568705319b3ae5bdab4ed588d605ec142e45962f56824efdce1f2b33436818be

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HomeCredit-IDN/index.html
Size 1KB
Sample260910-prgg9atbmf
SHA256 568705319b3ae5bdab4ed588d605ec142e45962f56824efdce1f2b33436818be
MD5 55f32b8015415e8693d1350732ebbeb5
SHA1 a1227faf923ce20357ba103bbd3ff9bef1f54fd2
SHA512 2eb1c8f5f4f40d96870b294a874527aa2df893c9cc3afb751a95e0e07802bb07950edb7c1744b13e09351f978b15596ef88ffdcab16f930bab1d48726b53877c
TLSH
T19A21216259A2C04B552681602FF6B20896F5E64B834CECD4FBDD174A4FC139E98F75F0
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3256	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335172348974357"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{6F09BD5F-5678-4E71-A9B7-87D2E3789A68}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4324	msedge.exe
4324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe
620	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 620 wrote to memory of 2468	620	msedge.exe	85
PID 620 wrote to memory of 3256	620	msedge.exe	86
PID 620 wrote to memory of 1356	620	msedge.exe	87
PID 620 wrote to memory of 1356	620	msedge.exe	87
PID 620 wrote to memory of 2452	620	msedge.exe	88
PID 620 wrote to memory of 2452	620	msedge.exe	88
PID 620 wrote to memory of 2452	620	msedge.exe	88
PID 620 wrote to memory of 4548	620	msedge.exe	89
PID 620 wrote to memory of 4548	620	msedge.exe	89
PID 620 wrote to memory of 4796	620	msedge.exe	90
PID 620 wrote to memory of 4548	620	msedge.exe	89
PID 620 wrote to memory of 4796	620	msedge.exe	90
PID 620 wrote to memory of 4796	620	msedge.exe	90
PID 620 wrote to memory of 4920	620	msedge.exe	92
PID 620 wrote to memory of 4920	620	msedge.exe	92
PID 620 wrote to memory of 4920	620	msedge.exe	92
PID 620 wrote to memory of 2128	620	msedge.exe	93
PID 620 wrote to memory of 2128	620	msedge.exe	93
PID 620 wrote to memory of 2128	620	msedge.exe	93
PID 620 wrote to memory of 1176	620	msedge.exe	98
PID 620 wrote to memory of 1176	620	msedge.exe	98
PID 620 wrote to memory of 928	620	msedge.exe	99
PID 620 wrote to memory of 928	620	msedge.exe	99
PID 620 wrote to memory of 2940	620	msedge.exe	101
PID 620 wrote to memory of 4332	620	msedge.exe	106
PID 620 wrote to memory of 4260	620	msedge.exe	107
PID 620 wrote to memory of 2156	620	msedge.exe	108
PID 620 wrote to memory of 1360	620	msedge.exe	121
PID 620 wrote to memory of 1360	620	msedge.exe	121
PID 620 wrote to memory of 4324	620	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\HomeCredit-IDN\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb7b9dc188,0x7ffb7b9dc194,0x7ffb7b9dc1a0
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,4092604378052179561,15331037500563782356,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,15248160299272405362,3086988891571446396,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:8
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,12459318585228664897,4530503819338831723,262144 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:2
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,9042160545759262231,15481027807543833502,2097152 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14866536761332484231,4814865299444028163,2097152 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,15412879186675329736,18189608231430513740,2097152 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,13188636223358773945,16860883361498361585,2097152 