d384652e2e519f8a362029dc59e1ac173d0ec969178d17769642a978d9c47a49

Analysis

max time kernel
148s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 11KB
Sample260811-pp7lnatalc
SHA256 d384652e2e519f8a362029dc59e1ac173d0ec969178d17769642a978d9c47a49
MD5 55a645eeffadb225dbe2f6adf4509af8
SHA1 12a3b3716f1e7a2dd8f5cc52ddd6c912a057c527
SHA512 61cfffd1abdbadf5d037af23fd24cbfc7709c73728231ac81dc8690f21880290e8362f947384a80f9cf747a626d08e6cac743908685bb881fd30857d8ba5d503
SSDEEP 192:gln5xVCsBYkwnZ2fBbYYDf4FNmLp95diH25suDHDssuDHDIsuDHDKksuDHDJsuDj:8SyYkwnZslyWj7DW7Dq7D97DP7Df7Dzr
TLSH
T139328452F2811C13A173855DB19A8E1D33A6D154F3420A3E3AAB5AF7978C6B433EB364
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2392	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309250870295690"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{9CBE1857-D09C-46F4-A29D-D2130DC94D3B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 624 wrote to memory of 3288	624	msedge.exe	85
PID 624 wrote to memory of 2392	624	msedge.exe	86
PID 624 wrote to memory of 3056	624	msedge.exe	87
PID 624 wrote to memory of 3256	624	msedge.exe	88
PID 624 wrote to memory of 3056	624	msedge.exe	87
PID 624 wrote to memory of 3056	624	msedge.exe	87
PID 624 wrote to memory of 3256	624	msedge.exe	88
PID 624 wrote to memory of 1760	624	msedge.exe	90
PID 624 wrote to memory of 5072	624	msedge.exe	91
PID 624 wrote to memory of 1760	624	msedge.exe	90
PID 624 wrote to memory of 1760	624	msedge.exe	90
PID 624 wrote to memory of 5072	624	msedge.exe	91
PID 624 wrote to memory of 5072	624	msedge.exe	91
PID 624 wrote to memory of 5100	624	msedge.exe	92
PID 624 wrote to memory of 4552	624	msedge.exe	93
PID 624 wrote to memory of 5100	624	msedge.exe	92
PID 624 wrote to memory of 5100	624	msedge.exe	92
PID 624 wrote to memory of 4552	624	msedge.exe	93
PID 624 wrote to memory of 4552	624	msedge.exe	93
PID 624 wrote to memory of 3956	624	msedge.exe	97
PID 624 wrote to memory of 3048	624	msedge.exe	98
PID 624 wrote to memory of 3956	624	msedge.exe	97
PID 624 wrote to memory of 3048	624	msedge.exe	98
PID 624 wrote to memory of 4784	624	msedge.exe	100
PID 624 wrote to memory of 3840	624	msedge.exe	104
PID 624 wrote to memory of 1340	624	msedge.exe	105
PID 624 wrote to memory of 4572	624	msedge.exe	106
PID 624 wrote to memory of 4300	624	msedge.exe	114
PID 624 wrote to memory of 4300	624	msedge.exe	114
PID 624 wrote to memory of 3980	624	msedge.exe	116
PID 624 wrote to memory of 3980	624	msedge.exe	116
PID 624 wrote to memory of 4716	624	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff805eac188,0x7ff805eac194,0x7ff805eac1a0
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,792322111013502213,8421824479037008194,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,4513607976428826862,14457822664765979783,262144 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:2
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,16295177184155877881,1188117270759768964,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,15345960901058830906,5861250724112180549,2097152 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,9582216743915536053,6077407112759678913,2097152 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,9703720588131727326,13430137998859032336,2097152 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,14919495793308915457,16764175419869175297,2097152 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7224813053117124783,11647498362031978213,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,15148024127288643250,17116306078297056939,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,18322879698573727227,5621376979865801138,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,18322879698573727227,5621376979865801138,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,637936603248626001,3952794984562712829,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3124,i,17303756276178226569,5644577550646769446,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,4168757493278371113,10712044951396712449,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,14179790720788079544,3996953530885374729,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,12218024918874304418,3396012875781803462,524288 