d7036ae5ffd4434dc727d5fa4ceec1b99ed3e89c6ca970a4ec1d1685379063b1

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 66KB
Sample260802-wtq8ssvtft
SHA256 d7036ae5ffd4434dc727d5fa4ceec1b99ed3e89c6ca970a4ec1d1685379063b1
MD5 6b60debc3c5233682e636ba0b4bb6bd2
SHA1 94da7b3d29570f8ddc2a549411d3ddb550b890d4
SHA512 2be56d8afd440cb8fe04f124b432ccb96486dd8b0c1ba871f769ccd0e57a56b04e4cd6be219f79b5dcab2a218a05af0539a72aa85a540bad34f9113af62c1953
SSDEEP 768:5e5dw6qWeH8b0ncVZZdype+7wWvgEmws2bHU3taYSf6m5A6Xruo0sCA:5ePwFL63ypVwWvDPbHU3tM6m5A6XrV
TLSH
T11B633B32A3B808B7362F437AE650B318666DEE11CE0657E5F0FAD25412C5DDA04B7B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2392	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301679922492734"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{24E04455-C3A0-45C6-B324-3B7BC6436AC3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe
996	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 996 wrote to memory of 4384	996	msedge.exe	85
PID 996 wrote to memory of 2392	996	msedge.exe	86
PID 996 wrote to memory of 2080	996	msedge.exe	87
PID 996 wrote to memory of 2080	996	msedge.exe	87
PID 996 wrote to memory of 2080	996	msedge.exe	87
PID 996 wrote to memory of 3256	996	msedge.exe	88
PID 996 wrote to memory of 3256	996	msedge.exe	88
PID 996 wrote to memory of 4976	996	msedge.exe	89
PID 996 wrote to memory of 4976	996	msedge.exe	89
PID 996 wrote to memory of 4976	996	msedge.exe	89
PID 996 wrote to memory of 3856	996	msedge.exe	90
PID 996 wrote to memory of 3856	996	msedge.exe	90
PID 996 wrote to memory of 3856	996	msedge.exe	90
PID 996 wrote to memory of 1752	996	msedge.exe	92
PID 996 wrote to memory of 1752	996	msedge.exe	92
PID 996 wrote to memory of 1752	996	msedge.exe	92
PID 996 wrote to memory of 4188	996	msedge.exe	93
PID 996 wrote to memory of 4188	996	msedge.exe	93
PID 996 wrote to memory of 4188	996	msedge.exe	93
PID 996 wrote to memory of 1592	996	msedge.exe	98
PID 996 wrote to memory of 1592	996	msedge.exe	98
PID 996 wrote to memory of 3348	996	msedge.exe	97
PID 996 wrote to memory of 3348	996	msedge.exe	97
PID 996 wrote to memory of 2788	996	msedge.exe	100
PID 996 wrote to memory of 1896	996	msedge.exe	107
PID 996 wrote to memory of 3884	996	msedge.exe	108
PID 996 wrote to memory of 4376	996	msedge.exe	109
PID 996 wrote to memory of 3704	996	msedge.exe	118
PID 996 wrote to memory of 3704	996	msedge.exe	118
PID 996 wrote to memory of 2836	996	msedge.exe	119
PID 996 wrote to memory of 2836	996	msedge.exe	119
PID 996 wrote to memory of 2828	996	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff805b2c188,0x7ff805b2c194,0x7ff805b2c1a0
