hxxp://smartidonline[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 17:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://smartidonline.com
Sample260930-wgjcesssdx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2044	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{7610B90E-0E91-4CC1-B602-52DFCE269657}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1364 wrote to memory of 4072	1364	msedge.exe	86
PID 1364 wrote to memory of 2044	1364	msedge.exe	88
PID 1364 wrote to memory of 4508	1364	msedge.exe	89
PID 1364 wrote to memory of 4508	1364	msedge.exe	89
PID 1364 wrote to memory of 4508	1364	msedge.exe	89
PID 1364 wrote to memory of 4492	1364	msedge.exe	90
PID 1364 wrote to memory of 4492	1364	msedge.exe	90
PID 1364 wrote to memory of 4784	1364	msedge.exe	91
PID 1364 wrote to memory of 4084	1364	msedge.exe	92
PID 1364 wrote to memory of 4784	1364	msedge.exe	91
PID 1364 wrote to memory of 4784	1364	msedge.exe	91
PID 1364 wrote to memory of 4084	1364	msedge.exe	92
PID 1364 wrote to memory of 4084	1364	msedge.exe	92
PID 1364 wrote to memory of 4336	1364	msedge.exe	93
PID 1364 wrote to memory of 4336	1364	msedge.exe	93
PID 1364 wrote to memory of 4336	1364	msedge.exe	93
PID 1364 wrote to memory of 4436	1364	msedge.exe	94
PID 1364 wrote to memory of 4436	1364	msedge.exe	94
PID 1364 wrote to memory of 4436	1364	msedge.exe	94
PID 1364 wrote to memory of 3152	1364	msedge.exe	98
PID 1364 wrote to memory of 3152	1364	msedge.exe	98
PID 1364 wrote to memory of 3152	1364	msedge.exe	98
PID 1364 wrote to memory of 2632	1364	msedge.exe	100
PID 1364 wrote to memory of 2632	1364	msedge.exe	100
PID 1364 wrote to memory of 1928	1364	msedge.exe	101
PID 1364 wrote to memory of 1928	1364	msedge.exe	101
PID 1364 wrote to memory of 3968	1364	msedge.exe	104
PID 1364 wrote to memory of 1384	1364	msedge.exe	115
PID 1364 wrote to memory of 800	1364	msedge.exe	116
PID 1364 wrote to memory of 884	1364	msedge.exe	117
PID 1364 wrote to memory of 3772	1364	msedge.exe	125
PID 1364 wrote to memory of 3772	1364	msedge.exe	125
PID 1364 wrote to memory of 1692	1364	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://smartidonline.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff1e38c188,0x7fff1e38c194,0x7fff1e38c1a0
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,6637354147570693065,9415716540886745861,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,10736881204098998540,16686822473397184871,262144 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,2903129051598162233,10327524498711804749,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,16922741649621348615,5713614978593652238,2097152 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,5774248490683546281,760850530341789686,2097152 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,14664036209489689157,14251785129020101221,2097152 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,3325835387621088660,16240565551040757911,2097152 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:2
