hxxps://api[.]blockcypher[.]com/v1/btc/main/addrs/1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa/balance

Analysis

user interaction
yes
max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 09:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://api.blockcypher.com/v1/btc/main/addrs/1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa/balance
Sample260922-lnbwtashpe

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1892	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345436459072060"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{5606DB69-12F3-4FB3-AAFF-7765AF6B7AA7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1608	msedge.exe
1608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 1780	2808	msedge.exe	89
PID 2808 wrote to memory of 1892	2808	msedge.exe	90
PID 2808 wrote to memory of 1092	2808	msedge.exe	91
PID 2808 wrote to memory of 1092	2808	msedge.exe	91
PID 2808 wrote to memory of 1092	2808	msedge.exe	91
PID 2808 wrote to memory of 1288	2808	msedge.exe	92
PID 2808 wrote to memory of 1288	2808	msedge.exe	92
PID 2808 wrote to memory of 812	2808	msedge.exe	95
PID 2808 wrote to memory of 812	2808	msedge.exe	95
PID 2808 wrote to memory of 4416	2808	msedge.exe	94
PID 2808 wrote to memory of 812	2808	msedge.exe	95
PID 2808 wrote to memory of 4416	2808	msedge.exe	94
PID 2808 wrote to memory of 4416	2808	msedge.exe	94
PID 2808 wrote to memory of 828	2808	msedge.exe	96
PID 2808 wrote to memory of 2968	2808	msedge.exe	97
PID 2808 wrote to memory of 828	2808	msedge.exe	96
PID 2808 wrote to memory of 828	2808	msedge.exe	96
PID 2808 wrote to memory of 2968	2808	msedge.exe	97
PID 2808 wrote to memory of 2968	2808	msedge.exe	97
PID 2808 wrote to memory of 636	2808	msedge.exe	103
PID 2808 wrote to memory of 4236	2808	msedge.exe	104
PID 2808 wrote to memory of 636	2808	msedge.exe	103
PID 2808 wrote to memory of 4236	2808	msedge.exe	104
PID 2808 wrote to memory of 3068	2808	msedge.exe	106
PID 2808 wrote to memory of 4568	2808	msedge.exe	114
PID 2808 wrote to memory of 388	2808	msedge.exe	115
PID 2808 wrote to memory of 1112	2808	msedge.exe	116
PID 2808 wrote to memory of 3508	2808	msedge.exe	125
PID 2808 wrote to memory of 3508	2808	msedge.exe	125
PID 2808 wrote to memory of 768	2808	msedge.exe	127
PID 2808 wrote to memory of 768	2808	msedge.exe	127
PID 2808 wrote to memory of 1608	2808	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://api.blockcypher.com/v1/btc/main/addrs/1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa/balance
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe7284c188,0x7ffe7284c194,0x7ffe7284c1a0
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,3787645717989256170,9887068743619048294,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1476012184900548574,1260702741690264586,262144 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,10994057961424979367,13755547980975301966,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,7062274212397720215,16431288209661260552,2097152 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,6302751454829403798,16150507266181285728,2097152 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,5039576516582555727,17784432136253142196,2097152 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,7687198514664170038,18241966155009477104,2097152 