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,13753519099923848550,13330159567146446614,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,15179078475305583073,7514801888493462083,262144 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,664783673934757827,13375109724482766619,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,8783243552941291565,404650886506252032,2097152 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,13183346845636465796,2596028855048176800,2097152 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,6625957552459651156,13794634890867352197,2097152 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,3420195574340572969,8317575291929705089,2097152 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,8527636536468311930,10792110636144631397,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,13215049937136530510,10176800380225265112,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5994464228419547195,10637384562379338835,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,5994464228419547195,10637384562379338835,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,13637630528381713824,214534672225089513,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,12777954508436764586,10596757362749491869,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,8677215586314016900,5667801846036240542,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,15496338175933290111,8422975254957130072,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,315605327956551736,8179820669165216474,524288 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5432,i,361705743293648551,2068595809910361943,262144 --field-trial-handle=2208,i,7233640407321978359,6446059072293287266,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2828

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c4ef6cd271cd58bbe52eb1e49b563c9b5e37f154673b72b2be7a1637cf447fb7
MD5 f6ac8f86b66b3b136c98d7d789bd0e0d
SHA1 fda1795fe9580e17206f91833eee5bfedd9c8d6c
SHA512 e068192aa10486db7b2ab38d296c0656df1bfa3d1c3adbfe7d5e66368ebcb4b3c784e90cd13382fbe6fad28af2ffe315a6208df0e7bf2aa743a8926be0e3816f
TLSH
T1FA71F536149301F4EF40CA3398EA824D723785FBF90B9E531490087F290636CE76688F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589045.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589045.TMP
Size 3KB
SHA256 8d9dd40e2e2f7c4a543a2359304b016d0c5ebee95768b23b4490c7bcc8111c52
MD5 5b7ecb2bc07d62d181964efee3053dcf
SHA1 75d66e66337f83d80a92e958a957ee91144c1838
SHA512 ad65597e863d96e69e06aa7a806869f2a7d2bdaee890e04c2bf9b30b8f7a5b039e4babd079660422ecbdcf5583dd462837f5bbea0a477d750ee0909b0b568e6f
TLSH
T13371D536159305F4EF40CA3398E9824D723785FBF94B9E535490087F290636CEB6689F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e2e4597cc8e45fb4c341e55c3f541ec3e87abf58e0dbffaee430e0c58ab5f5a3
MD5 6da9724ab566bacd666b64db1e9443d1
SHA1 4ca92157329d72c23ceafae818e78e8bdcd7cb6c
SHA512 fd5a4f09e3b486303b7228417e40540cc8c54e6b4350a3b93e8b7d58563ef21febbe0d4372abacaccd03c26ee986052c66ed445837ffd5dcfd96698d5011f742
TLSH
T17A119EF7C7E4866E890152F05A24AE2BCE1D0506432C7C66C9E4FF2B93F24B5E10269F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 04d1153ac0931670c7915888b8e5251bf40fc09feb4a71b28d84a0a9fa38de43
MD5 5609ad0fe02dc47a7778aca163553dc5
SHA1 cbe4eaac5d4d95fb703bad59f641411ec703f5e8
