a955967e3bb939a71c092384a94e41105cc2cbabb50155aa3f1446e40c76d16d

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LogIn.html
Size 14KB
Sample260708-ws2cdaft5t
SHA256 a955967e3bb939a71c092384a94e41105cc2cbabb50155aa3f1446e40c76d16d
MD5 6ac400817c2cacdae4725129cc193909
SHA1 3138e19e6261c4cc924b0cfcc03ff78dff01a56b
SHA512 066b5bb2e754e66be138db51be02ce3c3ae3b674850559ff26a089338e74c42499c82761969acf10ec5d4f026773beff69f192d9a1d1cc3ddf5f36b44360168e
SSDEEP 384:J9iIuOtDCM4/Ioa41w/HCxknQM0EggmHy:J9HuOtDCM4goTxBgIy
TLSH
T1FA52D56625B704126357E5B43BEB870972348003A906CE797DBC5348CF8EF998AB739D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2392	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280079212263693"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{D21146D4-90C9-4363-A526-D7EDA146FFD3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2380	msedge.exe
2380	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe
3288	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3288 wrote to memory of 3228	3288	msedge.exe	85
PID 3288 wrote to memory of 2392	3288	msedge.exe	86
PID 3288 wrote to memory of 2080	3288	msedge.exe	87
PID 3288 wrote to memory of 2080	3288	msedge.exe	87
PID 3288 wrote to memory of 2080	3288	msedge.exe	87
PID 3288 wrote to memory of 2416	3288	msedge.exe	88
PID 3288 wrote to memory of 2416	3288	msedge.exe	88
PID 3288 wrote to memory of 3856	3288	msedge.exe	89
PID 3288 wrote to memory of 3856	3288	msedge.exe	89
PID 3288 wrote to memory of 3856	3288	msedge.exe	89
PID 3288 wrote to memory of 3248	3288	msedge.exe	90
PID 3288 wrote to memory of 3248	3288	msedge.exe	90
PID 3288 wrote to memory of 3248	3288	msedge.exe	90
PID 3288 wrote to memory of 460	3288	msedge.exe	92
PID 3288 wrote to memory of 3904	3288	msedge.exe	93
PID 3288 wrote to memory of 460	3288	msedge.exe	92
PID 3288 wrote to memory of 460	3288	msedge.exe	92
PID 3288 wrote to memory of 3904	3288	msedge.exe	93
PID 3288 wrote to memory of 3904	3288	msedge.exe	93
PID 3288 wrote to memory of 1580	3288	msedge.exe	97
PID 3288 wrote to memory of 2912	3288	msedge.exe	98
PID 3288 wrote to memory of 1580	3288	msedge.exe	97
PID 3288 wrote to memory of 2912	3288	msedge.exe	98
PID 3288 wrote to memory of 1288	3288	msedge.exe	100
PID 3288 wrote to memory of 4612	3288	msedge.exe	114
PID 3288 wrote to memory of 1028	3288	msedge.exe	115
PID 3288 wrote to memory of 4644	3288	msedge.exe	116
PID 3288 wrote to memory of 3796	3288	msedge.exe	118
PID 3288 wrote to memory of 3796	3288	msedge.exe	118
PID 3288 wrote to memory of 2380	3288	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LogIn.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff805b2c188,0x7ff805b2c194,0x7ff805b2c1a0
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,8388504152114762020,16709768923635001995,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,10273541298349452966,656103518040236458,262144 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,5526850940657948777,6880028445187175563,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,6669957101248672601,462985732540219647,2097152 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,15171167921590863298,11282682765441574666,2097152 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,3485065209982514299,10211607616468513440,2097152 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,1998577094092118536,13644798847472831876,2097152 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,246692973563298736,4517188770804587464,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,18262832283947267101,4377125109401839137,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,6508774744523128695,8317850874826370348,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,6508774744523128695,8317850874826370348,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,3920996058282023610,12454238722143560189,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,18404318995975897308,9972028276468300069,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,1035399036413899384,1823216047257078776,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,4341509604164331458,4971721446339512742,524288 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,11607132138071091977,6869668764983415981,262144 --field-trial-handle=2252,i,3569396563143382947,14902171985965236653,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2380

