8df9fe83b739ed254494322003cf30fc0ea1999b96a5945415582dac53e21248

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ACCOUNTS/a.html
Size 690B
Sample260811-ppb5raec93
SHA256 8df9fe83b739ed254494322003cf30fc0ea1999b96a5945415582dac53e21248
MD5 c400c21b899671080319aa18d406de9b
SHA1 ff415a511f13efe1c171a9bd52928eb4a0d5866b
SHA512 3ebdcfa2cadeafc35fec958b3946ffeb9dd3cc8697cd9d779c1bd64f0cf2ab878e30c6b315c5bb7d403883f91c0e184f3e1842bff36a6977c0e2bd8063a7e3e6
TLSH
T1990123BE9E584C185A3092B0F7C06B55A59AA1021B074D30BEE9107B7798969CA4339C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2656	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309250324880976"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{E0F89E91-166E-499E-A69B-B7CC73C94AE7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe
64	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 64 wrote to memory of 3856	64	msedge.exe	87
PID 64 wrote to memory of 2656	64	msedge.exe	88
PID 64 wrote to memory of 3944	64	msedge.exe	89
PID 64 wrote to memory of 900	64	msedge.exe	90
PID 64 wrote to memory of 3944	64	msedge.exe	89
PID 64 wrote to memory of 3944	64	msedge.exe	89
PID 64 wrote to memory of 900	64	msedge.exe	90
PID 64 wrote to memory of 3964	64	msedge.exe	92
PID 64 wrote to memory of 3964	64	msedge.exe	92
PID 64 wrote to memory of 3964	64	msedge.exe	92
PID 64 wrote to memory of 3916	64	msedge.exe	93
PID 64 wrote to memory of 3916	64	msedge.exe	93
PID 64 wrote to memory of 3916	64	msedge.exe	93
PID 64 wrote to memory of 4356	64	msedge.exe	94
PID 64 wrote to memory of 4356	64	msedge.exe	94
PID 64 wrote to memory of 4356	64	msedge.exe	94
PID 64 wrote to memory of 1424	64	msedge.exe	95
PID 64 wrote to memory of 1424	64	msedge.exe	95
PID 64 wrote to memory of 1424	64	msedge.exe	95
PID 64 wrote to memory of 4504	64	msedge.exe	98
PID 64 wrote to memory of 3924	64	msedge.exe	99
PID 64 wrote to memory of 4504	64	msedge.exe	98
PID 64 wrote to memory of 3924	64	msedge.exe	99
PID 64 wrote to memory of 3352	64	msedge.exe	101
PID 64 wrote to memory of 1096	64	msedge.exe	104
PID 64 wrote to memory of 948	64	msedge.exe	105
PID 64 wrote to memory of 2652	64	msedge.exe	106
PID 64 wrote to memory of 4720	64	msedge.exe	107
PID 64 wrote to memory of 4720	64	msedge.exe	107
PID 64 wrote to memory of 4860	64	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ACCOUNTS\a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x278,0x7fffd167c188,0x7fffd167c194,0x7fffd167c1a0
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1800,i,3217629185657344084,11295474621220061850,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,9410101770075661197,15679393872664877418,262144 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,1932449832710139705,3108374555596727200,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,10904989532101218298,9199048953267401237,2097152 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16261305947995228739,12457475840795584845,2097152 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,11848525904401434469,1630427298513551002,2097152 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,17818012154452024344,14995845636278591345,2097152 