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6208,i,16689039801722831269,8980533183980648361,262144 --field-trial-handle=2644,i,17764760017067676960,17278751390740688140,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1daa4325f975a54931f9270777497da31c14c7370e5c015b4ae36cada1a43cb7
MD5 e2847039331d9e5e26ec376245272619
SHA1 c9b83d12bee861ce9fc4927ba067e4953e8e338e
SHA512 3e31690442ca89bb5128c1888b23f409d5a7a6f737bc9c02b5e58c6926085d4dc73e2ded96ef21834b9c05f452b84f1cd123e4cbb2325d8081d4ce1bdca81c64
TLSH
T17D71F532149301F4EF44CA3398EA824D323781FBF90B9E531490087F290A36CE75688F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589064.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589064.TMP
Size 3KB
SHA256 da23f5ba12cdd25049e68930dc6cd5971a91dd62dcfc662eb4280ef76fde708c
MD5 729e0702327847c08f82ad8ed7757f99
SHA1 3e4152238c75e87dfb7227aa3995bb7aa21fa509
SHA512 ad31fad37ea2891a271249d08e07871c074f5c394e19e0f887f05a4324fe7376372b4f544fe1bf05bfa660e44fdd87f7da3f52162c2ede247592946f90fa5caf
TLSH
T1F671D536159305F4EF40CA3398E9824D723785FBF90B9E935490087F290636CE75689F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 54882a9f66eb3b3ca6981d5d00e0ee445195811c53d23cf11848eac57ad8baad
MD5 16adb4449819727f7dd9f1af86d42626
SHA1 7b52be36b51989d9fd03fef1fc2a67053e4c0e8f
SHA512 68567e8a2e3abcad016a6a66d785b7d6157bba8dfac13237d26a6b47fb6db3a458c629307b525224f10921c44322a707892291c3bca892dc3636d15d3720c155
TLSH
T178117DB3C3D5856E890116F05A24EE1BCE2D0506821C7C16C9D4EF2B97E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f2045d7ecdb2a9545e82225ff098a20084876f834d5ba62242a258ef4d4518f3
MD5 b6a307fd565525b3944431336f772052
SHA1 d0c58b654e9fd22ba8b7fc1570679b7fcd0cac38
SHA512 3790e3e8390dafef899267b9738c160cd656d9effe0ef386658f16fc7fc62fc00aecbc629d167cd95307252b4c777386222ec6881e7e2c0a2e8f88daf9c7c2c9
SSDEEP 192:sxZ2R2kF/fhsjPpVHIdpdrHW6+WNGYvrYvjMIgrJ:sxZ2bF/fhsjP0ZHbGh89
TLSH
T13622A6126E38A83B8CC7D21DBA19BF53D6F95032A1951E58AAFCD61C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c4b6b045cc2e859ce7299d357618432c6cba94c6a3f38a0ea4ac00f9c1f879ff
MD5 289872858c2c348943060a84190b0c3e
SHA1 1d2e2701f7c98bf0fa98d6c03c8d4a10741b6fbe
SHA512 16eff06826768301d0f0624d28b9f1ee01872a5025645d78586635e5325203a1237e83fd4169c64395cfdea573b9aa6271915ae69bbda7bcf3c22f91e8bc33c3
SSDEEP 192:sxZ2R2kF/fhsOPpVHIdpdrHW6+WNGYvrYvjMIg5kJ:sxZ2bF/fhsOP0ZHbGh8m
TLSH
T13822A6126E38A87B8CC7D21DBA19BF53D6F95032A1911E58AAFCD61C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 90d1715454017cea2552fa347ceaeb9acb401530575daeb49cc296cd47568cd0
MD5 b31d5cc8bee7a9f1b8839e377aabd8ce
SHA1 271de940e1a4d827ab0b9bd35d454b618c953890
SHA512 368a77424ed7775333ca0c2b664b397613043a9a26cb8b5f5b7fc382a9a41de9c49c1ab7cf283612667b1f0bda02ca6ccea7b6a70b45e7a120fd7824aed63867
SSDEEP 192:sxZ2R2kF/fhsO5pVHIdpdrHW6+WNGYvAQvjMIg5GJ:sxZ2bF/fhsO50ZHbGM8k
TLSH
T14C22B7526E3868778CC7E20DBA19BF53E6F9503291911E58A6FCD61C05E77CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 bc811d5dfcbf97d4fc2052bd97170f74ea19775ab672e4a51abae742c8493f8f
MD5 3d26199bfd4ef139f8b6646e43ad5770
SHA1 cd11aa45c63a36fb9d8ce83016a288271cd7ef5f
SHA512 f2004f335f6d8473db4859c8d837e6d185d8cb33f6205ea5a3449b38106b6962eecb43329091ba353ae202d9b2bf2a372ec8aa3f71f3a742b9a69eb32e1a5c7d
SSDEEP 768:Sxee3rxWvhffn8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4cLly0pbRroH:Sxee3rxWvhffnu1jatcL88bqH
TLSH
T15DC2FA3B640CCB7E4F800A9DDC5A6F977FA802C767548D4087FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 76b1d61a4e6d200e37147e33a96caecf09e141a5fd6ad9e799bedd1adbc7cf1a
MD5 257bf076f352d9e3d452f84728d64089
SHA1 e3be2b9b236dc6b72d722f0982ab590626b55fad