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e64f400ceb1414eae588538e7f7dda91760e23a614f85285003b893f7fa2499c
MD5 01896ce8d565b2534f002791141b0114
SHA1 75e4f04348f212866f511217cd2a64b52cf4b7eb
SHA512 4a91a9f30c63d49af305d8704eafabe6ffe23e791d9acecb177ad9a4eedbf0b7cf6a6d8b94f1449d315acd7cc6e433f7daa43095dbf47965c8cdfff604a11344
TLSH
T18871E436109301B4EF40CA3398EA824D323781FBF90B9E531490087F290636CE75688F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5890e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5890e1.TMP
Size 3KB
SHA256 f3b4b3fcce162f8a8cad27f49edb11950e0ccb256ba7ebf23ee7d8351cd8d583
MD5 d4e997b4f0cf198f5ba075afb217629d
SHA1 80c3b440372ca2dd0677e01d7446fd406bd4822e
SHA512 f68a86d57d15b86ff6a7956daad6d0436955476448fc956ab17fa659e7fddcc226efad8efac3368bf4d4355e438855a1aec902d7d98720cc8f08b4a421bef04e
TLSH
T11671F536259301F4EF40CA3398E9824D323781FBF90B9E5314A0087F290636CE75689F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e5520a9988ff68ca625792132d823195ccfa751a2f3d9efbfd745bf30ab4a554
MD5 737a452e5b910a1dec050dc4ac95c432
SHA1 5f60ffc5f1b1d50cd47c56c9d0eef6fc6cd11323
SHA512 2b1fc547762daa926b16d03cd40e74101cafd53f496fc05dfe2649e7a7145c457bbea390ccc96f9c82a11f0d4b0cf1428d17f53ef4905741a739fae15d621869
TLSH
T1682191F787E5466ED91155F09A247E2BCD1D0516422C3C568EF4EF1BA3E24B4D002A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0bcfc1cd33d612524bea8e39b859ce4fead776d34fa672a6a78d54e35aa9edb9
MD5 88eafccb6c206067dc4fc746fbecab92
SHA1 cd955035444e48a26df10896d2218ef0256353aa
SHA512 aa6496a3977df385ae90fbf36671381f7850bf0b1b72496d2e09300e1e5347b33d9a9e13766d9ba68ea137f27bf01006271c016a2223517af1334fb238e14e42
SSDEEP 192:sxZx/yM/jK1Ml8Mk7/fMsl+FmVVIdpdLHW6+WNGYvrvf2fIgrJ:sxZx5M7/fMslYjxHbGmg9
TLSH
T1FA42FA126A345977CCDBD20DFA55BF93D6F9147292901E48AAFCCA0C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 05af0b75d6d54eb94c8213204f568949e6a7a62555bf8268defb5856639fcaf7
MD5 13cfe026d09e9d4c6580ec294d18cd86
SHA1 0fbc7d11b537e280fe5f8f402dc36625f32a1228
SHA512 e8b2961caa310a6dc165c7e9f088d89ee4b5989cb93c0310719c75465df006393c1c196107894fa278bb64f631a921009093c4ecba27ec9c0b62807b372d4512
SSDEEP 192:sxZx/yM/jK1Ml8UQck7/fMsZ+t6VVIdpHLHW6+WNGYvVyD2fIg5UJ:sxZx7qn7/fMsZEfrHbGrgu
TLSH
T18952E7126A345977CCDBD20DFA41BF93D6F9147292941E44AAFCCA0C01E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 da694b6e68b53d71a6626083d10594f123364192cac9bc35d23209753b8b0a5c
MD5 f4a297bd03abec4185bdca3b43397df1
SHA1 3d4298842058ba86aae6a8aec4c3da5eda7a8cde
SHA512 ce08b6d13558ef0744bfb9cad42bda9b487821247e07cb788b1b4283bd6f5756ddd855a1b272181e352cd466f56cbc8268eb4e0502da373a956a27b6ecc88f1d
SSDEEP 192:sxZx/yM/jK1Ml8Mk7/fMsZ+t6VVIdpdLHW6+WNGYv1tf2fIg5UJ:sxZx7M7/fMsZEfxHbGYgu
TLSH
T19052F9126A345977CCDBD20DFA41BF93D6F8147292941E44AAFCCA0C05E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 eb4372b85387283c0430674a52c834fd9b2d33db201656590e84245aadbba1ea
MD5 2e8a192fb02d6f474cfb76ec958c23b8
SHA1 e273d780196727fb70ae0efc5f371066f0797d24
SHA512 d4858c9cdfa7a3d58edbf304e6415950d83ce044aba31fd0f72f06fac0ec3b4d31dd8fd045ecb69f5a56fa199e3e5f292af53e8ca669d38afe1026f6822a27cf
SSDEEP 768:F1seJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppWroXQ:F1seJ3xWvhfynu1jaVcL88ptg
TLSH
T10FD20B2B680CCB7E4F844E6DEC266F966EE801CB57984D5487EA880C02C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 25a83441be1281ee8f7998b78638601747ea53fd437ef2e2eca55f185f9a1012
MD5 1e1cb850942dad9b353162e0654316d8
SHA1 e624465d7fa2871d3cc04d630c6dc37a2621bcca
SHA512 2bae85276b501a40db5556fde75199839269bbb3e0abff5c738751c0eff6670d36ac7ed055ceec2e151491e5f281cf6f1b27bf8788429d390a5d955ff9318564
SSDEEP 48:KYHIhKggkXypqI/Kva47ylVIhKeEUuCHuC0UECz:KYH+KggmKqcKvaW+VmKeEzCHuC0UECz