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,11426897257061447597,9549079411876363587,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,4613226034019885264,18262480961740306152,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,663687424737165533,2035151877613897142,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,663687424737165533,2035151877613897142,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4216,i,12605979433544194564,3588347601417802927,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,1542781480381258368,12504680814230378928,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,15213541839753964188,16517096440445190381,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3092,i,5492458770252892463,14908549939146332461,524288 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,1079773082230154299,11811770503919954614,262144 --field-trial-handle=2320,i,18349702782835456642,2708230922127542,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0f3a640c-5929-4cce-a650-8e6ff10f19b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f3a640c-5929-4cce-a650-8e6ff10f19b0.tmp
Size 20KB
SHA256 fdca3454b071de4eca3589b1640ff04fa1692d36d726c7d8fe83ec0a23a4090b
MD5 6d80a6b8a69adc53415e69bb354dc69a
SHA1 036f196d0f63026423f00d6e43c3fb6dfa3aa43f
SHA512 4469176788132c32374d5d4459776662811ebf175cecf07ef2fc212f432ea9829e504d59377a948b89d1c57a3741daca224e8afe150fb7caf81b5179e603f722
SSDEEP 384:KZcIhsNSNVp1zE9Buf+MOetB+2SF2Q4EXGeSc0:ohtu8hOqBlk2dlR
TLSH
T152926C31AC395C778DE6A640F84B36535EF49067E6DA6FC8A1ECBF1D048B6AC130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 9dd71984942a8441ab054d2d5faf08fc4f68615209eab2772b51eedf13377ff1
MD5 46b425574b322cd69c72ca04ce391450
SHA1 2e2b35ac4773b349f020380f871a53ca12c2f142
SHA512 178b61548d1afd5d26ae2d37a587152d81ae6ba0fa1b460e7bd1f171e37ffadf6c3839e64dbd72158c128b515251cb6b03e39b72137e87628b8f62d5d0f37ad8
TLSH
T1195150180692649EE731D231C0E01B03BE36C1F9897B8E380290E9BFD7277E79B6901C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ae1d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ae1d.TMP
Size 2KB
SHA256 9566f6fc0eaa7c244fe66afec6c1c4ae4096d695dc6ff0f131cab5e04fa4cd03
MD5 ef9d215c6074f5ec687348d4d078e6c2
SHA1 71d66ab920df2be2397e36ccdb1782a0df984e4d
SHA512 ad196837bcc50a2e60875c458bde346814a29515111fb0e5a1c9eddf1e82f1b5a217cba2102b4f60b4ffa489742394ae4a1012dceeb7e66f9b871f27eec69b5e
TLSH
T1A8514F180652649EE730D231C4E01B03BE36C5F9897B8E390290D9BF97277E79B6901C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 cc158f4ae2c7478df36e65ddc6fa3c3ce770bbc706509ebed923dc9d7d38e913
MD5 819953974bb2e785890f9582893eb119
SHA1 7e31c8dc8f862ef7ed5b3e39035f5f0a57b45973
SHA512 51ceda94f22a9c137f6dc7cc2d254ceb01b327c18ff4355798490ec84507c56a6c54b7778019e0d3fa124807dde5ff24f3632ffe07e6aff35e21ce0a1f6e0f69
TLSH
T103318DF7C3D9867E890556F09A28EE27CE2D051A42283C16C9E4FF5F93E24B5D101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 518cc41fdf633ba825656dd35d412138b7fb6c8bf4d54c169178222a5c28f584
MD5 cf6e338087f17bf394f8f4cd24a4a581
SHA1 3c6bcb42312a1eae44a6294db267a5acb6aaa9fb
SHA512 cff1ec029c11380ddca8c9b431cdf6bae5dcc42a10961f8cbdb2591cde8d33ea3adf10f6434a2e4bc90ce68601a38402fda5496c8985bb524ab645411c7fe855
SSDEEP 192:sxZvRVyM/jK1Ml8Mkw/fzsnadnIdpdZHW6+WNGYwKKQlnIgrJ:sxZvfMw/fzsado3HbGsn9
TLSH
T10B42E711AA34A977CCDBD209FA55BB53D6F5447392900E44A9FCDA1C04E6BEC2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 46e892166291665501473d780826d0582b0ce71434a30519db66edc8035cd4b7
MD5 47f2695fb689fb9da048876354eb552e
SHA1 a89ef3f463036d0ab884d77762e1c098ee66b9df
SHA512 d084a29d209a2ccc3639ab3208d7a364bfef382ef384706f49fa84f54c01d2f2403ad80e843bb48cf4dd0c8455b73019cfca634721ac04727edc0e1351b422b3
SSDEEP 192:sxZvRVyM/jK1Ml8UQ2kw/fzsfaZnIdpHZHW6+WNGYwbfVlnIg5IJ:sxZvfqdw/fzsCZo5HbGJn+
TLSH
T19752E612AA34A977CCDBD209FA55BB43D6F5447391900E44AAFCDA1C04E6BEC2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f4ba1dc5aa9f06a56fc98f0cf9e74ebece90598d3d589aaf9694fd8407b777d7