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,12041400589496511261,7598776237203553154,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,4849980652505635326,12980993845989968224,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,7381245205656331807,15595128397067612802,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,7381245205656331807,15595128397067612802,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,1803182185998636382,14614314624205421021,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,2878095436551978206,1874244562294349215,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,8303071913334667406,7814652631147486188,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,8542733096795145145,6541975363242334771,524288 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5488,i,8937818292802240352,7044125329273395283,262144 --field-trial-handle=2900,i,6191432096605300648,8734416621116771598,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2072

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9af13a73e49f9e3f7651b03de098bf612076d17252d31ded7e6b233752f008f7
MD5 7de94a65b0bd6542019242b3fba0ff5d
SHA1 bbaaf406fac66915188ce2894cd40ef0f228ae69
SHA512 2b128eb018a88f79ccc1435af5e4a05ba3820850e7c26b33c4ae2d96639edb0dd078a330f05681295531696ebb80cc4444b6e0793ee7eae3a77ead1ed52b81fc
TLSH
T1A271187E024313D1E765217BFDD906053A7D8BE909024EAD11A0983FA90EBF5BD3740B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58eb17.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58eb17.TMP
Size 3KB
SHA256 5c7f7d4ea19a245ba1c1f0683a9104ba628584e50d36a8ad11b50eff6c0ad2ae
MD5 fcd3f633af762f8a9daa0e32304d5192
SHA1 78a487008d7c2621500a99ca4184ed5e8e9ab698
SHA512 eee5e98c7b1142b92d2c89e7faba2c54dc4a0b015b2525481769c5835a3aa3e69be9e30ec11b184f7851ceaa2853439ffc386efe29888ef313d9d7f2f7214d4d
TLSH
T17571183E024213D1E7652177FDD80A053A698BE909024EAE11A0983FA90EBF4BD3740B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e784a6cb5e99b192386aace47aa06802b7221876975d92d572776c8397aa4a6b
MD5 4a4efe2e632363a7cfdf6645025fcd49
SHA1 7d413eefc17d641e34e48fefb620a3964c79e9c4
SHA512 12cf699d90e07bb3cc82ae135bd00dfeeaa0e4ae25c5edf4841fcc59d40730d6d353376bdeeed0dd9e1c146616dd2d44c16e57905640a9b76b70a2586ce182c3
TLSH
T1F5116AF3C7E5866E8E5156F09A24AE1BCE2D0506422C7C55C9E4EF2B93F3475E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2f40feb196eac734b2796db60417dae4f22a849636a7ebe2c8fa276ecf13cfcd
MD5 5ef9ccf47d68b9471dd8bb8839536415
SHA1 070e33ebb8e29ada1b57649314e24917fd4e66f0
SHA512 d26d0dbfa9536c18e4c6738612de3dee8fbf5e4fe4650766820d9679b6024749c4f73c3aada00864e1a9356c3b4d57b5b18542a82fd9e9503ef97b883422ead9
SSDEEP 192:sxZ6RwyM/jK1Ml8MW6/f1sV7Idpd0HW6+WNGY4w9O8IgUaJ:sxZ62u6/f1sVk+HbGMUW
TLSH
T10542F811AA34697BCCDBD20DFA55BF53D6F9547292900D44AAFCCA1C04E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ee7e18028b1ca1fc84621aa301e32325e6d174b6c368f5ac7bbd86fc625f33e0
MD5 ecb551e84720ab01d16687860ea0c2cb
SHA1 e0bdc72eb630dab27f68b3350c7397e85266e501
SHA512 11841ec9613007cdb490bb24f489805e8c202804d533badbe5983a2a7224aa2b5cff0e019c90c793bc96f88daf59b9a87d8db880949f126db8dfdde0de4a2621
SSDEEP 192:sxZ6RwyM/jK1Ml8UQqW6/f1sE7IdpH0HW6+WNGY48CO8Ig5oZaJ:sxZ62qF6/f1sEkUHbGLWW
TLSH
T1E252E815AA346977CCDBD20DF941BF53D6F9547296500E44AAFCCA1C00E7AED621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4144bf0a338a19f56f070b56eb8ff6455a231bf9f80f4ebd7de545e18ca4d3fa
MD5 65bc26f3ec3cc9bcf2a6bf52f19a5c18
SHA1 254f61a49e7294ad7901ccbe44940ce6769e3bc6
SHA512 dd8a24c819f0ee0823cce5b03c06236035b3062ad0a826d8a67f80331316119b24bce941774d4db65dd7148f8d1f3ba28ee1f36fea2bbe9baddc0796d220ba35
SSDEEP 768:998iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opduro0kYUnW:998iJPNWvx76ru1jahALocdlYUW
TLSH