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3648,i,17383440947708648434,6562115375988091427,2097152 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,2152505066788776226,10969645112610416744,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,10432018316122607661,7051433854802294696,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:8
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,10549961732561094840,14716320273505865880,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,10549961732561094840,14716320273505865880,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,11307860763427144766,14319049294463385979,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4140,i,4891697929287445730,4362538370476207032,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,3895990402974440646,1690491651943049484,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,18164128800951200855,13004987050703807353,524288 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5780,i,12316758660938185796,7677347461687691391,262144 --field-trial-handle=2868,i,8457151725057490264,8564407524832619210,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1692

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 17KB
SHA256 4171deff2af4f58ee56d2dd0a42dc9592a55406f70dcfa3bcdc0c16d0fbcf4c4
MD5 1feca62172d2000fd98de2da09e49a7a
SHA1 365b97a007e41bf04b8fc0604ba3175de9b4c4b5
SHA512 efac36fa73260d5f39449ab98c56f21b858d0edc60c9212218ada4f30a9447224bc6042d89d04c986f05f21f25d3402fe1f019e8b0fa7190d2807613e3f1322f
SSDEEP 384:2GwV7dj/df2TkodKgXkPqurHq1qW9xMDx+vvdWYUi+CQ:2/1dLdfGRur1WTQGlWYUii
TLSH
T10782D0054B924386B2F7DD5F8A925DCB04C38EC1CBDBA94F93EFA2345870E9536E8914
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cd009caa9e313793ee79ba98b9642e1b39f4776b9af21f290957517389df4751
MD5 181d4f34e996d74db997a45590d93c8c
SHA1 654a79cc7da60b9d84c97e1c723787ef92a3b4bd
SHA512 3eb7c803258b64dda7b4ec89d706224b4abb3dbe516b7501aff803cf2283628dcc07ca7af3468c70303ca2d847f2c9759689b2dbacb30a9821163ba4603de630
TLSH
T19A61D7CC554180AFFF948079ACDEB0CB37365D827A4F0DF381A8D4B6A886BD4C389891
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5d2ecae24be7e99eb15d4450036ce694cb4882ea36caca07dc386b2e2cdfc847
MD5 d51396e7aa6e6fdeff887c570118a440
SHA1 a9c0d4fcb2a1f1f026635dfe5add04565e367a0b
SHA512 175b555253cbdbaadae3dd4e3473c7f76957b0e29c0bdfaa4553734f79597a8b37e0a04f3b9dd6e9f429dbc9a651d7642cc7cf737c22769cc9a53368f134d219
TLSH
T18761E8CC554180AFFF9480B99CDDB0CB37365D827A4F0CF380A8D4B6A856BD4C389890
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5901ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5901ac.TMP
Size 3KB
SHA256 6c63cf95ade2f2c07b23e4b9f2160d6d20c0d70c034c1db93a9adb6ca5af511d
MD5 5e8d8a5934072fb19ced3ad124cb4c2e
SHA1 78886a695e778895b36ea85b65426a447504da55
SHA512 c297319b7cd94ee559ea7c58bcfbef768428ca7018baf476bba9e5454b610c731ceab50159949024588ab08862e02773e21103c7f80cc8657f34c8793b246121
TLSH
T1B061B5CD454180AFFF9480789DDD70CB3B365D867A4B0DF38098D4B6A886BD4C289890
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 68280258fa4032066b01e7a75c09aba0531da3d0bc1d157c6119609402bd7ed9
MD5 da30cb40a322688677ff39fb5ca534c5
SHA1 1d00911040086a82ff6ae7775080b0cbd68c0515
SHA512 df89415e33fdd16b1bfe971cee783aabce825b6e0707c3ded5b6ca30736de33943a7a21db37047a3a72ee832759e9c86b2a044d843db625ce7267bca4c6c1d46
