hxxps://www[.]mercadolibre[.]com[.]ar

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 18:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.mercadolibre.com.ar
Sample260910-xgcejsfn5v

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3928	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335397542963527"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{15B277E8-EFF4-4283-B7DD-29F3923C7C21}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
440	msedge.exe
440	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 1408	2448	msedge.exe	87
PID 2448 wrote to memory of 3928	2448	msedge.exe	88
PID 2448 wrote to memory of 1524	2448	msedge.exe	89
PID 2448 wrote to memory of 2908	2448	msedge.exe	90
PID 2448 wrote to memory of 1524	2448	msedge.exe	89
PID 2448 wrote to memory of 1524	2448	msedge.exe	89
PID 2448 wrote to memory of 2908	2448	msedge.exe	90
PID 2448 wrote to memory of 3416	2448	msedge.exe	91
PID 2448 wrote to memory of 836	2448	msedge.exe	92
PID 2448 wrote to memory of 3416	2448	msedge.exe	91
PID 2448 wrote to memory of 3416	2448	msedge.exe	91
PID 2448 wrote to memory of 836	2448	msedge.exe	92
PID 2448 wrote to memory of 836	2448	msedge.exe	92
PID 2448 wrote to memory of 916	2448	msedge.exe	93
PID 2448 wrote to memory of 1864	2448	msedge.exe	94
PID 2448 wrote to memory of 916	2448	msedge.exe	93
PID 2448 wrote to memory of 916	2448	msedge.exe	93
PID 2448 wrote to memory of 1864	2448	msedge.exe	94
PID 2448 wrote to memory of 1864	2448	msedge.exe	94
PID 2448 wrote to memory of 2620	2448	msedge.exe	98
PID 2448 wrote to memory of 4156	2448	msedge.exe	99
PID 2448 wrote to memory of 2620	2448	msedge.exe	98
PID 2448 wrote to memory of 4156	2448	msedge.exe	99
PID 2448 wrote to memory of 1648	2448	msedge.exe	102
PID 2448 wrote to memory of 3552	2448	msedge.exe	113
PID 2448 wrote to memory of 896	2448	msedge.exe	114
PID 2448 wrote to memory of 3464	2448	msedge.exe	115
PID 2448 wrote to memory of 1924	2448	msedge.exe	117
PID 2448 wrote to memory of 1924	2448	msedge.exe	117
PID 2448 wrote to memory of 3864	2448	msedge.exe	118
PID 2448 wrote to memory of 3864	2448	msedge.exe	118
PID 2448 wrote to memory of 440	2448	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mercadolibre.com.ar
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x210,0x23c,0x240,0x214,0x264,0x7ffcaaaac188,0x7ffcaaaac194,0x7ffcaaaac1a0
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,2665418885549486653,4371029776028318284,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,17122117064616434709,13884933315089469982,262144 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,1622317278568171055,4409919163890311468,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,9574267048912929913,9587148628092614732,2097152 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,877087483900990149,5817937409297933519,2097152 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,14610483469956155331,10627033997077822703,2097152 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,2842464820201685930,12847287130753884103,2097152 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2451262342184426552,11786033340158347875,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,7153231764893612410,5841593844262046533,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3523984008199877417,15510105788221552118,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3523984008199877417,15510105788221552118,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,10271418315072798182,20881594968341727,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,14498794974888036568,7248215615235125308,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,11048816393990836634,11724831714897931078,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,9168754599835280834,13087956670318351304,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,18111169803196805355,6371930113969579852,524288 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5168,i,8190482141796209102,5325307880190287995,262144 --field-trial-handle=2356,i,3918374428455871005,10271958682821413778,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