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17331880947340393064,11592657285283454610,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,10097189704162746241,11096210063977280535,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,14585152325277891063,9933635340957371240,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,14585152325277891063,9933635340957371240,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,8801871303308214995,6572818454378768790,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,8261761888769798034,5967756017615265665,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,16998472722520041032,15066063173572254395,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,18357923212447295107,17802723431815965813,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,1918411859084778240,1374310935260762258,524288 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5188,i,1513553069576835054,2663917270037101764,262144 --field-trial-handle=2288,i,16190089740443755138,1998568715892542012,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5ea2980c2a4832adde8affc80278b86155c71d28c35250d56b3181cb5941c76a
MD5 b0dd0fab7f5235aa7be167e5d8964ee6
SHA1 9dcfee59491478a9ce2b67af46a3db2dc0af08bd
SHA512 aeafb4e87ca9f482f0667cd796ed66731851d6513201ab35d0e3ac29a3d9000aeb15a9d06a0ddc17a2074fd34d5dafba6828cc0e98971debc38f6da4dccd336d
TLSH
T18B612E915A2B6B63F79876F1CAE984FB353F649F09933E5325A8EC3B5806353F200064
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c32c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c32c.TMP
Size 3KB
SHA256 6b0527badcefce5004fe751d4e5233bb7048232190c7458379c635f755615545
MD5 abbe14ef02d94a03c09397b146b83865
SHA1 5b3269b19596147225115f7535e5b46e14572d36
SHA512 0f277c7f939a9dfd1f5c2f9843e7c2158a456f536a15b08a4aab2231fd55fe481ff3d68fcbe3694266396efb12b8369fb4acfbb0209f61a52183ef38950bf404
TLSH
T1876140905A2B6753F79836F1CAE984FB353F648F09933E531558EC375806353F600054
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 31150707ea6b3d202372d91dfe7cf061bdf178f882b0a01c9bb5d9dcee8ef3db
MD5 8dc6f61d7987baa57fff5e0a006273a8
SHA1 2b67cf0f36f233f849c69300295c75c024ab3751
SHA512 b05667c0cf056d6e70a2eefec5cd42174440e1aa51c4f45530e1da0b12b7162b62363fd840fbf49f728ea4257f35457d28fc989029227e1a6f21639f9116aa55
TLSH
T18F1157B383E5C5AE891157F09A28AE2BCE6D0506432C7C1A85D8EF2797E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ffaeb4a972b3357abe190eaadae004974bae4f85c3ac3976709eea10c8fc18c1
MD5 3a2037c39d47574b77bf4dafc9156234
SHA1 cf5629da01fc332c010f396e45b0a836d4974320
SHA512 d6a874cd65a4f76b52f15d18fe78ccb1c65c386472615f222c526964591d0711a64836b69ebe5ebc2ed5c99be6a84b5da78bcb75617fc5fadd1b94b915f842ec
SSDEEP 192:sxZoDRlWK/fTssTaIdpq/HW6+WNn9N/Yapvh/IgrJ:sxZQSK/fTssnAHbf/b9
TLSH
T17222B752AE28A97B8CC7D20DBA19BF53D6F9513251D51E48EAFC961C04EB6CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 149aebd74674e4539d996cfb9f44dd346537e6d095d114343c70b6c3a037c6cc
MD5 1140b6d530c1906dcf0ea35526300451
SHA1 b6c102482a6b132361869ee9c471caa6e1054f42
SHA512 aaf677489f41453b6c3aad0d0eb26df8adb80e82990eaf38b57290e2a033d47739f38d8e76d1e2b43c5f5a713783c0ae67ef8fcb2b5f905a759af21e19ebec54
SSDEEP 192:sxZoDRlWK/fTspTaIdpU/HW6+WNn9N/Yap7ch/Ig5CJ:sxZQSK/fTspnuHbf/UU
TLSH
T15922D716BE28697B8CC7D20DBA59BF53E6F9513251951E48EAFC861C04EB6CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ea7e894b644abd91e0beab59b5f68f05e7ec20c42b4dc517f22ba4e7d7a83d36
MD5 4c079b21cbf91df2d6446706536465ef
SHA1 bab0c5b0f5a436bd2dfdd2763352815435f18392
SHA512 a3ebe6ffdcacc340b3fbf5fdc703353c04f22ec8306256880024c486de72c210ed643cc72e7bc21d2d5b109a432955226e4b251e9b11a1bc6d818522596d5d19
SSDEEP 192:sxZoDRlWK/fTsgTaIdpq/HW6+WNn9N/Yapvh/Ig5QJ:sxZQSK/fTsgnAHbf/bW
TLSH
T10022C612BE28A97B8CC6D20DBA59BF53D6F9513251951E48EAFC961C04EB6CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1595aa75c5f72cc57af750619b5a9ac6ee2b9cc4a48df8a1c1f7fc26071bd48b
MD5 b22f3e0a05adaebc7ab16715451256b1
SHA1 8f6cf91a1f3a541023b293fdde0738ab077524d1
SHA512 883132d8a2b41501fcd9579cd2ca4766d36a8828f8d99e61815c144b4e2cbdb51a0d97d440bd20127eea93112cc6ad9d868ff702e0859c35f65fc8af27f66e32
SSDEEP 192:sxZoDRlWK/fTspTaIdpq/HW6+WNn9N/YapNrh/Ig5CJ:sxZQSK/fTspnAHbf/9U