SHA512 e394c044ffe32aae5ade37b2aa64a24bf5c457ee9ff3f0e9722ac8ebe5b0fd81b08c1e4fc6631e448f8039b08fc976aaa30ed74da6a6325b0cd22f2e4ae1e056
SSDEEP 192:sxZglkx/fWsnn5VDIdpdtHW6+WNGYvrEOhCIgrJ:sxZgux/fWsnng/HbGU89
TLSH
T14922CA126E38A97B8CC7D21DBA15BF53E6F9503265D01E58E6FC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0ca7d2fd4f2ed1a651eb41e3bb590a372b862aea483d462795e4d877f9f5129d
MD5 d8d3e3ea6e9858593ed1285b379d6806
SHA1 4a9391d47bc17471d18d2ec43e4d5000750911b2
SHA512 285a0dfddc89625aee185ddd4d3f4a8e4bb4f0812eddeef94bce45b56b9c631365a518d25773aead9185836638b2e0ebfed7e722380a572092aa6ecca3599da4
SSDEEP 192:sxZglkx/fWsqn5VDIdpdtHW6+WNGYvrEOhCIg5NJ:sxZgux/fWsqng/HbGU8J
TLSH
T1E822C8126E38A97B8CCBD21DBA15BF53E6F95032A5D01E58E6FC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3ea0af0e98f32de1999ab7dbcb94284d4ad25f3dcf38b930cb77753acc0204b2
MD5 a748f3d403e541ca923966235f583366
SHA1 6569930c03b99956872823595f2f7f53fb9f9ea7
SHA512 82d0b8744af61ec85de083c72031b59b964804079586031593d92567af0fbdbb3c08d352eed46860359155f02daa1df874166df4d14158e358fb6f04e8b43bbe
SSDEEP 192:sxZglkx/fWsq9BVDIdpHtHW6+WNGYvujKhCIg5nJ:sxZgux/fWsq9INHbG48f
TLSH
T10D32E9126E38A97B9CC7D20DBA15BF13E6F9503265901E58EAFC961C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 272e9bde79398cfad6b5b64a30128bc76392a520e41ac4fc1adafaca1ffc7728
MD5 20d9d9c0af66a51b43f809d320d0552f
SHA1 d64427addf6a401ed01c7bd0562f473325114eb5
SHA512 fde451ff44eeacddd481d4c285040bf01327711cf977cff05dfaedb7b362901393170909f09a69312191907302e5bf06f1ff3b960266e1dc542ae0c3755c0b94
SSDEEP 192:sxZglkx/fWsq95VDIdpdtHW6+WNGYvVEOhCIg5nJ:sxZgux/fWsq9g/HbGY8f
TLSH
T1CA22D9126E38A9779CC7E20DBB15BF13E6F9503265901E58E6FC961C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b8d5a7a5ec09b3ea4d7d4810f82bc6d785b1d8af7cca2bd3f714d02f874cdb9e
MD5 2968b9639bc8ff8e60a5af702e30708b
SHA1 8f6c51960167ccffc3124af8872813afc423a6fe
SHA512 85cdd617936ce88d2f855174fcb3e7dce0801c1a1c0d3edb27aa016c34898b4424f2f37ebefb77044e9e7930ef7f9a794a0c914b53278e71b2e731c6fe3d2516
SSDEEP 768:GJee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pbJroXB:GJee3rxWvhffnu1jatcL88bix
TLSH
T14BC20B3B640CCB7E4F800A9DDC5A6F977FA802C7A7548D4087F9994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3eaf85f1cc0b7d127a5b8239a2b8899bfa1988d6d0e9b37bd9f2a5179e7e3139
MD5 7bb9f7fae649be37c5b726804dde34bc
SHA1 790996476ffe5107aaf702f883c9e390843d976b
SHA512 9edffed1e72e74b72a76ee84ae3e2dc3c9cef41a5e4c45ca498aa13be24bad6aad07dcf72961486c1d298f269a19df60fe57eaf30a3a9f4fc5af1788753e5bb3
SSDEEP 48:KYHIhKggkXypqI/Kva47ylVIhKeEUwAjUASqx:KYH+KggmKqcKvaW+VmKeEDAjUASqx
TLSH
T1D591ED07747A02023CBE2958B29795378E4535A3745CF4AEBFB904A64E26E110EFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6353eac5-b2b6-4bd1-82b3-6e1fb4c3ef5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6353eac5-b2b6-4bd1-82b3-6e1fb4c3ef5b.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 6191b88c5378810b103c6b75226ca37e989006d8f82902497b0261197055109b
MD5 b8f12eff7791f1d7eb2a06f6af3eb438