c2387bde2f798778_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c2387bde2f798778_0
Size 249B
SHA256 00894a985b6160fdf87cee8bb30715cd376bd607a3c04b97c852499196dbaf98
MD5 f8cb5f10643264d1ef1c10e2f4ac7892
SHA1 a1610ffc38bcf840a601245cdc006000f55aea04
SHA512 a263b290f517b39855c585964b89c62b86354884ab250dd375f8e044435d01f6f423f2f121c41eda8195399c1a569f8293817c009bac91433ca42d62cddf9c95
TLSH
T1E5D0A7B788686488D5AF85F4CD2B61DCD31222BA58058082919675A61291DF0635532D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7b03a5d98464ebdc5324a3a6827dfcd856d30c84917dc19b53f53e9b738b94a3
MD5 ea0f2517450940abb4059588c9667ceb
SHA1 be0094c833a598c046d333d552b82f2400a91190
SHA512 40e876b3585b75bc8cb9430221360a31d372999a7289be0ab60d54e8c9f4345a804bf1ce1fd0e5c1a0f40809fc7e300a8b22dac6c1a47b1445d69af60532d9f9
SSDEEP 48:DhRMXpDBL0rScBsruSZwbTKN0OT2J34vr5jUgsWMx8IBjETEW2ArYD4lX4IaBwla:SA8uSZeo+4zig/IB3olXKGiN
TLSH
T1E7A172F904829DF2EBE4B53264813E873BA140EAFC17AF4E15D2D47AB4267D1056DC9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c34b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c34b.TMP
Size 3KB
SHA256 ece1800c4f1204d9763ae87b7786ba86612afd2cf647c58d977bb21f106f3fa5
MD5 ee9b6db0cb3c48c52230be1f46467bb9
SHA1 0f25546f6d69a8c83b60aa24ab49515691fd8db9
SHA512 49cdb8ce616f8bdd60789ba3c5db1ce5dcb1df0aae143ff0407bd25f504e96245f844a2830ecb27e9276a3628852681843f413a59b29448d716980c58e173314
TLSH
T1FF61C3BE0582EDF6E3D13A3190C03A8738F190E8F823BD5D01E748B5640AB214A6A4CD
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 69063afc54964f1461020355228a310a8dd5e14d24a2b55c8204230121e10f28
MD5 c1606cf7b2c7804dd81502c6d55b0074
SHA1 be997451ced9e05b84f62d0763a73602d85e12a8
SHA512 fdeec063ed3d6caa29671efd524aeb5887711c8b57d74d527c8f620e6eeffb4ef5de1f8360fd214f0815f728f14fa15f59f82ccc82e67f2a449b52cd927079de
TLSH
T1E971AAF3C2E1915DCA1115F4D9187E2AEF1D0A22931C3C2AC5D86F6BE7F38A4D12964B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e915c667f2cef0fd06cfcaa4e92a66d7febcc74d56bdb865866e8a6b26ca76f9
MD5 d474a26e8f4adb6b8af971ae09cfd512
SHA1 319414065a9d636bf7c22b137430d9a3033c3d69
SHA512 8df48e0b65482a94d7bb96bd7c4016f44d276d15b03204a15c42acbb2dbc3a4e0d95131fb6724f049600686c2aff8d24615a433914ab186e1fb98c63d6f6993c
SSDEEP 192:sxZARwyM/jK1Ml8MWj/fxsAAQRIdpLVo2YHW6+WNiVJO/Y9IJkYFxIgrJ:sxZAmuj/fxsFXL6/HbiK/19
TLSH
T1FD4209516A346977CCDBD209F945BF93D6F95472A2940E48A9FCCA0C00E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9e6ffd3a2990c064944203586a05ccb1efb262bda7700a097e8ebe4dce587fe3
MD5 a791b209c58f0a2fd4f10d45e2ab2293
SHA1 35988ff0b9e6a791eecc0d75d4c0c4946d3f15c7
SHA512 dad34750b219cd2f6f10f66aa2b82f51758af7ff415e5912999db61f5cc694512da7d91e55fb61128bbc0389d8ecebecb6a164cd9b12f68f86eaca714d1e6151
SSDEEP 192:sxZARwyM/jK1Ml8UQSWj/fxsn3tRIdpd8V1Vy2pHW6+WNiVjXXY9IHk7FxIg5kBJ:sxZAmqtj/fxs3Ed8zkaHbi9XOaL
TLSH
T1C4520A52AA349977CCDBD209F945BF93D6F85472A2940E44A9FCCA0C01E7BEC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2f7ea5283a743ae499768b46027e2a63b5259726123aacbc31ba4ca15e0a126c
MD5 b54c003e0a487597adb1fe6db5def96b
SHA1 17d7380e19a90a7ea03a6a2d8d70bf155e06f08f
SHA512 a371fec191212f5e1cba0290633a01d7873fb030a02d8922ce83857b464dcf363a29ab4f63b484a6e23126ebe5678c3e88cdf18c230ce016c001a047b39494ff