SSDEEP 96:DSOYv9RhQpuYbGzdLEVK2wkoHZLgnV7cen:DRYvjhQIYCBLEVK2JoHZLs42
TLSH
T158819EB382DD896ECD0255F196147E1ACE9C1629532C3D5EC8E9EF5F93E2031D24258F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 ae3ebb3c12239038e5840c1787b74017f6eebf877a65b79f8f57c1a1fb99f1b0
MD5 ab85d9bd73d978d1593f70122262d11c
SHA1 0d51850674cb7f803665fd3eccfe487d4cd205e2
SHA512 69a6c5dc2d96408fee6bad62c759a4558eaccd4738fecd5f75cf81c7413e2b2cb591a5b27fe66550cafaf691278c1c43668864d4669cc8203f92b33f26386695
SSDEEP 192:sxZdRuWt/fSsF1IdpDDHW6+WNYZW/Yg33OIgrJ:sxZdzt/fSsFGnHbD/c9
TLSH
T1E522B8526E28A97B8CC7D21DBB55BF13E6FA507291D11E48EAFC861C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4cb1fd42b9de6f131f7f9827699e102d3f961630d7f4afcdf8a657c63a7098ea
MD5 895fd36eb69c4f55116c69d84925d5d0
SHA1 74545ae4810b1d998edbda74318958b12ac43cdd
SHA512 6668a80ea84036c803851ff86cd3060cc328ff8ad11082b1ac27104c8e5623b0a3ec2cc366fd18c536a24a54c2642dd201e7687381be5d6dd106cda22ed5b5e6
SSDEEP 192:sxZdRuWt/fSs7EIdpRyHW6+WNY5+XYgU3OIg5S+J:sxZdzt/fSs7dQHbnXzcK
TLSH
T1FC22B7526E28A97B9CC7D20DBB55BF13E6F9507295911E48AAFC861C04FBACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9c2064a36de6a029646dd35269a3141ff45149c1e3812269951a9cc3b8384f16
MD5 4545d9f74f658f792cdb84f862f19d4d
SHA1 87149771b207d0d565450feaff059394b1cded26
SHA512 6f37213ec3594c1476035e8491e397272a0034b44e325736e618bd74b0c7881cc8ab77bc23400b84f988a53fe19be4d4712d7a623c32f7a57627137258dcd703
SSDEEP 192:sxZdRuWt/fSs7EIdpDyHW6+WNY5+XYgF3OIg5S+J:sxZdzt/fSs7dOHbnXWcK
TLSH
T16022B7526E28A97B9CC7D20DBB55BF13E6F9507295911E48AAFC861C04F7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d02d4e549b2ff8516c71c02ebcb3e89e9b6b191bcd5c9e9b2a15dea0be3dff45
MD5 5e48a9ffa79dabcedec67a0905cb995b
SHA1 90b3f284a9d1677da8fb4bd69984a2eef7671358
SHA512 ae98020ed37ba4649f1cffafe235dcafd5791a479a2d5c59dac469f47cbd3297c74d8b3ddfe1fe5b4c666505b7025e1ec71f208857bfd0b4e176097162bcd0d0
SSDEEP 192:sxZdRuWt/fSs71IdpDDHW6+WNYZW/Ygh3OIg5S+J:sxZdzt/fSs7GnHbD/GcK
TLSH
T10322C852AE28697B8CC7D20DBB55BF13E6FA507255D11E48AAFC861C05F7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9f9a4360caccc27027d48cd27e85b3915c2d550d374459608cc033083b127162
MD5 1b5adee43e617e0c8f5a401c1495bf7c
SHA1 9006e71c4aec1b2e969d780d4813bf98b76658a4
SHA512 67f87ee21b6916540de409097123899f49d91ee135ccc7c12746e3cea426edb322eed245ac304dfc00e9739ecc080b54038af988ae09c4a6e14cde3ffd8cebb9
SSDEEP 192:sxZdRuWt/fSsj1IdpDDHW6+WNYZW/Yg33OIg5SMJ:sxZdzt/fSsjGnHbD/ccw
TLSH
T1DD22B8526E28A97B8CC7D21DBB55BF13D6FA507295D11E48EAFC861C04E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc1aa129-0d80-40b2-9f14-360e55a98d01.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc1aa129-0d80-40b2-9f14-360e55a98d01.tmp
Size 27KB
SHA256 c2ff59c15514a422cb58e45b407a1a2d8416dd0ae16b9eb0719a285e0114b765
MD5 da2c0d48bb6388245fc58f002dd7fb08
SHA1 67c1936c0ebc22d9ff0362093b0a710196749885
SHA512 8a1b2fce98052729b2f2d2b6f8d8bf8083c6bbe0bee4ec2181e79ce54d868c5855db1104eb83554686129109ec4b2d6994824b6b253ed93fee47aa99b405268f
SSDEEP 768:ebichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzHroIPJH:ebichfPWvPZplu1jan+LKgzUaF
