c63377622b8e74d77ca2f79f5b62c24bc6ab78e9de13546d8637831c89820c2f

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/07/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
v3/2018/01/index.html
Size 48KB
Sample260727-ppg11asxev
SHA256 c63377622b8e74d77ca2f79f5b62c24bc6ab78e9de13546d8637831c89820c2f
MD5 c3434861b36c1306c7903c84591e717b
SHA1 048682d2155b0d6d71b037b56d4142a96123eeb8
SHA512 bd723ed5f3074eae3e76e9c8c4d4d6e10978690b65258cda181fd8ab9d34c81acd72fff87621bbf5de077f223df306320fdba44bdba903ea52fbc7c1b78575d5
SSDEEP 1536:c1VfI7ObyGlvy61zAmbDD7Wy0PRe2lmd/D:0VB6+DD7Wy0PRe2lmdD
TLSH
T17B230AF71899D43A00A2B6947460EF05BBA35027CA15DD9277FD5BA85F82EC3A5B330C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2632	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296291309680108"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{BFA1D313-338D-4560-A58D-BD3387C14173}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 60 wrote to memory of 2688	60	msedge.exe	87
PID 60 wrote to memory of 2632	60	msedge.exe	88
PID 60 wrote to memory of 3000	60	msedge.exe	89
PID 60 wrote to memory of 3000	60	msedge.exe	89
PID 60 wrote to memory of 3000	60	msedge.exe	89
PID 60 wrote to memory of 5660	60	msedge.exe	90
PID 60 wrote to memory of 5660	60	msedge.exe	90
PID 60 wrote to memory of 4020	60	msedge.exe	91
PID 60 wrote to memory of 4020	60	msedge.exe	91
PID 60 wrote to memory of 4020	60	msedge.exe	91
PID 60 wrote to memory of 1196	60	msedge.exe	92
PID 60 wrote to memory of 1196	60	msedge.exe	92
PID 60 wrote to memory of 1196	60	msedge.exe	92
PID 60 wrote to memory of 3464	60	msedge.exe	97
PID 60 wrote to memory of 3464	60	msedge.exe	97
PID 60 wrote to memory of 3464	60	msedge.exe	97
PID 60 wrote to memory of 5040	60	msedge.exe	101
PID 60 wrote to memory of 5036	60	msedge.exe	102
PID 60 wrote to memory of 4984	60	msedge.exe	103
PID 60 wrote to memory of 6080	60	msedge.exe	105
PID 60 wrote to memory of 2680	60	msedge.exe	104
PID 60 wrote to memory of 6080	60	msedge.exe	105
PID 60 wrote to memory of 2680	60	msedge.exe	104
PID 60 wrote to memory of 5088	60	msedge.exe	106
PID 60 wrote to memory of 5088	60	msedge.exe	106
PID 60 wrote to memory of 3932	60	msedge.exe	108
PID 60 wrote to memory of 1080	60	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\v3\2018\01\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff738cc188,0x7fff738cc194,0x7fff738cc1a0
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,7108927637081934412,18197940807648390328,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,948182577637875196,18434285201594005031,262144 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2312,i,17213955086205414396,11115008630647322819,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7213295779770026137,7952744891820887661,2097152 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,790112960174055578,4068744245930055464,2097152 