91399636cde36681fba75670e8ba50c22f93ee27db8955e03194bfd1cd48ca59

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 05:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
overlays/modals-net/v5-mc.html
Size 9KB
Sample260812-gnfgsabk21
SHA256 91399636cde36681fba75670e8ba50c22f93ee27db8955e03194bfd1cd48ca59
MD5 d2a827312f71fcf30b2e0d0782a0841b
SHA1 927cecd8a64884c516c18d14f59d192e0338e56c
SHA512 856ee18f420aced9c51011115b21c376020339fbeb20db642b1018a64fb8235a11298fa232dcaf751af1e0dd96fcab247510ab8f4aaf35b55ba2e06beae11b85
SSDEEP 192:YHkLf3AjoXEhfkiaP1QjbJvA/KtErsiy6wsvAjCEpNji7aCAHofkJHY:YEABC
TLSH
T10F12419A9AF708456967D4783FB35B0B26A1D407C50BC8193FDC238C8F8A8D59AF274C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3764	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309878204226904"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{189D5EB0-432F-47CD-BB72-07676567CB0B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe
3948	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3948 wrote to memory of 648	3948	msedge.exe	82
PID 3948 wrote to memory of 3764	3948	msedge.exe	83
PID 3948 wrote to memory of 3892	3948	msedge.exe	84
PID 3948 wrote to memory of 3892	3948	msedge.exe	84
PID 3948 wrote to memory of 3892	3948	msedge.exe	84
PID 3948 wrote to memory of 440	3948	msedge.exe	85
PID 3948 wrote to memory of 440	3948	msedge.exe	85
PID 3948 wrote to memory of 3952	3948	msedge.exe	86
PID 3948 wrote to memory of 3952	3948	msedge.exe	86
PID 3948 wrote to memory of 3952	3948	msedge.exe	86
PID 3948 wrote to memory of 4176	3948	msedge.exe	87
PID 3948 wrote to memory of 4176	3948	msedge.exe	87
PID 3948 wrote to memory of 4176	3948	msedge.exe	87
PID 3948 wrote to memory of 728	3948	msedge.exe	89
PID 3948 wrote to memory of 728	3948	msedge.exe	89
PID 3948 wrote to memory of 728	3948	msedge.exe	89
PID 3948 wrote to memory of 2368	3948	msedge.exe	90
PID 3948 wrote to memory of 2368	3948	msedge.exe	90
PID 3948 wrote to memory of 2368	3948	msedge.exe	90
PID 3948 wrote to memory of 1416	3948	msedge.exe	94
PID 3948 wrote to memory of 2228	3948	msedge.exe	95
PID 3948 wrote to memory of 1416	3948	msedge.exe	94
PID 3948 wrote to memory of 2228	3948	msedge.exe	95
PID 3948 wrote to memory of 3424	3948	msedge.exe	99
PID 3948 wrote to memory of 816	3948	msedge.exe	107
PID 3948 wrote to memory of 1388	3948	msedge.exe	108
PID 3948 wrote to memory of 4992	3948	msedge.exe	109
PID 3948 wrote to memory of 3536	3948	msedge.exe	117
PID 3948 wrote to memory of 3536	3948	msedge.exe	117
PID 3948 wrote to memory of 1344	3948	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\overlays\modals-net\v5-mc.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffbda2ec188,0x7ffbda2ec194,0x7ffbda2ec1a0
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,16431880532640684000,9834714205991354678,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,6795166190077330142,1718533109782030860,262144 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,13170077525176758649,6656929601133394903,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,2128074171931599771,16176053202628369782,2097152 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,4923138107942129194,5461769775757422483,2097152 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,16797287047298848501,8907550618962657554,2097152 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,14738164889949141658,11637990076493805285,2097152 