SSDEEP 768:Recv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN0royg6B:Recv21wWvu+Z+u1jaeFLeRNfyx
TLSH
T138D20B2B280CCB7E4F841E9CED2A6F866DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b4e9f713fb84080148b60d16d1fa10043b3d3636c1b3350c88744a539d4899d0
MD5 8c665ed02eb1a561ea17c2e8bfdcdbf8
SHA1 ff6d5c92eb55d731f675044506588b05fd4981ce
SHA512 961dff401a5a1fd48b51fed62fbb5ac8a4aa8050a09d3b0188597100d6de9739e5644319e8312ba293dff00474db61840c3fb248ff562b20480e60f7ff03a20b
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDCygKTyaSK0Kfae+:mTfHXb+
TLSH
T16A914105307B0282387E684CA6A6866A5E8271637919E77F7BB840E14E27F155CFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59262c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59262c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 dc5f2bb04e38bdc676a920fbab3b8273b75ccc27dc52ee72e5290a90a15f748a
MD5 fc44d77a05456dbdcbf3d01ac19b7c3f
SHA1 beab202841e28c083840d61a258b4bb63aaa736e
SHA512 8a70c29e08a1e65eeaf1ed0234d0fb0d30864614b956074a73baacdf6a67eeb7c00de51dd426cfce7a1af05da07bf965266d8b80834ee0806b61467b048fdfc8
SSDEEP 384:eZcIhsNpzzlziE05tVe+CXOmep3JrVk6sa+VYDwon:chC1q5tEvO9p3hVk6hgkwo
TLSH
T1F1828C726D785CBA59F79291F94736178EB89067E6C92B80C5DCAF0C02DF798130682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 3fa1c89469c090180f9733c187eb967d030a919df7c8c152e2b9b3074b32317c
MD5 6f11b37912a09c9f9c1521313e9c64a5
SHA1 dc30bb1bd8da81345df0227540cfd8117dfb6b6c
SHA512 14e87ef0eeabcc0778bbb5cd545d20213edf6cede5864c2bccea5ed7dc505545beffd8f6c92233f48996be571401357bdee4f9cccd61f299109171fdf8baf996
SSDEEP 384:aiFiZcILsNL8TUNTUlIlyzlziE0htVe+CXOmep3JrOk6sa+VYDwon:RFQLawgs1qhtEvO9p3hOk6hgkwo
TLSH
T16CC218F259D7487AD9AE4743E73E2E128EBCC067F4856640B3C85A0CCD9A2BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2f18a305fe4fbf005d102378764cb15575b8b03f827680dd37a9e7134431b808
MD5 3e501390612ab1634daee4c79c95dc0b
SHA1 375e10de103895e0277c1665bb91cbcd3f1ad0f3
SHA512 006f5712a2e9cbaf77576c59676a4379117d03056992d9960a9baf2ae162d1622506b200914e14f4805a100070278b95c5dc55d06540f2bb3e809842662f4aa8
SSDEEP 192:JONO6v+YLNQmiUy+8+hZh+CG6Om9oEusllU6:JONO6vz/PJhZh+CXOme6vU6
TLSH
T13402E935BD681C7B9FF26E45F98737275FA8217BE9952F80D9E81E0C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2a6eb4ded335309bf2cb5efb508e490f4967206a91dd05808c6fd1c2c5f77e0c
MD5 843d4b202194c3d23e01052e06b6280e
SHA1 650b6737e0ee6d8e611b14a70a6d28720fe9d196
SHA512 05b8a37db7146bb816f1f16dd501f9287d5d884c27ca2d22cdb0b63dc84db6f53603853e9e367596532e06553b2a0949ac83d2320ce8b196bf7759efe2f056b7
SSDEEP 384:XZcIhsNpyzlziE05tVe+CXOmep3JrVk6sa+VYDwon:fhN1q5tEvO9p3hVk6hgkwo
TLSH
T146828D7269744CBA59F39281F94336178EB89067E6C92B80C5DCAF0C02DF798130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c7ffd23f94fac84925fa7577c1ac3b39fec7a943034880ac30fb1f76fbad32b3
MD5 7ef46206b962e45dbb204d7b417bad74
SHA1 54dc3c5e06d3634729d06dd53cb786839771ced4
SHA512 f092936be06e842656bec6a7c50c7d843d5e35cf6a9d7494cee714bf5e739738057700afd4e2f6ca303aaa3cdd8d970ddb9e9d34633cedec736ac1960a06eca2
SSDEEP 192:5ONc6v+YLMQmiUy+i+hnh+CG6Om9opwSJrHuQCHkbqtU6:5ONc6vzIP3hnh+CXOmep3Jr6k6U6
TLSH
T1C2123B36B9785C7B5EE36591F48735139EA85137EA8A3F80D5DC3E0C02EF69C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5606f25cce93797f9d5b4de4ccd3501c0ec46ba2ddf6a5fcb708df6828f2d690
MD5 29ad42fce1f6b0ea92bff3211a80b9b6
SHA1 3f18cad5d80c3d4d8767c23eed860c26585796a4
SHA512 5b0909157c3a1790c740ff7f7813aa6ad52344ba5edd92ab77d6fb413456893056a95e59d29a4acbc2c04fefe725fdb7f8bae3faf3c44373ccdd9a59483750b1
TLSH
T18B41F65CBAE91148B3B76F5AABF6686D487F7C372E06D55D00010D4F0A22B41D872B77
MD5 SHA1 SHA512 TLSH

Submit Download