ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FileZilla_3.71.1_win64_sponsored2-setup.html
Size 239B
Sample260908-pld5yafd52
SHA256 ab768623070128ccef048c88def86155dbe776c3d8db423cc8fa89432673d8a8
MD5 5290b8512262fffca20df1dbf2a674a4
SHA1 9c1add44d731073281ae82abbbb2b7687a93b1bb
SHA512 c9e1331164ac3e50e576bae5470a5f575e1f3c47016a68d8639e54bbcf3448803294005cec80a7c4d06d04b109bfc21bbbb6eb857ac789ddf59dec9f31276b1c
TLSH
T151D0979FE1AE82084253B3C07ED127C0B402937A78C206CC9B86E043D0042FDC00904C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3436	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333439838224354"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{5A5D0CDD-D5EC-4695-BFD4-41E2E83E882B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1256	msedge.exe
1256	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 1704	4460	msedge.exe	86
PID 4460 wrote to memory of 3436	4460	msedge.exe	87
PID 4460 wrote to memory of 3572	4460	msedge.exe	88
PID 4460 wrote to memory of 3572	4460	msedge.exe	88
PID 4460 wrote to memory of 3572	4460	msedge.exe	88
PID 4460 wrote to memory of 3764	4460	msedge.exe	89
PID 4460 wrote to memory of 3764	4460	msedge.exe	89
PID 4460 wrote to memory of 3984	4460	msedge.exe	92
PID 4460 wrote to memory of 3984	4460	msedge.exe	92
PID 4460 wrote to memory of 3984	4460	msedge.exe	92
PID 4460 wrote to memory of 4284	4460	msedge.exe	91
PID 4460 wrote to memory of 4284	4460	msedge.exe	91
PID 4460 wrote to memory of 4284	4460	msedge.exe	91
PID 4460 wrote to memory of 4528	4460	msedge.exe	93
PID 4460 wrote to memory of 4528	4460	msedge.exe	93
PID 4460 wrote to memory of 4528	4460	msedge.exe	93
PID 4460 wrote to memory of 1556	4460	msedge.exe	94
PID 4460 wrote to memory of 1556	4460	msedge.exe	94
PID 4460 wrote to memory of 1556	4460	msedge.exe	94
PID 4460 wrote to memory of 1064	4460	msedge.exe	99
PID 4460 wrote to memory of 1064	4460	msedge.exe	99
PID 4460 wrote to memory of 4872	4460	msedge.exe	98
PID 4460 wrote to memory of 4872	4460	msedge.exe	98
PID 4460 wrote to memory of 900	4460	msedge.exe	101
PID 4460 wrote to memory of 4728	4460	msedge.exe	111
PID 4460 wrote to memory of 1584	4460	msedge.exe	112
PID 4460 wrote to memory of 4404	4460	msedge.exe	113
PID 4460 wrote to memory of 4292	4460	msedge.exe	115
PID 4460 wrote to memory of 4292	4460	msedge.exe	115
PID 4460 wrote to memory of 1256	4460	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\FileZilla_3.71.1_win64_sponsored2-setup.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffa062ac188,0x7ffa062ac194,0x7ffa062ac1a0
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,5346923862697500982,17523118329628202196,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,13740937699003951014,15149013256718271973,262144 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,13731357822438044697,9298067417075580142,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,10754436668574777320,18214437043683456649,2097152 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,16161299897678433668,11295185027968838302,2097152 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,1702494294003716797,7474866495747210616,2097152 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,3086400581333925925,14415113383004808702,2097152 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,6914864401208893890,9325588958150038661,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3940,i,14221895578347767941,6788905572955447772,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,4066181976257553390,15218070492118630809,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,4066181976257553390,15218070492118630809,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,9051146945119680300,12698738696415274240,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,432578126148446023,14082542824249095455,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,15840123179956746485,16622300132978789859,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,1218275489078977672,10508645986001104615,524288 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5812,i,8285967169155958081,12913104108270452758,262144 --field-trial-handle=2328,i,18419823725955114233,9438459839832380126,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1256