T1CFD2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C77EA51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6c914c846aa7725d560736b0f19b2de1fa799af8a05b49228e83d62d0d55a25d
MD5 f4a5984e30de5bbce0357de37ed68df7
SHA1 e2f3a573f087eebbc88d3a1848b1228c0a0a0d69
SHA512 b5491bc52e39920aa3f9a1318a3eca5baaae0842f04addaac6bfc73912dc81603309a24a6ff86c9d2884208fef042feec493197c5e243c8f47c726aa0317bd22
SSDEEP 48:KKII7KhKEXyHDIfDRxhC3ZmxIAzCK1ntlCpTSy+t9iI/KXKsvya:KKIAKhKWSwAKdG2iAKXKO9
TLSH
T183917352707B12413CBE299C9293C71A4B8171633224F56F37AA00BA4E67E790EFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2af671fa27189f2cc3064afeaa359ebabcceccaab1d9dd172ef5a7a902983dea
MD5 39256a7a84135321526b96466b08ef4c
SHA1 86c45ee0faaecb4517495971c3a6c17ec42f9eb4
SHA512 740d3feed05186ab798ac576bf24854a0f6f7fd21bd89291ed9bdc9ed535b051b07d249d53dff136935cb0b06b9f4ed2c5066132004144c575888f3153ed2dd2
SSDEEP 384:TZcIhsNuy8mR4LIkREaSxuvzxV+Mhdp+BBob:LhB1xS4184p+P0
TLSH
T183827D7198782CBA5DF7A145F88737074EB8C167EBCC6F80C9ED9B1C00DA294131AC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 17ca63452b9bedc7510ebb15661e0cfea52b431c3c17e35da8d48bb62767e18c
MD5 5214a6eebb0900d8414e3657f42166f0
SHA1 1bf46f409241c9758a0cb1afea2e88313ba93891
SHA512 051e8ddc44bf5f0a913425a8f9114d3a57d7bd308cc1eb65d63c60beeefc0c3e2b6dc5788e6e4cb877f9581d97c0a41508e76c7f52389e8980a6daceb97c14ae
SSDEEP 384:aZcI5sNuv8mR4LIkRErSxuvzxV+Mhdp+BBob:Y561yS4184p+P0
TLSH
T111827C71A8782CBA5DF7A145F887770B4EB8C167DBCC6F80C5ED9B1D04DB294131A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1cce6bef585c59e11548d25b5af56ede0c762ee104b9a87242ae9cf16f001586
MD5 9fd4e5dec07c2e7b347a6203627e132d
SHA1 724399e8e8cd16a64dfca0814a076033cda65988
SHA512 04719f10dd1aca32f51830b04f59fcd908adad942106f68cb1b1a24010378f3e1dd9a5822f80119b01677e2f631857f06dafc10cb904064c0e5734b08b616357
SSDEEP 96:ZqONkdQsjpfmUTmDK5ih/cIPURHl8h4otop5g5DdBhPwivh50xy0SFYK+AxrgCMv:gONx6kDfQmiUyCDZ903etnQiipU6
TLSH
T15B02D939A8782CBB8EF36E49F48737275FA5112BEA952F84D9E81B1C40C764C1307936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a009e61f1ae79e514869bef6c62b3a0d7da0b561efa7d5c17c40309a13c9726f
MD5 aa1c47f51b80070a9a05c216388a20d1
SHA1 24af81d3d796c9be47997ad612d4c5c5f5189ee5
SHA512 b275241f7cc814abcca77b2bf781231619c6873c4e8cb841af3f4a24f277ff92bfec8615a9a6f19a6842efdf59833016d1f4205893ea86da1eecfd03f7009ef6
SSDEEP 384:pZcIhsNuv8mR4LIkREaSxuvzxV+Mhdp+BBob:hh61xS4184p+P0
TLSH
T183827D7198782CBA5DFBA145F84777174EB8C167EBCC6F80C9ED9B1D00DB294131A82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c63d3894a2df86195ad35f6bec7d3c755f800c8579a18bee50c6f3b0de3ffb3f
MD5 1f38e1de62c43e07d71cb4dbd1dd27d0
SHA1 10fb39ccbea425a41bdc7757691d2ddc00be6dac
SHA512 5da80f5d37ce1e70e03858ab104a8d4c9e064c1e4a4be666a1afb3bfeeabf24609c3473830f60f12e5cb63912045170c731d26c39204cc70ed980cb0440f3560
SSDEEP 96:KqONkXQsjpfmUT0K5ih/cIPURHl8h4otop5gIDdBePwivh50xy0SFYK+AxrgCMyH:BONX6klQmiUy7D4903etLEWcROqGU6
TLSH
T1C9120935A878786B5EF3A845B48737175EA58227EBCD3F81D5DC1A1C00DF29C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

61033661-adb0-4702-871e-24bd6a3408c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\61033661-adb0-4702-871e-24bd6a3408c0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ef31c9b3beba0cfd47590644f88aada267efbd02c364bfa87d9dc1c41b691310
MD5 ac23a15a57d4eb354a9a467d316d0a66
SHA1 04066a560ab29006adca0e882db5c812486bb4f5
SHA512 266ee3a3487a0e983ffbd72a4e8b72a7a780ec4de172cfb97cbb6f9cb396739eba6baf4d376e11ffa514f0f2835222ed2027a3ae29b4777ee8f2289c6c8710de
TLSH
T11A412988B6E91148B3B76E8AABF7A82D487FBC772F06D45D00120D4F0667A45CC61737
MD5 SHA1 SHA512 TLSH

Submit Download