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5204,i,16507934550364652468,2772351350997676715,2097152 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,16731424942370465557,13044822576011346596,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,11383612317663241363,409910477308925917,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,12450414894984413425,3682876891393280153,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,5721366020880096794,3595897319029151947,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,2085358449945813474,13012273095158566575,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,7545236228626484427,5952396528922893278,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,16985172712047331172,2805739103323557466,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,16985172712047331172,2805739103323557466,524288 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,7153098124551405766,14997222611591231842,262144 --field-trial-handle=2204,i,13026118995313450822,1713051083353745935,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5dfbe8b4c1a4f589316af535f5d655c994d509fd0053aad49594c640ec8063c6
MD5 f0fb040f05db8582c219ef234c78e606
SHA1 33fbef407fc16f45c3e16b015b84e5ee61e79d36
SHA512 c305405fa53dd407642e87109381aa511b74f4cef97cdb70d653756f9b62e2b0b167829c08e35b6439b862a3a8c78e9e2f17855d25e6ba3a066023a0d62d6b53
TLSH
T1F3E022BAC822EC6708FD4769A00D9A46EB4027173A40895F3A3C92098FB462AA6D585C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 319d8e1fa3609c9724c40f48739a2b399de24f42bc24de6336d681cc5edc6f2d
MD5 bcdb2b0e94465cd3f7a680b146e71f4d
SHA1 6599746c6cbc1d99edcd3edf86eaa328241ccc1d
SHA512 53a9621b1bdb185c55e5e99675454f4b365680153c8e19e6948b52e5c2b11645c2d3baee4e2b44735a41663be20c31055defa2f6152374b1dbc8df9683d7359a
TLSH
T12C81833D4A82CEF0D7D2223155E135D73EF195EAFA737E9E108024B23119B209DAA9DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b02c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b02c.TMP
Size 3KB
SHA256 db6022bb3e46a33ebb108cb02cb4b3eac71abf60b1704f433899c0c8113dbe62
MD5 111d4109cbd68e7769ff31a3f0328e47
SHA1 8aaa47364ed54a5fc4714848d79db433dc9eee4f
SHA512 c51e0d121804ac2c42fbdf301bab3d150c90a4fb81bfbdc3077b5e27875f3d828d2059372f7468c77751d86fc215d89642bd8e0eee2067a60e27eded2de00b8a
TLSH
T12171823D4A82DEF0D7D2223155D131C73EF195EAFA337E9E008024727119B209DAA9DC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f024b789e261e6aef9d308a5db7a1c626e757291e587043eb2acea8630709c85
MD5 917658ac17e92b29e70fa85a6fd3ff66
SHA1 40b60d90d4630278ef90a14eb1c938331fc590de
SHA512 55fcfc0c0925050fc3676c87aa2d8b6ccbf0c6c78b03043391a8452c168715e91ae855180f185af997a0d87c01c92eca2647facb9d199347d69b9659c4484e0d
SSDEEP 96:D15sXOSRhihdzfaaij6+pzgAJ02qto1GwJ:D15deEnzfaaij6+pcAJ0Dy1GW
TLSH
T11391CCF7C3D8876E891152F0AA25BE2BCD2D155A432C3C968CE4EF4B63E2471D14269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dab9d341b7d0b0cd9093f5d7ea7092371d77ce1d6d7f253b3c7ff057931e9250