TLSH
T1ED22C716BE28697B8CC6E20DBA55BF53E6F9513251961E48E6FC861C04EB6CD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d1e03737d89f899a6e0ddff83e5e4e98c90beaf730d253fab6325b51d90aa392
MD5 ba0822d7ca074acdedc168120059f62a
SHA1 016c35d777fff0a035597629120950e10587079b
SHA512 6b4c4913edf28592a104d8eadea7830dc1c33e164bfb67df9ced68fb37a0b3a004f9ccfb3b992dfd7c93def9ea92f37df7b88a0a04484554e23a11a6d1d75bcf
SSDEEP 768:FbWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Oro4zfe2mRe:FbWPcLKWvKeEeu1jaClLiF7F4zW2mRe
TLSH
T149C2FB3B640CCB7E5FC01A9DDC5A6FA77E9802C79A548D4047FE944C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e4138e7-0c00-4cb1-9222-d67754177ad0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4e4138e7-0c00-4cb1-9222-d67754177ad0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 63bacf288232af49d5279ae7faa3fd5fe0d400585bd6a3c9d0c9721a6c9f04b5
MD5 7a2fd314f731a68948e14344539b7eea
SHA1 08656509c92337aac1695f2941c5c205d9f72780
SHA512 18a8d7aecd0d5deff02c19976ebe7229a9e4041a5b0bb68fb95a54c5e8fd79710c386df01460093b20c744bbbeba2d5ecbdf97be603225623f1c3402cd57d662
SSDEEP 384:nZcIhsN8HIcA1cVkzIGm5B838RcX/iMxuvzxV+Mhdpwdo8:PhLAEeGLR0/iM4184pwdD
TLSH
T1F8828D71EC78ACBB6DE7A145F8463A139EB8C267A6C85F90D5EC6B1D00DE354130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 155557c3db477a170f8e0446c743e2655daba815eb6c5678549c6997959cb717
MD5 2fef277878014bee4133bc74bd4064da
SHA1 8367ec96729e0c7a43e58457c75a043dbffc51df
SHA512 527134eb69bee4ba87129659006b439f4f5441eea521e509de08b054d19e0c036de712118206c832e0b28fade2351bb8daa1a37748e1747e38edbe344ec8766c
SSDEEP 384:oiFiZcIuzsN08TUNTUlIlKIcA1chkzIGm5B838RcXh6iMxuvzxV+Mhdpwdo8:zFQudwggAceGLR0h6iM4184pwdD
TLSH
T1D7C239F298E7987AE9AE5747A73D2D138DBCC163B5845A50B3D85A0DCC8A17FC30AC05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 47482fca78cab5cbcecbb5da2088007825ff31c22dbc834db9c57f7f2c5f8dce
MD5 2f5d8c6dcb89025df0af8ba1a3b1b342
SHA1 c3d2b86f5906ec63bb0e65b85428ce4b68dbdac1
SHA512 fbd0f5c147ecf6ef616f0aa10ed9b4f2829c2ed007f1f41c74fa3c82286be372f085d848175d0e7bc80c21c165c6fba97dfd88519a73f8fb6962c52616b7fa87
SSDEEP 192:aON86IE7QmiUye0TPuIGm5Njzor3EmNC7sgdU6:aON86Dt2PuIGm5B83gswU6
TLSH
T1AA02FB35EC78BC6B9FF3AD49F4872A23AEA5112BD5952F84DAE81B1D00D725C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 92685fdae2a9751f8af393e14787cc954eaa516fd3aa0ad1a6e354c488c5155e
MD5 74018443d97f0f296498dacc0dfa1fc8
SHA1 35b2f65552eb2616ae12901bef360b2b65fce1c8
SHA512 521a7d15d4207eac0eabc0cde0d2d5fb167cb7e93b0c996160e4b60e341cccd3d076f4c404e5da8297993751efefa1633340380a6c3bba7a38f6768c023a6226
SSDEEP 192:aONV6IESQmiUyR0TFiuIGm5Njzor3EmORcXV27Hg/JU6:aONV6DOXkuIGm5B838RcXSHMU6
TLSH
T147122B36EC78FC6B5EE36548F4463923ADB58227E6896F80D5EC2B1C00DF258130A917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9a8221cb307926ea367cdda240f5d5d65236d090665651f243d1de8394933321
MD5 1e3d62f6719ba3f348b4d448ff10bfbd
SHA1 4f20a1dd107641e0f90f35ea194650448ee252f3
SHA512 247a932437d712c18a5772df9af6809a77599303d7fb838f4106ca080a5773ba053b8b04381ac88aeddbf77d166b54135ec885944f1502096b6b36ae47245fc2
SSDEEP 384:1ZcIhsN8KIcA1cVkzIGm5B838RcX/iMxuvzxV+Mhdpwdo8:Nh+AEeGLR0/iM4184pwdD
TLSH
T126828D71AC78BCAB5DE7A145F8463A139EB8C267A6CC5F90D5EC6B1D00DE354130BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a9809913ae90ba4b688201d0a812654727d11f8d92944420d5d7f017e1aaa01e
MD5 00b980ecf2d4bb52d84b10eea5e1a5ca
SHA1 5ff215b1e29b0b994c4d2f782fd175350079602a
SHA512 bdf8469f8d115d9c7fd5fb75f924f9bc3da939aeaa451a6a1feab5d2d6caf55f54429710ccba9406c60222f7e6d95323a9f3773915e2f89dd119caf62a2753f0
TLSH
T1F84129A8B6E61149B3B76E56AFF7A86D487EBC372E0BD45D10020E4F0622740C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download