SHA512 c8fb3999b05eab480dac3d53877e1def80d07a2085271d50677d704b155fa462918ca1daa7f2e14ce4a8f4a3326aacf116029e158133a3f66b74ed90f754f0fa
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1EB:KYHIhKggkXypqI/Kva47ylVIhKeEU3
TLSH
T16D91EE07747A02123CBE3858B29796378E4135A3745CF4AEBFB904A64D26E110EFE8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad869be4-536a-4212-9ec1-49f1d5146091.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ad869be4-536a-4212-9ec1-49f1d5146091.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 45952fce76be8a96e4f13c8fe074a44d76f9e305bb98f088c709de2e4140b636
MD5 9440c849821d27e6483cf9f1181a3692
SHA1 07ca8a653197e2d799699ff7ce7e44ff345c9e5c
SHA512 2ff76796f537bb86ab460a065da0a754ac9a1c6ed9a8c639e13294d98f89168aa045f2b2195c741aef0372ed6969df4f7fa5bffe03df65356a5d2487dd0c3067
SSDEEP 192:uZTLsNv8QTxtM7E5kQmiU1L72N4MToqC5TagHFd3EB8z1aqoono:EvsNv8d7Y092C55+YdUmwono
TLSH
T12B422972AC789C37ADA3A545F84E36135EF0916B96886F90E6ED7F1C01CB29C2307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 13694295d77d9b2b9144ff23201e8b51c02e6f00cee314b29f5130daef39c33d
MD5 a3e02fe4531c687fab6595a0aa1ca524
SHA1 976d802f40e091a26b0141b12edeb89c3df764db
SHA512 83eb6b99d96b68de96a900da70866bd4ecd736d4d1d8bdac53b099f5bfe98089c01253f8a8d7635d200193f1c8194fd648f024e8ec60a67d979a2e08731b9b0b
SSDEEP 384:PoiFiZcIczsNR8TUNTUlIleRd7Y092C55+YdU2wosy:7FQgswg4TqYYqU2wosy
TLSH
T1DA824AB39CA48D3BEDB7AA45F98E36138EF4906795C4AA90E3DC6F1D009729C1307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ac7759b510cfe935a4c0f1b4da03f99c075158d8a8e49a536648bda66cda6269
MD5 b697fe57146b23dc51f45d2e3255fe2b
SHA1 01d0fda3cf47bf28198da65c3f56c4fc47e0fa38
SHA512 46ad39da436004747843ea65cfeab2e8af1dbbe2a16dcc93e45dd9ab106249e9cb285caa4c6a3d1695e47ea36454f2b75da9dd8ee42a53cea44836f691631d5e
SSDEEP 192:u2Tm+xasuheOwQxMGsNveRQTxtM7E5kQmiU1L72N4MToqC5TagHFd3EB8z1aqooD:XQZcIhsNveRd7Y092C55+YdUmwosy
TLSH
T14D625BB2AC749C36A9B3F545F88E36135EF4D02BA6C85E50E6EC7F1D01DA2981307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 56d07190d8da3e244cea8dd8e8d9fbd952b39ffe09f45f9a59584d4d3212e62a
MD5 f7bf13f2d3b0c17ac5913da523148621
SHA1 0df24ae5e8dc0184c0dbf2701b34838353530753
SHA512 f77f3654ea8b63b013d0ef169b4680c8669a93dc52ee8ae587437cad1da994f5bf2986f060e85ebc09b479ff2fbcbd63737e4eb034d66d4876c2f063ccfce7ff
SSDEEP 192:lONz6vMtPQmiUyFtThToqC5Ta7847GldU/u:lONz6UtRIT+5+74U/u
TLSH
T1CA020875AC686C7BEAA3AE45F48E27271FF4616BA5905B40EAE82F1D00D724C1303927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 e0b2c52e1604626d07a2568f27c1087896c24c6ae956497b18d3ffe070af360f
MD5 a5a336bcd9a55048a1bca913a946a693
SHA1 525be54a5a0950b9812c5a0f9681a5df6bcd6afc
SHA512 f8e262c2495ad2e8c63d02c0f98c893133eff4fc0bbe08ad0958e0cc828e5b953558f992fa025cc149389062541c7260f126a0e8399c42701f855b54478ec065
SSDEEP 192:iONi6vM/PQmiUyEtehToqC5TagHFd3Ez80IaqooU/u:iONi6U/Rze+5+YdUEwoU/u
TLSH
T1C3120AB2AC649C3BADA3A545F48E36135EF0926BA6849F50E6DC3F1C01DB65C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VariationsRuntimeSeedV1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\VariationsRuntimeSeedV1
Size 484B
SHA256 9fd2b7fae87c2d863b486a425834283f19b1444749c84650d5a48c9eadb12e2b
MD5 e9289cc1f579fdfa9d46acfae9b38330
SHA1 7eac8e241d8c35d873280d6b9dbc1cca7a9b2231
SHA512 b1f37da50e387c8408a960ef5276a51336510286c1db7eaea4cde65af4efc343f8ac1d9de65df1fd0818513823a485733e5c155da615344bc044f46021ecf586
TLSH
T134F0543C33D821A4F08C46B23596ED8B88BF313247DC2631CA50F550315387701B5095
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c19539c5586161b40358683242dc114742e7b076bc47a2aaa2b300fd7ca59759
MD5 62bc4e75f2a6fe5e68060f1ee42abb20
SHA1 1028bc6526e2a365e84a9a3c3325de156d77a1a7
SHA512 c5c62a5122dc0e07d32fd6363fb5aa209c0d2a31d188c910269494a29acc1509043a58d42238b6653ce99efa6feec7636b0ca633625fe7158eb4982d047f213b
TLSH
T18A41099DA6E91148B3B77E5A9BF7A86D487BBC772F06D49D10110E8F0626A40C8B1733
MD5 SHA1 SHA512 TLSH

Submit Download