fe2a37704f647ea597a2b1f06a79fc1171d4092c24a1c07e1da13fc9a2edbbd3

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/07/2026, 04:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.rsrc/1028/HTML/COMPLETENOJAVAS.html
Size 2KB
Sample260704-exdnfafs2n
SHA256 fe2a37704f647ea597a2b1f06a79fc1171d4092c24a1c07e1da13fc9a2edbbd3
MD5 f05e591157a6a62aadbacd49740b196f
SHA1 c8784c8cc9c4882801cb09fd25f87fc5bc97861d
SHA512 e5d67dec8975b86e25d9d21d10370a9cdc1b9893306851ec81bf1b03fc7f0f21800fe88de547577a649dcfa255de37bc013ecead6553636cb04ac6158ab72e91
TLSH
T1EA413109ACEAEA11C0A094F1F1F2FD9FA4C1C216C3865D54B9DD84BB9F89ADDC817614
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2052	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276123479357228"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{CD32258C-7091-4392-9471-57758B1CFC5F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2576	msedge.exe
2576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 5096	4300	msedge.exe	85
PID 4300 wrote to memory of 2052	4300	msedge.exe	86
PID 4300 wrote to memory of 3896	4300	msedge.exe	87
PID 4300 wrote to memory of 3896	4300	msedge.exe	87
PID 4300 wrote to memory of 3896	4300	msedge.exe	87
PID 4300 wrote to memory of 4868	4300	msedge.exe	89
PID 4300 wrote to memory of 4868	4300	msedge.exe	89
PID 4300 wrote to memory of 3732	4300	msedge.exe	90
PID 4300 wrote to memory of 1156	4300	msedge.exe	91
PID 4300 wrote to memory of 3732	4300	msedge.exe	90
PID 4300 wrote to memory of 3732	4300	msedge.exe	90
PID 4300 wrote to memory of 1156	4300	msedge.exe	91
PID 4300 wrote to memory of 1156	4300	msedge.exe	91
PID 4300 wrote to memory of 716	4300	msedge.exe	92
PID 4300 wrote to memory of 3728	4300	msedge.exe	93
PID 4300 wrote to memory of 716	4300	msedge.exe	92
PID 4300 wrote to memory of 716	4300	msedge.exe	92
PID 4300 wrote to memory of 3728	4300	msedge.exe	93
PID 4300 wrote to memory of 3728	4300	msedge.exe	93
PID 4300 wrote to memory of 2420	4300	msedge.exe	99
PID 4300 wrote to memory of 572	4300	msedge.exe	100
PID 4300 wrote to memory of 2420	4300	msedge.exe	99
PID 4300 wrote to memory of 572	4300	msedge.exe	100
PID 4300 wrote to memory of 468	4300	msedge.exe	102
PID 4300 wrote to memory of 4692	4300	msedge.exe	109
PID 4300 wrote to memory of 3052	4300	msedge.exe	110
PID 4300 wrote to memory of 5024	4300	msedge.exe	111
PID 4300 wrote to memory of 2036	4300	msedge.exe	113
PID 4300 wrote to memory of 2036	4300	msedge.exe	113
PID 4300 wrote to memory of 2576	4300	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.rsrc\1028\HTML\COMPLETENOJAVAS.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffdc894c188,0x7ffdc894c194,0x7ffdc894c1a0
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,11297091093853119084,14318548794730780500,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,13061265071345731422,16620867974934488706,262144 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,14652049011284360947,13173494143506757347,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,11642916438178369511,16793279031370352495,2097152 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,10109385723437151787,5562038404473179965,2097152 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,4085644877066245790,9060857934431150592,2097152 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,7965156275808939216,1442521628966842717,2097152 