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2cfe0e512fe66762495535e6076a96bb4e6ed6f34c98c4a7f8df941ef3c8c17c
MD5 5c148bcc6fa502a2fee964c0dd6afdfc
SHA1 9199b6a7ccde16500ea75a0020ab5db0df5569d4
SHA512 4631fdc4ed2e6e278c330749a012433d939adf4beecbd21c6f7a1cb60fe9640888daa64ec4b81642fafbb45e59921d422ffcb8d6579eb20f08c08622b263623c
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7B:fwUQC5VwBIiElEd2K57P7B
TLSH
T113B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 173d43c48e419828ef3c9317902b9b8e498767cc33e515209e6f7f08368aedcf
MD5 0df851b8340fea37696189cde5c0251d
SHA1 1b3e67938d8c31edc0bf819dd7b84052897ec493
SHA512 dd184ad88f9bad8d3db2993e417888131eedda71bb858e8db2e0bf057457203d4c8533a2c53f093bc3a2203791af25ec224d844cde44207624ffc5417f36193c
TLSH
T1EA615D69974208B5CF6316BEF3E0521239F2B4E83A1BCF62159079BEB11676C8D3B418
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5894f8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5894f8.TMP
Size 3KB
SHA256 3b38438ea379c38a033c9902a8be35d09f1dc42059a6041fcd2464b37bf498d4
MD5 45e4dd0ae7b45e8b122089a8b1645bc1
SHA1 0911f23c1c9b0328be4fd91f3e8c8df116515e76
SHA512 1aaa7c04a6c0310b590100f6b5f1b69e3f2c31cb57a8a990a8c22373e220b709222ee1f3b93c5b82fbab598f22a22ebcf5c766d25e41fc949c36b4f712c49c44
TLSH
T16F618F69974208B4CF6316BEF3E0531238F2B4E8390BCF62119039BEB11276C8D7B408
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 d0fc7fd8dcce30bfed5d783b374b30c9d6d18f6ec62293c8d9c9edc1f5bb49cc
MD5 1c2ba4b774da0f209bf4a8a234aa9217
SHA1 1392ec0c602c8d6fb8cefd551cb0d8c76ea38114
SHA512 07c176ee7e802c06b3981f3cc5c83b6a1eaef919a72475a14e6c5354077fd7f8188682d8b601102a5499bc33d18a59cfd6e4fc4d2f18b6873002a00578bb7526
TLSH
T18C117DF3C7D585AE891156F06A24AE2BDE1D0606421C7C5985D4FF2BD3E3079E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f6a697a5c5647d6f365cb2d13cbde1c7f8eea2e73f3340891aa6e77c665f9cff
MD5 deba564c861ca449124a4dc5fe3f0bff
SHA1 d883efcdd9c6e782e6f69623927adbdab97f6a09
SHA512 c9d33e54f19a5c14fdb25b7e4cab3086dad8cb53fedaa3a11d86d2dda82ab962b2929afabea4879a6187de8e0c942efc4ed652f1679b1969288d23b7d477ecc3
SSDEEP 192:sxZbRxyM/jK1Ml8Mkl/f0sLDz7IIdpdQHW6+WNGYwKMTvIgrJ:sxZbHMl/f0snz75iHbGN9
TLSH
T1C642E711AB34A977CCCBD208FA517F53D6F95572A2940E44A9FCCA1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 71a662d0fc873830e27bdbd4bc85ae451e6d4d02bd48f8a3c3af3d81048582bd
MD5 c6926d5f853d84b84911e3a2f5ac5a9a
SHA1 463f823687f78e48aa3c497b589b560e628756b6
SHA512 c6896b12f154310c00ce48fee838f7bad458abb66cce63a694185711bea2d4b455a144a72814759063d6b1bd04087496f339e56ff46c7b16d4353ff3b5338429
SSDEEP 192:sxZbRxyM/jK1Ml8UQokl/f0sfDz6IIdpHQHW6+WNGYwfVuvIg5jJ:sxZbHqLl/f0sbz65wHbGg7
TLSH
T11A52F711AB345977CCDBD209FA417F53D6F95472A2940E44AAFCCA1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 33486ff54580afc1d543b7165f3cc8c8bb67de4428960c6b10a9b00cfa43206b
MD5 1f64fcbb5767235a9e68584ea088240a
SHA1 72703bbfe35ce0da05e47007d1cbc895ad833a75
SHA512 5174c48b6d7dacf76a8347e43d4192cf256d15531db8ff3c04bbed3d5494dc83ecdc15ce40b4bbcd55ee685870fc01a43a8c4515e7dfc5d46f9e13991a049b17
SSDEEP 768:yf4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d9rohhQcRaP:yf4jeXmWvmKLEu1jacPLZQd2Xny
TLSH
T1E1D2093B284CCB7E4F844E5CEC26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a452784a2cd58750846466ab3aa9d612f9d3847588aa8116be3b0a77c5d75df9
MD5 5575f25804b1d371c59a55524115c6ba