TLSH
T17FC2FA3B644CCB7E4FC01A9DDD5A6F9B7EA802C79A588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6316e81-ad6b-4c59-8ae2-b430814cdf4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e6316e81-ad6b-4c59-8ae2-b430814cdf4b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 dda775453476b9b1913a9da3c366839fe66da3308a5da60a24ac3e449cfc5110
MD5 94cc229d096860cdf72ed993d70c24d2
SHA1 2ecd4c106a5f45a0371152e3515b60432342d5ab
SHA512 b9e9fa96788228dbe6e78587f5e3c3720d63b148bc88d37f23353144510cf391b1a89031c43fd25b3923c5cd022f009ddb5268925332b938eff9f6a88594732a
SSDEEP 384:2ZcIhsN88wW154FKBGYX5ECm9TDrEtgOIwZOygLVo0:kha12kGYuCwHrEXsLBX
TLSH
T144827D369CB86C7B6CE7A495F48736034FB88427D7C4AF9494ED5B1D00EA698130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 9a7d159aeb473dc98635ab5cf50a43a91a21ca7cf3f74881a93262823c59f8a2
MD5 9fcf0b3876b0ddf828740dc08f5b25c6
SHA1 f385588fa0d38c944278e2a80b083c9df469541f
SHA512 f9ff6211f9f6ec75706ddfdfa84768409dc0f34eade3612d501e7af3dcf6a0eb1aa2d2a417b455bf0f8a5bb70e18908707e6de984fb3a59e3d7a075b6df29bcc
SSDEEP 384:1iFiZcITzsN08TUNTUlIlJwW1547KBGYX5ECm9TDPEtgOIwZOygLVo0:8FQ3Zwg/1ckGYuCwHPEXsLBX
TLSH
T17AC22BF248E7987ADCAE5743A77E2D034EBCC027B684AA54B3D9451CCC961BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d5a5824eb0517c89a9395761754f59262307eccea1d345a35319bf339bd609b0
MD5 52bd9b9d3abc5e4a158a2ff990093bab
SHA1 c557d5b1afdbf769ac997ca2fcef676016a93b3c
SHA512 d464eedcc7a493ce25a39345ec3381ff7affa2853d7778775dec70996be4131b49e4fcee4ab13e474a8ba1b50a806b589fd526ff44e773f04684d3f6a6dde5e8
SSDEEP 192:LJONk6DphmqQmiUyetq8wGYX59ezbCMmIXkk7IUU6:lONk619fRwGYX5ECm/RU6
TLSH
T13102E939A8787C7B9EE36E45F5872B135FD8112BAA906F84D6D81A1D00D769C2307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 17d4decf1b1bfd334a3bef7f107896a3d13c3b104c92dd7518d687d9c1958739
MD5 e5fc8b27f8834fc6a834ddbbe6092bb3
SHA1 5c734b3bb7ab9f71a2f10a8b0f267c14637d9ab6
SHA512 95027055168f2c448cf5f4066e78fe7b09461a6a1b0a88704fc524627d5b523222e0bf082d4fa3f90413a90edd3dab1c4a79723ccf6bc25ca10b1defe1da5db6
SSDEEP 384:MZcIhsN8JwW154FKBGYX5ECm9TDrEtgOIwZOygLVo0:ahx12kGYuCwHrEXsLBX
TLSH
T172827D369CB86C7B6CEBA495F48736034FB8802BD7C4AF9494ED5B1D00EA698130BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a3c7e5dc7b91f73ace2d76fe67ce17823acaaa47a2a797fdb7a680ab3f73578b
MD5 b4e8b80d5b2ad2ddbc106c9488d8cd50
SHA1 321ed717e8e3c00a30b9f94163200d6744290b39
SHA512 24bddc0422db3bafb62d99c4c6255aef164c33b970027c81f0f800ef6c4db9c10dc87b692444db88bdc94494dfc872877280812c6883aa537f8b3c58727e67b8
SSDEEP 192:LJON96Dph0qQmiUygtWwGYX59ezbCMmI9TDrdkIIJq5jPU6:lON961jHWwGYX5ECm9TDaEU6
TLSH
T16E12F835A8B8BC6B5DD36495F48736138FE8522BEB847F84D5DC1A1C01DF69C230B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3ca60880a71649cbb682df718612c31017f115294af0f0ce60d2f6ea734e0762
MD5 f1aba31957e48fcbc194b391ce76e201
SHA1 735f44e2e264c1fd991d2adb44d72cd94c488eae
SHA512 5731a8800bb47a4dd4b4abd3d34dea607b908baaacacfe1c07647fff21fb1b91e12a33e65210b45d1566c71ed86396989786f05e526a9f77ecf3cc374bc75fec
TLSH
T18B411758B6EA1108B3B73E569BF7A86D487A7C372F4AD4AE10110E4F0A67B40C961737
MD5 SHA1 SHA512 TLSH

Submit Download