TLSH
T11391EC07747A02023CBD2858B29795378E4135A3745CF4AFBFB904A64E26E124EFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97324276-644e-46d2-891e-465359a805af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\97324276-644e-46d2-891e-465359a805af.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1681ec3e2cc68f176dc01c52345398b5084a7e5bc45af0a8ba739931be24df19
MD5 7f333c6e69b8e5ec6df158877aa31722
SHA1 0931ccbb0c8cb1fb7ac4faf43b14ecbb523673c7
SHA512 a94b9028f77af8332e824f7e35c9648ea3c9210f75716896e5a85748d08fc3c6b07c5188f0b2f9562d7f28131368fd420fed76ef35527895609999bc82ddf82f
SSDEEP 192:uPLsNexQJUFM70QiQmiU1DJs4MToqC5TagHFd3Eb8z1EqCUMZ:0sNexnm79eHj55+YdU4QUMZ
TLSH
T157421A72AC749C3BADA3B191F44E37135EB4916B9A846F44E6ED2F1C01DB29C1307917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 2de1cd1c3c8ebc129be2f90c08c08c4a889b0951e0e8e26c160c4c75e1e79afd
MD5 94c1a0bab8e9f879184785e557afc6ea
SHA1 e6cd4462f55526f9f72fb4cea865266e279b2788
SHA512 78bf232607e0aa57411169557ff982ec0c097ec2d084dedd97bac3ded26ca71ce32b7e22216d547252b07fde95a6f6b7f0bb1cba578f8a52b2669b4beecc4ba0
SSDEEP 384:hiF1tNn/s3n9SJzsNu8TUNTUlIltnm79eHj55+YdU4QHx:IF1j+92Twgq6VYqU4QHx
TLSH
T192822B739CA4CD3FEDA69A85F54A33039EF451AB8984AA44E7DC6F1C01DB29C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e808199ce9a51c157c89c449d0875c7a760169f355e75bf5107b808e6ce7199d
MD5 3b9e3dc8381e86156f7294baff9694fa
SHA1 d4ab16bbf260d81dbf84e36140082c1c5c8dedde
SHA512 55affb407fbaffc009ca657917da2bb77fb6d68a75fb1f80a0dd976141e65056936295dbb5e7541698f05933ea2b9c7a9839a83aa11c6456bc00e20d150c43fb
SSDEEP 192:urLsNeQQJUFM70QiQmiU1DJs4MToqC5TagHFd3Eb8z1EqCta:QsNeQnm79eHj55+YdU4Qta
TLSH
T195422AB2AC748D3BADA3F185F04A33035EB4916B9A846F44E6EC2F1C01DB2AC1307917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 8b98d8fe384d6f42c475d511d7a9f51709f4ef627dcf3a2d63e8aa9734d79845
MD5 62fbe8a1b1955b7a9b54638a800b1629
SHA1 7eae466ceab9560b04ccd13e1260bfe412b4353f
SHA512 db5bfc0629eadecd08bd5731508682135917f01ae7410262297851c07b94ced00a1166fa0ace4740058c74b1fad349d7c206317acc389a27d7f09986a058e937
SSDEEP 192:urTSNWMsnMcPPQLz3XX9VofsNetQJUFM70QiQmiU1DJs4MToqC5TagHFd3Eb8z1G:ItNn/s3n9SfsNetnm79eHj55+YdU4QHx
TLSH
T12C626B72AC759D3BADA3A584F14A37035EF4916B96C42E44E6EC3F1C01DB3AC1307A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6fda449c516a31f686d26fc17792201bbd99743d6b0a2995e91721265b5aec79
MD5 38d1e61e237b6ec1384708805131767a
SHA1 3149d05fa68a705033a1bc30a3c258dd067dfb68
SHA512 37af669bfaa28ad77aebac44b2f6634b16fd7a9f1a8b7ae6c1e0ef27c93f8869deea14d499567f4c4e1bec1a20d4400b76a4aa45dabb686fe3184abc0b3c3a7a
SSDEEP 192:lONz6vMtPQmiUySXThToqC5Ta7847EldU/u:lONz6UtRtT+5+7SU/u
TLSH
T1E4020976BC685C7BEAA3AE45F48A27171FF4116FA5905B44EAE82F1D00DB25C1303927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 cee49ab751f20cd4a02d7a4666ea9fb9be6c91ec5c9cfd0f97e4e0b4573a30f9
MD5 a11c4a50e22c706948fc70057acefa2b
SHA1 6b0168ac539204b55769dfbb64c8759dc830d8aa
SHA512 b01f2c3e92306a52db01da7291a9ee17c53d543365ea735849d31b34a237007ff1b9157c7da1edfd80d0b088cb732e1064db37f99b823301edfc769d73efffa1
SSDEEP 192:fONX6vMqPQmiUyyXxhToqC5TagHFd3EZ80IEqCU/u:fONX6UqRfx+5+YdUOQU/u
TLSH
T1C7121BB2ECA49C6BAD93B581F4CA22535EB0916BEA84AF40E6DC3F1C01DF65C1307917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 479B
SHA256 df971de1d83c4ec8d8a5317c7da912d8feaad9129307ead7cac91d8819c039d1
MD5 60aeec055cd3bd04b686b14115275140
SHA1 226ad5a7a3c53e4dbc2166906cae70250583b691
SHA512 0567a6078a9f2c06a9054f75a9bf6b745ad3e3735d4b341e44089627a2e31febb2df182dfc3b521cc3bc180bae5d381bff6248f2806a7339a8f3037dff530336
TLSH
T115F0544E8C2EC994FE0955F500D5C3732415AC408EB55E7D6D0856D364861684CC9752
MD5 SHA1 SHA512 TLSH