SHA1 327dbb3e2aed243149878fcad74f3d982ad15ea8
SHA512 e37453c12257aa15938a6d2304f712e90ec08450c58220dcc8e66272ddcfce913275f19c4ec33f7c59cafea15551566beb0fa0e57f242bbad7d8b558ac0b3d76
SSDEEP 96:K41KKuE6mrmKsIcslA8i+ygemjzEEgK81EagwUET6Mtu:old7slA8i+yXmjAEo1EavUET6Mtu
TLSH
T17F91A98BB57F02113D3E690892A0871B5B52BB63700CE42B7BAA10715D6AE385CFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 49eb237984ae1f97872e9dda790789a959d18e573eacfcf0ee2eee840da3c482
MD5 7ff8aecebe9044ec4ffad00cd8b083c9
SHA1 4f2ef17456a84d8926334dd23be2447c6bca3c4d
SHA512 c34a3164fa0fbc48062d5336636540e68e1e881c718b90a6fe928e2f1a03be4724ee3560753415c26d03d2fdc3610ec0f016bfd86a1824a9646e5949e4008c03
SSDEEP 192:uhlsFsNB7QPKZEcmaQmiU1qdb4H/+jVSjzor9oHXLEM5ZFTuSqXEqva+4LcYLWAQ:rsNB78Lc7wEf+o8eHXosFunEsa+VYPGF
TLSH
T1DA624B326A68AC374DE6A782F48732139FF8515B96C97F8896EC5F1C00CA6DC1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 c69cf067d4b217ad78fd6917fe3ca6c341fc0d9ec860e86453e09f47e4147e39
MD5 ece2565b471d1c55183604084563d06c
SHA1 f016c3d1483e599a4f37992c698f3a6799272624
SHA512 4a9d055368ba0bb19d9f26778097f0afa8408fe3668c65400c461c18bff35044c0962701578b28cbeee1554f6bab82ba96d6493f6641d87e47fcc65a9ca8a84f
SSDEEP 192:u7ILsNk7QPKZEcmaQmiU1qdb4H/+jVSjzor9oHXLEx5cFTuSqXEqva+4LcYLWAd6:RsNk78Lc7wEf+o8eHXoUFunEsa+VYPGF
TLSH
T176624B326A68AC774DE6A781F44732139FF8516B96C97F8896EC5F1C00DE6AC1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 448017ff1a6fb2e30d9a39a83453db0ea2760c96983f9131d64c2c25c5291bbf
MD5 35e0647b3172b33221e226426b3c881f
SHA1 9ac2e7ca0167516ab4dbb91e8cff0015251f74ee
SHA512 3a05918859e29330e3fb916910d0288a10dc2fb450ca4e5648d1f8ea5b20564e7fc124983c1912c4853f5698898781dba861d668fd1cca8cdafccabe0629e03f
SSDEEP 192:uhlsFsNk7QPKZEcmaQmiU1qdb4H/+jVSjzor9oHXLEh54FTuSqXEqva+4LcYLWAQ:rsNk78Lc7wEf+o8eHXoQFunEsa+VYPGF
TLSH
T127624B326968AC774DE6A782F44732139FB8515B96C97F8896EC5F1C00DE69C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b3d17798c750742521821357b5b48e4a574992abfc9fe18b2682eeb2f8643ba6
MD5 6f858656a200a1fa56b5f07f0e20191c
SHA1 fd49da4e1534716ba7e67313f884c29c307bb35a
SHA512 402bc05689698d53a140b1dd7a2be00d58d43362ada9e448f3b6d79a971469192745b146ff8a6547e963d952b2d3785b4134d737d963d9b5d666534ac18cffe7
SSDEEP 192:EONG6hZ0QmiUy3Lpc/+jVSjzor9oZ5wOZueaU6:EONG6okpu+o8eg2udU6
TLSH
T11602D83569687C778EE2AE45F48726135FE8216BEA956F84D6F81B1D00C769C2303837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 eddfb52c7bfc887e44338f5ac71e2ba5fd371cd7895c04582f6b7f9f428d71a3
MD5 23068508fa5ecced2a0125f0fd5d4831
SHA1 885d02aad7b0bd5d733b13def1ad2d562ef2c2be
SHA512 92cb61a0ffe1ae33821ed9d04afcf1643f42974ddf69e835f1c91b76ea89d71f7bdb97cc35f35cfbf437184ac802451dc9bca79b2b86a3105e7948e513c94a66
SSDEEP 192:LLsNkiQPKZEcmaQmiU1qdb4H/+jVSjzor9oHXLEx5cFTuSqXEqva+4LcYLWAdPGF:3sNki8Lc7wEf+o8eHXoUFunEsa+VYPGF
TLSH
T12C624B327A68AC774DE6A782F44732139FB8516B96C93F9896EC5F1C00DA69C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 51a1b9a9418b9494dbfd1b9e5586374edbdcd081782ee18ce06b9fa0b1d0af56
MD5 6e1a24789bc91ef3e8639388806c05a1
SHA1 cb2ebe121622209b51e5a769ff503b74a45d171f
SHA512 65cf71d02bb36ccc9eaaac1bb3b2f1a598e5ead86ff754adbd3dfbc585ee57c6a9d094a9d40d7ed4b2136f0d97de8ddfca1f14570abdd11e95c3e6014a55e5d5
SSDEEP 192:MONl6hZVQmiUyNLEc/+jVSjzor9oHXLEC5cOquSqXEU6:MONl6vIEu+o8eHXot9unEU6
TLSH
T17112EA326968BC775DD26A85F48731139EE95127EA8A7F84D6FC1B2C00DB6AC1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 197dfae8994d14b766227f25a0183e3486056621ebf4e76a1cda44c047d9d65b
MD5 2ce10630452fa66b738f59bcf49c6632
SHA1 0e2b01feea4997eecd480e160a6790d491ea5266
SHA512 f95a6b7b80f10bde85cc045d81d0f0c2ceec1d2e1a58761729d63fd9a31f16d3bf8c4b28bd10f7110cd206a792720934fc7296bd975b990f794b95543778f057
TLSH
T169410758B6F91148B3777E5A6FF2686D487FBD272E06D55D10110E4E4A62B00CC72B37
MD5 SHA1 SHA512 TLSH

Submit Download