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11352369267959659054,13705003248152293656,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,16317434070650619744,5860778413975641667,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10594708323962710335,9120906444591191102,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10594708323962710335,9120906444591191102,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,5714933443792049300,323838155171718816,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,10142103491690675947,5675093486037674124,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,13201598770795142439,15982916372970931458,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,17534313962219013266,14415560387872318318,524288 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5968,i,13101340883372254797,13090364922555657748,262144 --field-trial-handle=2280,i,5664674511968881834,731895515943056730,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 85228921c17cbf87a21f19a7ac4d90be9b58595411211539679ed4253d57922f
MD5 a7213549012cda2c148b9a89229eb672
SHA1 5dfcfc88a1db298fd53e6a12fa7c36e251083cb1
SHA512 4b2b54d3f0db47a3ac1a50c0dfae47997da34a6b55b17079eae8c25569ce9337ad548682588f826d4b5a5edb198c616076d429a41a524d8f86bb74fade67a302
TLSH
T15351816D03456883E331B631D4E91311B432ABFE08174E5983E0AE3FE62F7E5894789C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c35b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c35b.TMP
Size 2KB
SHA256 9a9d17691881983912a31880a9e9c8adad42b6e938bbd5896c94e59ee228939a
MD5 2e9279ef26a7d8c4c430575f6af1afdb
SHA1 f644ec1d7c968423dac2e650eea89e21b479e88f
SHA512 4a16a4d361da6c0523bcba8ce6b1f9dbf1d0a78e8430f655c320fac4a94a1aef3ee20ccdc41285db539286caab8570f434afc137746b7d1fd60c1b1534c2dbb6
TLSH
T14351706D03456882E331B630C4E92301B432ABFE08174E5983E09E3FE62F7E5894789C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 644B
SHA256 8ffc7d1f1d44fc5913b2ea857dd1239e51cc8139f01b2515aab621493495660b
MD5 0901e99dfcbc371fe0dff5f7011791be
SHA1 d27ece212b04c674db5545fee5f4f762edf81610
SHA512 7115589048d1d4d709d28a40d86908bb04c31e0e8c51d324a7b59eebd1550ed44f8dd75f533de7d497517f5852b987fd57620e3d55e74ae32fb81afb2b726f62
TLSH
T130F073F783E4597DDB1182F0A9187F1BCE6D0542435C7D5696E0AE1793E3464E001D5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ff6113c7ffc50769633d7e7071b9c10df6f9870b4df973343b845fe4b429f4c8
MD5 bb049cf899fa4e7133e48c7db057443b
SHA1 086e5396b58bde27c7f0f116936cd6f3a56bf1c5
SHA512 9ef3be0adc26e87cf2478e8ed861b68c56915caa8baa4d5729ed6cd2b236dc0bf58da82f0a1ec07aa874f477ca94fb7e4f0f8372275161b3764d08d2e99e0be8
SSDEEP 192:sxZB/yM/jK1Ml8UQaCkV/fzsb1NHQ4IdpHeyHW6+WNGYw60UBLIg5+J:sxZB5qcV/fzsb8JxHbGSM
TLSH
T1B652F9026A34997BCCDBD209F6457B53E6F54572A2500E48A9FCCB1C05E7AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7b4bb017f2bb506fbb447840d6935193b4907d4ee2464c41657b211b7acba957
MD5 1a3b194b6a75b0ee0d0d3f79f5c4d23d
SHA1 086cec0d4b47adb7311bc72b0547644cf146a22b
SHA512 9b809b1e96cedfe1d0c495d5b9582325f294b3b8174df326cd742a1f59026ffa5059c01f70ea27d535f7ff0787a9e92694604189ae6c351d1e98d39eda05661a
SSDEEP 192:sxZB/yM/jK1Ml8MkV/fzsY1NGQ4IdpdeyHW6+WNGYwK0ffLIgrJ:sxZB5MV/fzsYDJLHbGf9
TLSH
T11042E8026B34997BCCDBD209FA557B53D6F94532A2500E48A9FCCA1C05E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4d749c2543f5815c7ac80d9835573392cbaeb5247f05f4babff0b6d2dfa12088
MD5 d7d897b7d32a38df613924891e869b94
SHA1 f085527bfa4170e9354f2cbc191f38bfb47cf3d2
SHA512 c4f481b1f0134d2f7418b96d6d6db5f68036b0e76f0c87f6e304868793ec99418fbeb6b7edd14c8bc6c53d2f8588be88f0f1de16ae04fd182eb7fe2f8185e777
SSDEEP 768:1i4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dGroh2cWa2:1i4jeXmWvmKLEu1jacPLZQd9jc
TLSH
T19BD20A3B284CCF7E4F844E5CEC26AE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 00028423f89922399b3f48fdb3750eeb428d862f6c0d54dab9a8efc5089d7b69
MD5 c422138b27cf8b96c51afec0aaa91a22