Submit Download

VariationsSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsSeedV1
Size 584B
SHA256 09d3e3b5b9f686dde1371c20df9583d9a683410959ca9fcc9b729697f39fe812
MD5 92b26e6fa7bcc8f4f264e3a9b92bca89
SHA1 278b394f942be01d17bb0d4ce5e16605bdeb7f17
SHA512 c9008f892789f83645ebb2301f4302ed01d8e34529c3d4ceb7fea00a6f119c1e6d2b1ab90410a64bf0d5ab82e0450605c2358608c3ac8da14dc9e82450211d51
TLSH
T1B2F04770A0008ABE541FD3F25144340945A1D74887E1235AADE65358975344584852DF
MD5 SHA1 SHA512 TLSH

Submit Download

e3f8670f-aeed-458a-8ab1-9278208b0d9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e3f8670f-aeed-458a-8ab1-9278208b0d9d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f7bb1c7ee18ed39d292a10de06d7e6d660600a06fdfa48db21cb35301b6218b7
MD5 07e66aeecd5d3ed5af5b655ff81aba9d
SHA1 3c02805340039c905582e318a72dcf6fb9fc9f20
SHA512 e9b8e85bc8c5c1fdc27b149a0b97e1631e0da3c29969cb2556d52726409dee8b5c2557a322c89993efc1aad000cd8abcc85377ac95564576bc77a58d231202b3
TLSH
T1DC41F848B6F91148B373AF5A9BF6686D587A78372E0AD45E10110E4F0922F00C972B33
MD5 SHA1 SHA512 TLSH

Submit Download