MD5 823accbadbf0733af0d4e65137bc0505
SHA1 82990e12046a07a878c37005cd760a875b9fe3f5
SHA512 f21dfaf3cfba70c2e48e5e603e916f0fd0eef81c45664a078bc7eba949dac8548c748c587b2a5d8b76ec0c6cae85af8f1a0ae39f4594b6c23e48f728c57d410f
TLSH
T17841B1F3C7E8856EC91155F0AA18BE2FDE1D0514432C3D9AC5E4EF1B93E2471E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4f355f3d72e3c3c9ddabf70ffb9c8c7343362219651eae884ef6d913a079e715
MD5 1a803c7d1a1715f29487e33eb6a41437
SHA1 26094f7612f767f17e1a8a8f2e39fbc8f3654fa7
SHA512 67b38a1df6b582f06e5ee887e84483ff82ec2f8df62551cd51c9635f3702fdbca78e0c1bce52ad5f49939c15b15fe0a138369d20d6fd2d117b3db2ca1a546dff
SSDEEP 192:sxZJRUyMqZjK1Ml8Mkt/fussLyaZdJzodpH9HW6+WNGYvIC+UFIgjvJ:sxZJvMt/fussLyazidHbGrejx
TLSH
T1CF62D806AA3459778CDBD219F645BF53D6F91563E2904E44A9FCCB0C04E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ecdd36638d044978c3a2630165d591ed6c68070712394605450d13078c9b9a1b
MD5 2199f57e70736a662302fb22af30c267
SHA1 77b01fac53da2d4a8cf60cb72e93848d7af4d248
SHA512 7761a80a419aea60684a66cf2474ef92d32d0d8e697992220b4259268da573b4bd1bfedfc35183d9df9a0ea44b84d8bc4e98cb5349dc38f3696b368c570326c9
SSDEEP 192:sxZLRUyMqZjK1Ml8Mkt/fusQHjZZdaqzodpH9HW6+WNGYvrZhUwIg5bUvJ:sxZLpMt/fusQHlzWdHbGW9hUx
TLSH
T1A862C81AAA3459778CDBD219F645BF53D6F91563E2904E44A9FC8A0C04E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 4239030b38a11899dc8ad1bf13c1c111d82a532db15d47697371d16e98a520bb
MD5 112df4b0bc82af1c8714989580d2ebe5
SHA1 f4c59b87bbfdd68c77db2c29c708fa9ae6ddf992
SHA512 240eaa577c3760735acef7c4ce6fc0be0ec7992586ca4a19c2a6a8aa8b88e1f497519c7aaebc9aad035d19136848e909eaceeb5feefd123192bb3b8d420450c5
SSDEEP 192:sxZLRUyMqZjK1Ml8UQAkt/fusQHjZZdaqzodpH9HW6+WNGYvrZgLUwIg5bUvJ:sxZLpqTt/fusQHlzWdHbGT9hUx
TLSH
T1F962C71AAA3499778CDBD219F645BF53D6F91563E2904E44A9FC8A0C00E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 90607fcea8a1ab00b5d436400dc0cd78c5158b50fdc57475be33cdd77fe20f20
MD5 a13cc4799db02206711d7e3308fd6d4a
SHA1 2c8dbb77bc0d03a9e3c2c799750baab662bb93f3
SHA512 653d289169a1e49d9c79c9e4a8b6cb1165513e9e5cbdd764e4de035af90767c2d8b61da8ee704a9616fee6171a351f7ee94b7bb2866b1b8c93c6bba59b709c0a
SSDEEP 192:sxZLRUyMqZjK1Ml8Mkt/fusQHjZZdaqzodpH9HW6+WNGYvH+UFIg5bUvJ:sxZLvMt/fusQHlzWdHbGJehUx
TLSH
T17462C706AA3459778CDBD219F645BF53D6F91563E2904E44A9FC8A0C04E7BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 694456fa84e2e8aa8a81084759beded64830166b59dfb3a2d871995b8f757746
MD5 41ee677d6bb2988a3e630b9208fdfd10
SHA1 2ba92dbb3e5694beb3bdaa3eceb2ff1a4441682a
SHA512 af3f57fd7788774f7fb48ceec062423603736a45e9f09e370822bcec5d1ccefa6a887e47f390cb1f4b9f92393775e4df46b5f014156854b072c796d4d59e3a41
SSDEEP 192:05ppxnY753RNBvRJJdt7p5J9DTxf37Mjg:0LppY93PBZJPtN53D9frMc
TLSH
T1F2C25416713E0212397E2948B3A696364F4275A37058E4BF7FB810A14F66E225CFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 9f07542b4f08907b536440eb0cfa76670ef1cdec8320f9150e1a2b21d27a44ca