SHA1 66f48a57b645974e535f14226beb1de9e0e26283
SHA512 b5995d3ad243816db070780dc6683bb8749d781530ea0f0e7243bbbcedbdadc3151a390a507f509b8e7beedde05d35a1781cdd9f28143ff3553aa31f24daf347
SSDEEP 96:KEG0KXqSqQ4KhqDpm3zBj3TWH0ig7TK4Kg1Tc5xMv3wHEFw0OyT:Cfnepm3zBj3CH0j7JKg1A5xMv3wHEFw8
TLSH
T1A491E186307686013D3E6B0C9575CA1A9A82B1733424E53B7BBD82A51F27E12CEFD5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ff97937-dad1-4178-8fe3-2610a2246c48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1ff97937-dad1-4178-8fe3-2610a2246c48.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ff77c0cedb4b5ed0518e0cb6f6ea75391a21c68be25ec7fa1d6d2b6513f919de
MD5 79655b508eeec9fb10982301ff7a4abf
SHA1 91048eb3c871af79bc26b9de9ce155f6dc4d36eb
SHA512 ae3d75737a7a3537fbcac05cd7eb28af0da8f9b723c0034c285b0ca5685a9b506da390d9fabce9c5f77e8834bf03981abf500f79e2052d5a8944411bc9108f8d
SSDEEP 192:u/LsNgNEQGs0ZEffQmiU1DSW4H/+jVfO1SYoQIeN5cFTIq3U8:msNg+KJQ5f+9OMYDEFJU8
TLSH
T1AA3209327878AC374DE2A655F44B36139FF4512BE6C43FC896EC6B1C04DB6AC131A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b67cf9d1fc06bf17a626794895f9bddf8c4c6339191620034d1612b37a084818
MD5 c2c5d33ccca61031902e832717666360
SHA1 ec6e686373133ef7dcfdef1b953ee8e76a8b9e6b
SHA512 bf47e6f5704577a1a3f1c12a3742d72d682646c82529e011739705db600c01b5301730f624352015969d4c33acddbcfa32b114ba7a86dc954977eb9333cbbf5c
SSDEEP 384:utNn/s3n9SfsNgTKJQ5f+9OMYDEFJOObjI9G6w7+z:uj+9UFBoO7iJ29MO
TLSH
T162929E326C289D374DD29A65F44B3A279FF4812BE6C42F88E5DC6F1D05CB6AC0316915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0a47cb85ae14076d1873ad2d2c06998815cc1af223aac6a6c0c464a952ac1948
MD5 0dd3233e13b53e230ecf34dabee66617
SHA1 85f8e6427943ef2bfb29d50f1e80a790a7aa6dcb
SHA512 bf5dab8611845ffc0507f1d273c27612e153e36cb8cefb1ceacfdece77801f98643e492cb0c43340dd8591865b01ffbb325af87ed2b5905f37bb943972e9c113
SSDEEP 192:EOND6hZ0QmiUyKcpc/+jVfO1SYo25wOZsJL0U6:EOND6oKpu+9OMY42u0U6
TLSH
T17302D83568686C778EE2AE45F48B37235FE4112BE9956F84D6E81B1D00C779C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 104a7de19b95877af30cfc33a0005b24bf9b97c41fded1b995738667629894f0
MD5 e0f02640bb2bec04390ba2efdc5c1998
SHA1 71be36cede11d056013f74cf14b4c4d70979004f
SHA512 6887eb811313b1a13228bfc004daafe544b1409be927a3e1d6560ce464e752ce78365388895e481e6ce8ff9437c8f072e122e64b66f9f390a781f04f7fce156c
SSDEEP 384:YiF1tNn/s3n9SAzsNg8TUNTUlIlTKJQ5f+9OMYDgFJOObjI9G6w7+z:jF1j+9LtwgLBoO7OJ29MO
TLSH
T163A27B33A858CD3B8EA29E95F94B36279FF4416BD6C16A88E6DC6F1D01CB1EC0306D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 18cbf1f45929cb67bacb8c46e7a69f053940628d268c0c61c93c22ebdfcb2e3f
MD5 701d479c11157718aa134612bfdb7845
SHA1 76f68931ad01ae2a75b727a00ed8c061d3c97801
SHA512 075a43e6ec4b271477aa4d5e004edc1ce75b4a21125ef514cd38501e67791b94cfebcfd199b468b066c405aa4d005c36766e880fd219bfd9555687dcea253ff0
SSDEEP 192:kON56hZKQmiUyWcsGc/+jVfO1SYoQIey5cOqIq3U6:kON566s7u+9OMYDx9JU6
TLSH
T11D12FA327868AC374DE2A955F48736139EE5522BEA857FC4E5DC2B1D00DF6AC230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

57f51643-2251-48b9-a87f-4c1e50f70799.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\57f51643-2251-48b9-a87f-4c1e50f70799.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 02e500000a326c4283395e10172030b99c00f5df17c345929e31eae2c22b1f97
MD5 cea980c0d322dc160d40d681ce13ea94
SHA1 51ff922b38f21b711b3f670c8136c0c3f5a02ba1
SHA512 45e329512ccab6b8148f58ec21bb8bba497e7751a17a8ff72462a252a25ed7c2b4f393aef74cff7debcb25f80fba6402d046d7047d0ab050ac58d8dbbfff9380
TLSH
T1F4410858B6FA1148B3B76F5AAFF6986D487E78772E06D45E10110E0F4666B00C871B33
MD5 SHA1 SHA512 TLSH

Submit Download