SHA1 0d1d041bdfd5ef2286aedd8736b2f2de623c3a59
SHA512 db6547e4e873cb4b4dde06b314493cf1212ca0c914b8a035182aef8fa24fa96484f17aad2e36b76687871bb0076771165486eafe16b985c2e988bf17c7dac1e3
SSDEEP 192:5m+xasuheOwQxMGsNNfdQNIONM7F/WQmiU1dsr4MToqC5TagHFd3ET8z1Fdq31oN:KZcIhsNNVgfO7dy8055+YdUQFO16
TLSH
T16E626EB26C645C7BEDB7F541F88A37135EF4802BA6D85B90A5EC7F1D00D6568030781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 93ba0ed2cf786c884ff7f18c9bd3da0dc73c908154477af38e23ae4afcdffcae
MD5 9c5cfbbe4a082bef06b07385b4857ba0
SHA1 2267cee756cf7b5e7c03f4d22258c79377b47532
SHA512 369b4bc67fc1a584b91860f26d9cfe8271e379acf9c27b9508a35eb64bdb06e8cbc9e8785f7c58585bfbfe4f484a288c4b3ac4c813338e104efc3813859e0295
SSDEEP 192:ufm+xasuheOwQxMGsNNgQNIONM7F/WQmiU1dsr4MToqC5TagHFd3ET8z1Fdq31oN:tZcIhsNNggfO7dy8055+YdUQFO16
TLSH
T1CD626DB26C645C7BADB7F541F88A37135EF8C02BA6C85B90A5EC7F1D00DA668130791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a3234f1e56a6330995d623a9840b7c09f36099f3b3a83cd480c91bfe08f6ac96
MD5 b3f1dcc3fd1144e8838c3e267fcdee7d
SHA1 528bf0c9392d5544fa2b158ea8a8d2c6279d0baf
SHA512 930de1249eaaba75c981354ddd384842945fdc1b73a70eb38f5298c0d32a803958c2cb5c1bfe9bafa5630bbc3cce24b7884ee31cdac1edb7878fafc4987dae74
SSDEEP 384:piFiZcITzsNX8TUNTUlIlggfO7dy8055+YdUKFO16:AFQ3KwglOBCYqUKFO16
TLSH
T13B823AB35C54897BEDB7EA45F98A32138EF4806BD9D4AA90B2DC6F1D009B1AC0307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5cdb66c136e468a4f081bdc3a92c10afae3a8d688cd6ffad4eb37ab5f1646bb0
MD5 b3d3c613e0fe1f66248b14477c225d27
SHA1 db54d50aa24dd467b5634fa92a825e198dc54d38
SHA512 ec5408891b67a6f8cb9adc6d2b7d6b60b62f0166e645572fe47a59bb37ce8a5206e9962a8a15ad510800f1c82858b5d3c51951fe252788bef6f6d2fde4bf02f0
SSDEEP 192:lONz6vMtPQmiUy3kThToqC5Ta7847FNldU/u:lONz6UtRDT+5+7FZU/u
TLSH
T1DA02F875BC686C7BEEA3AE45F48A27271FF4516BA5905B40EAE82F1D00D725C1303927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 1897d83c40847ce6131716970e0379ea538e56b9ef3a93f0b393e6cff21523fe
MD5 5656888bce1ddbc6102c09b966029d15
SHA1 9f68bb9795d2f445c24ccede8f1f96ba8985dc36
SHA512 afec20e6114a6c7302d29b78e4c24dc687022ed4d3471761a93d23edbd410c9f818c7a71b066059f23706000dae5b1510bb05833350038fdb5e08834cd8da142
SSDEEP 192:8ONY6vM5PQmiUyykUhToqC5TagHFd3E680IFdq3U/u:8ONY6U5REU+5+YdUjFOU/u
TLSH
T1EB121CB2BC689C6BAE93A541F48E26135EB4916BE984AF50E6DC3F1C01DB25C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

899f38de-c4bb-42c4-b50d-91b5fd75d11b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\899f38de-c4bb-42c4-b50d-91b5fd75d11b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3664baa79c940f755f209e646d778d8eb1f3d3d88e009f5f13ed0e1bcec09f2f
MD5 f6d8c725821fd2bab11b7f1ed4e094bd
SHA1 266341dfa62725ca3a8a2ae470e6137eee85a831
SHA512 0fa318ba77598f01156504b83ca835b132c650d871a19b45ea48d652e93e1adea3d0f9de742f40c099989766ee13521a02eaccd2717577fa30e06dac9cbbf6fe
TLSH
T1AF41185CA6E91108B3B37E5AABF2A86D887F79772F07955E10110D4F0A72E00C9B1B77
MD5 SHA1 SHA512 TLSH

Submit Download