efa7adeac2fb4a2ffc45e20171a5575f97f8eb4864fc9928c6103f778d5d7e7d42e80100140aa3bf4a830f202b36a
TLSH
T13321EEB387E2866E8A0116F06A24FE2BCE2D0506432C7D1989D8EF2793E3475E0015AB
MD5 SHA1 SHA512 TLSH

Submit Download

e6599516-8b38-4aa4-aa67-7a8a42c9a003.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e6599516-8b38-4aa4-aa67-7a8a42c9a003.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 17c55963ffa2449353e1afb187733ca2f49b78af42c87522dd42def8f815f50f
MD5 ccca28a5467b6385080505228ed43a24
SHA1 a08b2994e31de301dd49d7be5497868640aeab1f
SHA512 d96c35b26d8028fedbfc074ce22749ea36a06f4199488579cd2a91558bdbc17a595423e8bafb2173514f5cb4c0a03dd9ddb9228830d40accec8110b8fce21bd9
SSDEEP 192:sxZFRFkk/f+sSKwIdpi4HW6+WNR9i/YI5m7++Ig5RJ:sxZFwk/f+sSKR3Hb2/SJ9
TLSH
T1BD22D7527E28A57B4CCAD21DFA25BF53E2F95072A4D51E48AAFC861C04E76CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ae3090b72a84ccefc3be3f935c0e413de6349d2cb3898a91f5b526c7867ddb89
MD5 875f8e3fabad3eb3f666ddd3d032ceac
SHA1 6206461ae811a834b32f158a8e9f3ad26636d0c7
SHA512 ab9cfbe1ddf19e2ba357ebcdc294fe9f511ce61cd28f2819c1f4d6d33e0679b94faac6de3b92d913f9e41212d414593dde688a70e8f4d1fe558cc259e9834175
SSDEEP 192:sxZFRFkk/f+sLKwIdpi4HW6+WNR9i/YI5m7++IgrJ:sxZFwk/f+sLKR3Hb2/SJ9
TLSH
T17422C7526E28A57B4CC7D20DFA25BF53E2F95072A5D51E48AAFC861C04E76CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 553f6680b8a1862f153b94546265c8a1112bfd2c088a2f18589f2fa005e59958
MD5 b471a8f8439fb865eca236e54c6eed2b
SHA1 dbadae32e04062d625f78fb2da657866bd163d6d
SHA512 3e58c34c3c939a8437b188b2a600ef12b15f2b6170eddfae0220ca9e1b252cbe4c6c949713e25245a0b4118b41db5cbcf6095ee74dd7ea7fbcb94e678c469c91
SSDEEP 192:sxZFRFkk/f+sSWwIdpi4HW6+WNR9i/YIci7++Ig5LJ:sxZFwk/f+sSWR3Hb2//Jz
TLSH
T11B32C7526E68A97B4CCAE20DFA25BF53E2F9507295D51E44A6FC8A1C04E76CD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 9b0370fab2278ffdc224168f5db2fd5b0a358799876eb1e8cc73caaedc551ec6
MD5 a4ec626951886dc67ff03cda98da2e71
SHA1 916566639878286b465175f2edfe4a7f6308eda8
SHA512 a265fd99e59dd5549caa133a118db02c36fe131747b83eeff8fb6a846c07ede7de10e6954f434ddfab4ce2d1e75c3aae7a626fe57c1c1d1475b4606c3834e0e3
SSDEEP 768:elyqbblWvJDjT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR7troTEC3:elyqbblWvJDjTu1jah4LAs7GTv
TLSH
T131C2F93B654CCB7E4FC00A9DED5A6FD73E9802C7A6588D4047FA994C02C77EA512A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 62f4477d686cc37dc1e454b998988d60694db41afca0c74276da75b0c9280292
MD5 d3276e8b69faf1648eb88bf87c183518
SHA1 9dddee2ff2f605aa84fa8599e67e5f04c9379ab7
SHA512 c11c756a90a7205eac07b5f2ab15c817f1ccbe731867a1b2911e027b4719ced513ac85bc95287b3d794f3ee553d272a110ad9b7d4712fd9cd82e427c7623a3ac
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyuEVQUK+agembzIfcgKU1cCgAswpLikG:KYbaKYIKOfuKQY+S2gKnKP
TLSH
T1A091581A757E0242783D2858B3A69A374F4636633018A4EF3FB850624E67E124DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 3cd3d63039e22245ec3fa57ecf22eafeb11124b0bcd329880ea8f8878e6af789
MD5 097c4008d0f0b020f6e77c16d933b30d
SHA1 7c3cda00692b0e9bd861f3c4f18d995e9dc0c0f4
SHA512 cebe2eaca4c8ca03b9b5b02a1556188f3e310bb5104d96e293413a1d532752a28a0dcf12cb24babb00492ae0e00a73085eda1bfb270778aead1730394706a0af
SSDEEP 192:uWLsNJUcQJkRb4DQmiU1rwTk4VRNKFCk5dZc0vwSRh3q7rL1emO6R2IMMXorAlB:vsNJUcJb2QbVRNT6b7w17O6R2FeoAlB
TLSH
