d611fbc784642f54c714eb8df439d3d9bc3a8e4a641223c1fe89000e5a08b6da

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 47KB
Sample260822-pj56msgp81
SHA256 d611fbc784642f54c714eb8df439d3d9bc3a8e4a641223c1fe89000e5a08b6da
MD5 72581bf3dbba76d1621cdf33639e3763
SHA1 af0861cb9225aa30f9ee3f6f1dcdde443158167a
SHA512 8db469d0167d6ba4011a670fb2aee0991464abd0d29392ac48846a5a51ae50032402a93a2af0e7849a434e70c7e2256dcac0b787e1bedd8facd9307983804162
SSDEEP 768:aDHpEZy5oMcmW6mKFzRAVHj08d8GPMWLMB3/qKN7eHd5b3Vg8:epE7HQ8d8TPN7eHd5bl5
TLSH
T1AD23222514C66837027341E96A312F8AFEE1820BE7274A5172FD27DB6FF2D06CD23659
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4528	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318749697263259"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{BDA63182-4192-43CC-870B-0144C2BC1DC3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
392	msedge.exe
392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe
4820	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4820 wrote to memory of 4768	4820	msedge.exe	85
PID 4820 wrote to memory of 4528	4820	msedge.exe	87
PID 4820 wrote to memory of 2608	4820	msedge.exe	88
PID 4820 wrote to memory of 2608	4820	msedge.exe	88
PID 4820 wrote to memory of 2608	4820	msedge.exe	88
PID 4820 wrote to memory of 2372	4820	msedge.exe	89
PID 4820 wrote to memory of 2372	4820	msedge.exe	89
PID 4820 wrote to memory of 4684	4820	msedge.exe	90
PID 4820 wrote to memory of 1864	4820	msedge.exe	91
PID 4820 wrote to memory of 4684	4820	msedge.exe	90
PID 4820 wrote to memory of 4684	4820	msedge.exe	90
PID 4820 wrote to memory of 1864	4820	msedge.exe	91
PID 4820 wrote to memory of 1864	4820	msedge.exe	91
PID 4820 wrote to memory of 1984	4820	msedge.exe	92
PID 4820 wrote to memory of 3448	4820	msedge.exe	93
PID 4820 wrote to memory of 1984	4820	msedge.exe	92
PID 4820 wrote to memory of 1984	4820	msedge.exe	92
PID 4820 wrote to memory of 3448	4820	msedge.exe	93
PID 4820 wrote to memory of 3448	4820	msedge.exe	93
PID 4820 wrote to memory of 3312	4820	msedge.exe	97
PID 4820 wrote to memory of 3312	4820	msedge.exe	97
PID 4820 wrote to memory of 2484	4820	msedge.exe	98
PID 4820 wrote to memory of 2484	4820	msedge.exe	98
PID 4820 wrote to memory of 2388	4820	msedge.exe	100
PID 4820 wrote to memory of 2196	4820	msedge.exe	103
PID 4820 wrote to memory of 956	4820	msedge.exe	104
PID 4820 wrote to memory of 3188	4820	msedge.exe	105
PID 4820 wrote to memory of 5036	4820	msedge.exe	106
PID 4820 wrote to memory of 5036	4820	msedge.exe	106
PID 4820 wrote to memory of 392	4820	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x298,0x7ffc0125c188,0x7ffc0125c194,0x7ffc0125c1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,1138692577055085704,16647553516626676849,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,18026438878193202122,97229774634642015,262144 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,13975904964854800906,17847574953563885432,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,7540464644272432562,1099142179522968337,2097152 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3336,i,11518102340576923033,13535090963542500175,2097152 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,9752849841150468212,4608448069158153667,2097152 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,13436159107861713130,2937190670546046142,2097152 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,15344599678651802581,6719626460310368763,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,8346776209559538612,8559874513215429892,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,6427302263146409730,10901833703039823683,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,6427302263146409730,10901833703039823683,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,16248422868399534364,14188459412955428828,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,15129045797229822069,13131601844061799886,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,4978769315123077361,1392710256126852165,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,14209662818704007074,6075141038264907381,524288 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4496,i,8039636029325212621,14952942850500678091,262144 --field-trial-handle=2328,i,10815516230775337200,15180538887532699018,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:392