MD5 801b27ab8e1ef53f00350a53cf23c391
SHA1 9cbad174e5c1a7cab54431751351dd55fcc70651
SHA512 8ead0602f1ce97471f297e14999b1414e652ed3689ef1d95fb64a818fc1e37168bbf7f944ee980ba8d2d3a509c9f57b1bca5cda806b56e769fb030b79b5f549e
SSDEEP 384:npliF9CcmyWCs3sNd8TUNTUlI4uQckCrTINtphifWGZsjl/nY15HQfNxty/7IgU:psFccps3MwgvkEwj5GZIPY15HQf5
TLSH
T13FB22936EC58CEA7ECDB5B89B75A3A43DEE05163CA9C9AD4DAC81D0C019B1DD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 e0600beab56da62ac0fd262cc54ceb68fecf4dbb2cf600a3b4d43fe37ea6a2f7
MD5 e97d2f0bd072ac53fefad805f68024b4
SHA1 4699d7711dc8bd64a464dae35149e9e90763db97
SHA512 3fa9afb16f725a8cabbea1fbc65e92e2238d5a6852925a68cb6223f95e5c4afe57c6678e16ef16acd167d88559d98d39d15c32ba9bdf44478d7d089d191bd5e6
SSDEEP 384:nTiFiZcIyH3sNd8TUNTUlI4qQckCrTINtphifWGZsjl/nY15HQfOObjI9G6w7KtR:+FQk3Mwg1kEwj5GZIPY15HQf29MM
TLSH
T1C2D25B32EC64CAB7EDEB9B95B34A3A07DEF45163CA9C5AC8E5C85E0C009719D430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 240726cf77a6a3d10f8b5d821d1d32e4a09e885e3e592d61d2f95707b1dc0259
MD5 4831e2e1509ad71974e59f9385dd8ca5
SHA1 3bfa338b8612c6f5fde17b1a51319efe11c3d0f0
SHA512 be308525b5d15ad4f303c3b16598f193210b481663f55cd113574becc502a913ef6926dccc5b214800cb66f46c8c2b55359c7e53ef92ccf4be30fe51b39958a1
SSDEEP 384:n+iF9CcmyWCs3sNd8TUNTUlI4uQckCrTINtphifWGZsjl/nY15HQfNxty/7IgU:VFccps3MwgvkEwj5GZIPY15HQf5
TLSH
T10CB22936EC58CEA7ECDB5B89B75A3A43DEE05163CA989AD4DAC81D0C019B1DD430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 1747b4e0268e3612a66d06d848b7b7c9a2779413342c6f34cc0050101c134a98
MD5 65f85e6d892b06c14d07bed936502f19
SHA1 8866af78e5bc4e994ec90cc72b301d8fc97f9e66
SHA512 35f0a0ea8daf1cf2111b9bdfffc59d94c24066b8134f26db85d3dccd58ad69ee9097a42a72d6f28791dee5a482d27468f421b5b6456d3b1c73567ed8f2bcd56d
SSDEEP 384:np8iF9CcmyWCs3sNQ8TUNTUlIm2QckCr9lTKphifWGZsjl/nXppke4KV8p0GLxty:pnFccps3hwgbkUtk5GZIPXoI8p0GLC
TLSH
T1B5C25C36EC58CABBEDD74F99B74E3A07DEE0116786AC9AD4DAC85D0C10971DD030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 48deccc5a64e272128bec7488a281dcd2a92d94ee52d12505385ebf7d54d3b85
MD5 31f1fb7550bd1ad28a011f81c9c6eba0
SHA1 ca5879982390d147864d7b10216ca30618e3f783
SHA512 f56ee03f59cf07404adf85bf2335ac6c7b5bdda051a88bad2cbe59b47e708626891341b976e606e591ae18a8e28c6d2a9c14083b7236d3f032706d1ae147e62d
SSDEEP 768:p9Fccps3cwgbkUig5GZIPY1EHQfI8p0GLC:fs3+P9KpfI8p0GLC
TLSH
T1D8C24B32E858CEB7ECD65F98F75A3A07DEE051638A9CAAD4DACC1D0C109B1DD530B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e9f3b5894ff70c040d6b1f2aa1d8bc0f03ed6a50700f81aa4496c9a0bf483b8b
MD5 08990abf971cfa6ad5d7c35e8023ccfd
SHA1 46778edcbff7a604315407a0a1447eb634d624a6
SHA512 be51a4210b3c046337f9c2c27ca7707f6355b14361e6614e9730788f33e959d7cc3ad4c2f36eaccf3a8d5731dde3a915b9b1f61222089dd4399916a5076da981
TLSH
T144411848B6EA1148B3B77E5A9FF6A86D483F79772E0AD45D10110D4F0572E40C971737
MD5 SHA1 SHA512 TLSH

Submit Download