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17801954147904879931,13502164537579537755,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,17034362350670562502,8186078024948968426,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17926389396780112072,301457738686837777,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,17926389396780112072,301457738686837777,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,2383638209878439393,6485112579363049901,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,10769325620758817542,1727011331874955573,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,2607683334067118991,15590125174042075242,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,7687284780502469407,7994216401799010793,524288 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=5480 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5240,i,1738476695087205453,17141276122645444878,262144 --field-trial-handle=2184,i,14286132394550078322,11940991168459103334,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:64

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

5588aefe-fba9-43ea-8622-fd2585120d6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5588aefe-fba9-43ea-8622-fd2585120d6a.tmp
Size 8KB
SHA256 213544c0b47fad883a4c8fdab20a68599401beec7b00f28546949e8f69fc3d81
MD5 b149ab495d1a2eb79c9a3f98d0468b29
SHA1 31ddf56430ec95cdeda799e74355849e938e1fa3
SHA512 16a7edb06a4ee2b1669037cdb5183abd1d96de1512df31afa9af6fb12157fbf506dbb1f079e3ef771aa65bb8ea80ffbaae6844efc829304a2f3850a5ec333d89
SSDEEP 192:xONQ6v+YLfQmiUyKYtKh+CGLOD9ojhaCHSqFU6:xONQ6vzdkKh+CeODejhD1U6
TLSH
T15D122C35BC386C675EE26545F88735139EA49137EA863F80D5DC3E0C01EF69C234AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bf1ea3a28d735bfe62cd5030d616ffbe096d07b41c84721c791f2db46440974e
MD5 414835b9cd3f2a9e9e4758cda111d544
SHA1 d8e4e8da01e9555a6b84eb04640f5b84017c899e
SHA512 0b580679f262554b6e5d5cf0067d895a81b871341b2c1139fe8f9b6661107d75e55517bb35a396511764cbd9b76202a347a7ab6f39150d069b419a11af1075de
TLSH
T153612C3800554C53E7C52133E4FFC94474B985EAFBA3EE2692376CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d637.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d637.TMP
Size 3KB
SHA256 27695293933ec79e8ae539fff3df1a926a500e70208edd926be8ea1a158dbb80
MD5 e6f5af7fbcde7cf9e6ba63244814f967
SHA1 771af71e70946340500aebcee4f9814f988bfe67
SHA512 f0547e338cb99bffd1805c45e2ca87ff5b2e4fe3bc61879bff6be6cd324032a755e5fd4e56a5104e19971bf59adaf06111d434fb3db747d57569283fccd81cac
TLSH
T12D612C3800454C53E7C52173E4FFCA4474B985EAFBA3EE2691376CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f2a475e7bd50929b71ebf12319f9206b1791fd7b85996286c88e0ef0d400bd92
MD5 396b188db5c05623f86b9f4db4dfc8d8
SHA1 67d71b35cdf899a9975b81396fcadc7b68b57dc2
SHA512 8c438d62c87c453fdfaf7aea2768276a9a40589b3f40d9a3530a72d2940f2d46f85f230c24070cebe5b612fcc0049180ce3d24fbb530f03b3297413b123ab876
TLSH
T1581157B3C3D585AE890156F0AA24AE2BCE2D0606821C7D1989D4EF2B93E3065E10295B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4bffa5388ea2a87e39e85d5bb62e4546653f65215274e152ed53e6f9da76d5d0
MD5 4bae1cf49f4a223f0a2ac476585dce5b
SHA1 aec9485a2729691b0d64ebb9791254cf1ad85c57
SHA512 f1ccbc358947edbc0e002b04c26dff9be760428d3d58af5f15be6c3f00589a904ffe75be900ea1b5614c67f7476ba3263c5e28dd766a924d50c1e2756c7f6c8b
SSDEEP 192:sxZrRwkb/fLstjApWpIdpddHW6+WNGY9IZ5lnfLIg5xJ:sxZrpb/fLstjApdPHbG9fDF
TLSH
T1A422D8126E28687B8CC7D20DBB59BF53E6F9503251941E58EAFCCA1C05E7ACD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 79ee7918ac0649ca20443176c4053116d9eb61995c920635704b2442cc771487