T1B4625B7678785C7F9DE7A405F44B32136EF491A79ACA2F4095EC2F1D00DBA9C130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a291891065ff170903f2662a70021cdc21ee79948cce2549c02b975962734b37
MD5 5da29749d433090268d3d6da907ece73
SHA1 0e99e92c8481b28086e7bcf665023f2ba57d5a3f
SHA512 fd48b72c4268b9e6de1171f60ca83413e424e8b179f206e202b46271f367ab75838d26bad6ca514ac46efe5be2313631252537152f75a24befbad50073d9d4ce
SSDEEP 192:uiZsRsNEUcQJkRb4DQmiU1LwTk4VRNKFCk5dZc0v8JRh3q7rL1emO6R2IMMXorAP:dqsNEUcJb24bVRNT6bww17O6R2FeoAlB
TLSH
T12092F7F668E75C3AC99E9703A77E2D035EBCC15779851A00B3D81A1DCC8A5BFD306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 dd6029928b2e18767eb0782211fed3ebd2a1e6f335faa56973362b51c0d9040a
MD5 a878b647cae4d76819ce3708caacf68e
SHA1 eee88f64a435b423ed58f821ef49e5f506677d8d
SHA512 fb6bfba9bb99220bf1eed62f5cdc80860267b5dc9212359e79f2034efd76c7c6472cee76aaa03b313e840a60dae4bd87a738a8095632bfde6853dcce3a426cfa
SSDEEP 192:uiZsRsNJUcQJkRb4DQmiU1LwTk4VRNKFCk5dZc0vp2Rh3q7rL1emO6R2IMMXorAP:dqsNJUcJb24bVRNT6bow17O6R2FeoAlB
TLSH
T12192F6F668E75C3AC99E9703A77E2D035EBCC15779851A00B3D81A1DCC8A5BFD306416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 866d4720eb11e5171699162822ce7b08b7ac02dd93cd091e7c1ef5cf0ad0484d
MD5 d4b1f7f5e18d9c14e4245ff5c556f5a7
SHA1 d03f4076ab3710f662bbb097764316574d27315c
SHA512 77497364a695b27c5621983399fe82581b9a58a804465b6823e7fbb351d52de4499a7da5534d0adc096452f9ba269ce63a5b5542e4fbc689435a6aeac540aa90
SSDEEP 192:ukLsNJUzQJkRb4DQmiU1rwTk4VRNKFCk5dZc0vwSRh3q7rL1emO6R2IMMXorAlB:xsNJUzJb2QbVRNT6b7w17O6R2FeoAlB
TLSH
T110625B7678785C7F9DE7A405F44B32136EF491A79ACA2F40D5DC2F1D00DB998130A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9ea02a04923c91011e2842ef8e258458f0c31d0073cb7f5bf53f29d0f73b2e5b
MD5 abb39feb2ea408c8551292c125cb08b8
SHA1 ba24bf4f9f3e1cf502d01f48648f0125bfe78d3e
SHA512 ea59412c70ae6223306066b2af83234b56c1c272e7198878b4899e424a65ac363bf642e444b3d5da7e8d64967a84b245f089c57ca8fe592875c961e6282dbe25
SSDEEP 192:tONb6JkRtQmiUykIW+RNKFCk5dZDh3hUREU6:tONb6UrUW+RNT6bV5U6
TLSH
T1AF02FB35BC386C7B9EF2AD05F48737275FA4116BA9952F40D6E81A1C00D755C130793A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a369397b-6e68-438d-a45a-46382cf808b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a369397b-6e68-438d-a45a-46382cf808b6.tmp
Size 8KB
SHA256 ee7f0f79eb3c37818d0097f6a365897dae6b931c52f080052d1b74dfffc7249c
MD5 9f4bb66170b0dfd9ee25f7bb77a38ffe
SHA1 eea1a407d60cdab10aeda87d1d9bab2291bd1bb3
SHA512 4960b174e58a2382c721fbe68c5dfa6029e184a39185e16b08561c4a78d1f1ef9b32f4fdfb96a9134e1ca00dd7fdde09948aa3a0bb2fa3c6507b8fe1e512cb3f
SSDEEP 192:1OND6JkRiQmiUyPI5+RNKFCk5dZc0vQVch3q7rL1U6:1OND6UeV5+RNT6brw1U6
TLSH
T1D0120A36B8685C7F9DE2A801F4C732135FA5926BEE896F40D5DC1E1C01EF99C134A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4a9e89a-420f-4099-8e53-6f7c2468c6ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e4a9e89a-420f-4099-8e53-6f7c2468c6ed.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 078c8a55a2ac77fc829fee52e07caf41c4b0c446f43568221afdfad79ece2520
MD5 d2299fe446f0f2cff35f9d61eccc7b9c
SHA1 55a2e29464ed54dabe96d3964624b3069e747ec2
SHA512 8e81858b692ca25e2956c038b0cc39092f5015311a999cb9bf352bbe5183aa303eba2294cb838cf03092c22744ad7e99bcc5bebd2688464b79b501388d43228f
TLSH
T195412059A6FA1148B3B7AE269BF6B86D487F7D772F46906D10100D4F0A66B00C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download