MD5 1e55d2ffe4c917c7ba1a2f60cce1d940
SHA1 a0f50f6bc4ea116e9fb86d7bf634095061ac9943
SHA512 edb255e999c28341b01ccbcfa2310b8775914abec56f4f8343e80691afc0aea41459109da2c66960e7dbe277c74cc5f4736708628b1fcdacd1a8ea145f393388
SSDEEP 768:iv4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dDrohQcnaA:iv4jeXmWvmKLEu1jacPLZQdwFT
TLSH
T161D20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 c4915aee5e125edfcf245b2fc13662da2c31c15c17b6090075b9dfdb65c5cd00
MD5 636a459585a8277f7aaf58f422cdbde9
SHA1 6bfef20d16cb3cbdd46be125426ea0995db832f1
SHA512 26ed4e5142454a34eebccb77c02d18a4f267a59359ba2c657c13f8fa211abe0f0be6c382947edd276c174b9d598f61e9b956ef4b078203c483a675719c0bfd63
SSDEEP 96:KYBdTRxx89ssmlxKe4mzxibDUlxSWpKKCw1k4KR2qSqIKrCP:WvdxjfA
TLSH
T11BC1F39A70BF02163D7D2519A2A4C7274F417AA33015E42B7BA940B24EA7E350CFCDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594b19.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594b19.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 947cc65380c47239f058fb1da70fa07ac7d0b8c37acbef00c37367640385f365
MD5 1adfcaebfe74b9f1fa7cbe7076a00bcd
SHA1 2cea2ff9ac0a276afef7488fdd8120620a07f105
SHA512 f3880e338e8474b75769b87ab437b404e5c62612592d3e94d050570d805e4458148eaa5b74cf8587cd4b8b5a0db8dd88ee1781e7047ba0fdef2318da360a9bff
SSDEEP 384:BiFiZcIjzsNq8TUNTUlIlNVp1zE9Buf+MOetB+2uF2Q4EXGeSc0:oFQnbwgZu8hOqBlg2dlR
TLSH
T195A26C329C689C7B9DE6AB40F94A36139EF44067D9D6BBD4E2DCAF1D00876AC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3274499f94f81131c25db59049922ac789e380da26944d035f0038083997fb22
MD5 c136d0d55bc58f441cd04f63e6ba2fd7
SHA1 0a3f871499edbbe10375cb9e6c7b199f4326e8f5
SHA512 85e02ad49bbff54b4d52ec46eb6d1191e8f7942d1d8278c97fb268f2a40e3f51926cf51081addf7a4ceee78ca1521cbea047c27988f844257c7ff18d40e5abb1
SSDEEP 192:EONg6hZ0QmiUy55pc/+jVqO1Qz5wOZxOT9U6:EONg6o0pu+MOeK24BU6
TLSH
T12F02E83969686C778EE2AE45F48737235FE4117BE9956F84D6E82F1D00C779C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 52833c52cc03eb04a0e17b867ec5e9b3fdef2d0e34afe2c81f4c0924f2bbee77
MD5 7e1d6c2cc900666bc4635945d1f93a90
SHA1 71b5eff52ff3d78d49672e2b3b2b9740c918ad07
SHA512 e55f465dae193326466c386e5bd16fcb0b3ea4c743d8b07001d9965ada43ddd8888c4d3a012644e7f935afdf60d58cc00317e7089e3ace71b928d5be0fcc7699
SSDEEP 384:JZcIhsNSwVp1zE9Buf+MOetB+2SF2Q4EXGeSc0:BhMu8hOqBlk2dlR
TLSH
T18D927C31AC395C778DE7A640F84B36535EF44067E6DA6BC8A1ECBF1D048B6AC130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 644a76da509ac3f083708cabc9b54b7078837673cc459e5b4a74a3f033574f2b
MD5 65d596bc1abb0c64cc6d9ea88e844f85
SHA1 4c1be70095082b033ca96dbafa76c40514c5e366
SHA512 eea231c590920584371aa66861528b5f632a0fc0c5f834d285c57ecd5cc9d53ba2732a28415377b9cd93e5add508e37e6b825b0d429e3b8ed60b492faf61db4a
SSDEEP 192:zOND6hZFQmiUyH5Mc/+jVqO1QtB+2bO5cOqxgq2U6:zOND6XgMu+MOetB+2d92U6
TLSH
T14912F8366968AC774DE2A655F48736178EE5512BEA85BFC1D5DC2F1C00CB7AC230EC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38129b4c-c83c-4806-93a4-55487fe42720.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\38129b4c-c83c-4806-93a4-55487fe42720.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9aefafa9baa9a25b0e46a6f77a6d731e53adcfc4a957829b0f5e9a91a0ede40f
MD5 a74215008980f621a942fbf495d86c2e
SHA1 53ecd61f5c9a03e7944b3c4b8b598254c5d1c9f7
SHA512 90266be46c5e6d79a9fc98eab4a31f51a7b4617ebddce297ba2f2edcd7aa1421370f34fe66605f6ea127bba306fdcd27dfc42000d119245df4eeaaf7b524eee0
TLSH
T183416A58AAF91108B3B76F5A6FF6A56D447BB9732E06C55E10120D4F0A63F00C8B2B33
MD5 SHA1 SHA512 TLSH

Submit Download