MD5 648941b16ca32ac4d3e3b7773941c5a8
SHA1 e339d3a2f6516253339835b7c03926b79fa6f444
SHA512 b9756a16bcfbe61b6a33fdb617fe488e8cef9a5230c64a063501e2fdc05d89c6aa1a37371a78cbcd61b025e4f6b32ec916a7ad2a39d7e10d28e2fd81c085ca3a
SSDEEP 192:sxZrRwkb/fLstj2pWpIdpddHW6+WNGY9IKnlnfLIg5jJ:sxZrpb/fLstj2pdPHbGEfDT
TLSH
T18322B7126E38A47B8CC7D20DBB59BF53E6F9503291941E58EAFC961C04E7ADD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e0e192fa56a721c9c7ce6d04e5c00ea5267428b584a793019f59782a52be20e0
MD5 07ad496d5c77957541cd62207fd9741e
SHA1 cc8db2733abf6f475f05c3277427c607fde2571f
SHA512 5d04b3833c97d52416b3b9347e82ced49c3039074de6465da3767b2b31d6d63ebab930fd22a14432bc29ba7024a41d33ab43ce4a7aee18f679de187cb80299de
SSDEEP 192:sxZrRwkb/fLs+j2pWpIdpddHW6+WNGY9IKnlnfLIgrJ:sxZrpb/fLs+j2pdPHbGEfD9
TLSH
T17222B8126E28A47B8CC7D20DBB59BF53E6F9503251941E58EAFCD61C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 dffb0bfbcab7380ea667d27be54058e95f83d2f2b31b558af5daa5bf66c2a2fa
MD5 ffba5b3faddb398cc865a2f4667194fa
SHA1 2d7d7bacbce82b65660d4734a02e31dcc2047dc2
SHA512 fdc685379ef9054b87ef1ac98a8200fbb59e5c4ba9b286aca757411855a3ec33cfe08c6352067490d76270afc19b108f4600910d0d53743b524882add51f4433
SSDEEP 768:YkyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7Hrobbqo:YkyvIZwWvu+Q+u1jamFLeR7UbN
TLSH
T1B7C2E92B240CCB7E5F801A9DDD5A6F9B3EA802C7A7588D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8830efab846e3399f09454d18472b4ec91cfdc103753a31201f1baf89a8476fa
MD5 5778f050527a311f11b5b57b148bfe59
SHA1 699ad6bdb2a28490ee78c144d476aa01dcbcfdb8
SHA512 85ed5ffbbe09402e4a8634cb5daaecff14666043c67536fdc77e4a8add3a3079a48a4bc60d4b5273cf790d17223273d4be3262a83f992fa8544d4dca53b75c78
SSDEEP 384:sZcIhsNtqUGqizi7KBFdue+CeODejhv1kcopQxJqoIM:6hfqCRBFL2Oijhv1PopQxEoIM
TLSH
T10B929E71AC346C7A5EF6A649F98B31278EB88137E6852F90D4DCBF0D01DA69C1306D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0528d9834bb0ce43ef63032e2a939ea57d526e193f8bc78bd188212e62e68221
MD5 bcc25bb829cfc45854ee337894e432e2
SHA1 accc3b2e6fc79c31c136e4382004c33a181fa890
SHA512 f63f1f1787938775e9525aed0d0e2de7281b748abb70b71a32ab6a9fd2c9b1304099f4fdfe40f80cbfcb1d2ec5c0ccf07353514e0418f336ba74d1187b253f7a
SSDEEP 384:uZcIhsNt7UGqizi7KBFdue+CeODejhv1kcopQxJqoIM:MhiqCRBFL2Oijhv1PopQxEoIM
TLSH
T107929E71AC346C7A5EF6A645F98731178EB88137E6852F90D4DCBF0D01DB69C1306D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1c4c6d6eb8b8fd2939f83868cd979f5c6226d6a8f974414c578bee5b9acc1edd
MD5 25ccbe51d4a64a62203a127a1a9298fd
SHA1 c85c806928441787de9df9ce10604f04ab2141c7
SHA512 89964756f6b6882154b55d15b79d5207392df1544ef3ab9901615b87e1a3a145782bf1c187b9d1b23fc4bad5d8248543266f28251ee79900205cf6a7ae1fc2e4
SSDEEP 192:JONj6v+YLNQmiUyGYtZh+CGLOD9oquslZU6:JONj6vz/6Zh+CeODeMbU6
TLSH
T1A702E935BD282C7B9FF2AE45F98736279FA8117BE5952F80D9D82F0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 40105fffdf96a2c60fd25633df63f8da936488d00571280f1f168604fa4ee793
MD5 ede24a54fdb2f27ede6f96ba9e930991
SHA1 b0a3d37e5b02b99cd254bebaa9f9e4167a6314f3
SHA512 87c2b6c1b749dce2fe7408b460a0620e08a4c3269bceabc32a0123284705db552eef714f4315f5d7b7157d8cedec6c45c5b1eff01dc6fcdce9ffb530ced6519d
SSDEEP 384:BZcIOsNtqUGqizi7KBFdue+CeODejhu1kcopQxJqoIM:JOfqCRBFL2Oijhu1PopQxEoIM
TLSH
T17E929E71AC346C7A5EF6A649F98B32174EB88137E6852F90D4DCBF0D00DA69C1306D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f448daa3-f1d0-4350-80ae-daf3e6b95e21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f448daa3-f1d0-4350-80ae-daf3e6b95e21.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download