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:8

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f2620e3b7c07c999fcdd1bdf4c34b0b14c0f8e1912fbf1f9fb96b0b96f583fb0
MD5 812dae669bf76031e70153a3d17f1471
SHA1 82ed6e4ecd1e90b711c0b4aca0b7d88d9566d619
SHA512 e57715f7a40cd38d8a1b80f2de635300ae9a23e212e9a2ee9827a4ba938e5a274739682304273c3743b1fa2e7210fed2e8b448433036eacae010c6aec75e73b5
TLSH
T116715DB04DDB0563FB61803268E332667731B7FAFC175E9502E24B342795761F05A020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587829.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587829.TMP
Size 3KB
SHA256 a5d03a0b6556d4a2450381dea4f77f4b9ce086e25c028daddffc6392306093c9
MD5 fc1ba9e24afe774fd7d65d44a7bb8b9b
SHA1 d4733192e0f565f940a7f511fb9d981176177b7b
SHA512 34ea8c8c404f315e59d5eae679a8903b7f9141c87dc7adc1cf2e2b10ef722deb0061347f70933ef3856f179582036265de7c0085ff4cd7f34c5523f95db98db3
TLSH
T1BC715DB04EDB0563FB61803268E333667731B7FAFC175E9901E24B302795761F45A024
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3c3adf2e4f881b5c4a98be023daafa41635242d4fed53a442d3ef45758571d12
MD5 61509d5abf21075f3978b51cd2a23ddf
SHA1 0e012a7b0f5a1381372aaefa0f59116b17afe9d5
SHA512 8d3a4ee6d06479fa5ac9d84f2e147e476b6fff49f4622c5a004eb9b9c579828c4daa48e4591b632db8beb2dc209d6621ecde1df76b76d6f9062443b97a65ad8f
TLSH
T157317FB7C3D586AE890116F05F24AE27CE1D051A42283C1AC9E4FF5BA3F24B5E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7b4436bacf9df91fd6309167dc2972ef7d70e688910542d68282be89c745b2a4
MD5 f0a794ce794c756612e5c4210b540a81
SHA1 bd915c999a19b20865dc132a9eb37e6bdd26fd6c
SHA512 d1c0ff7c4f2cb2b22f841e8b404de14837f96163c41dae1ceb731892c7724d64107936bdfc397d5299556b4a8c16ec4fec60038bf4fed3fb5422250eed9d96a1
SSDEEP 192:sxZGR4yM/jK1Ml8Mk5/f/sBfhuIdpdgHW6+WNGYIkTD+lhIgrJ:sxZGyM5/f/sBJ/GHbGm89
TLSH
T14C42F8116B34A977CCDBD20DFA45BF53D6F90472A2940E44A9FCDA1C04E6AEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b8aa3485391ee54c473c0e2c3569fe11cd68ffbe65d1816b4d9b7d7da2b3d1eb
MD5 ca67fa5632ecc13472952dff5e26868e
SHA1 941cb563e32dbd4da3f87e71748fc59a06383da5
SHA512 d1c3f40bf257419a2cbbd7193394416efd356ec6962640fa2b5b1aa4b6559897db2e2622452ede92d98c706da0b87672780cda1f12993029beafe79204374e04
SSDEEP 192:sxZGR4yM/jK1Ml8UQpk5/f/shf+uIdpHgHW6+WNGYImOut+lhIg51SJ:sxZGyqq5/f/shW/AHbGG86
TLSH
T18352E8116A34A977CCDBE20DF941BF53E7F90472A2901E44A9FCDA1C01E6AED621781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 971e475813530a8abf94692917a80fb40aff357c330e686a360248d9c910b80b
MD5 4a282129490b5971e6c28342243cf019
SHA1 3ef31ae99598311a9d3756e88a3a230abc62a046
SHA512 68d0ee070d6c1955276819e2eb542b86fcf1e5c2ec5b7cd7f7ffd1aa32bc8abfdbd5864edb1b51345c5c8563b9273469bb83d355eade9b71c679d7719b0e7e9e
SSDEEP 768:YmsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9jroANmi:YmsqxXlWvJD6Tu1ja54LAs9Q0F
TLSH
T165D20B3B694CC77E4F840E5DEC266FD76ED801CBA6988D5447FA884C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 d2cdba7f311b89b7ac6992077adc948b48e97b807970b2f0523378307c8c2a59
MD5 4ad2a34d1f0a19adc0ff5a784a24636f
SHA1 c248064f60cf7d6f4b23ad35b94abacbb3138cc9
SHA512 7e9e1fa92b660b94f19ec04ad5fb015e3f204df661302ee7bae1998e78f1dd11d13c9d6e1cbc9df1c1d4f486e2d5712c3bad92b1c14503f8709e932bb0a1c819
SSDEEP 96:KYbaKYIK+P6Ko8uutGKuIRJKKqQaCMwKZ2Z:ExZBdPxzS
TLSH
T182E14C42713B821238BE690CA27695378E8373A77519A56F7F7870720E66E110EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

764ad659-60d7-4c09-9c2a-b8dbec156178.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\764ad659-60d7-4c09-9c2a-b8dbec156178.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ccd3a3341c1ef011122fc5e817dcf794d1b93fe01a99c58edb0ed5b6d8b0ae1b
MD5 d6e788144a6473833555ef818c090b7a
SHA1 41c066fd3a0e73c301d7607148f364c6df720f87
SHA512 66c2e833477b7ad0e0cdb0e29ab41d7d2530059574b6c7ab7f38e3ee443cda8277cbe9854548ebd675de3367820819c0f40d2db09e3df75a81516fefa71e7315
SSDEEP 192:uXLsNMUvQ8OAkRbX+QmiU1q9n4VRNVOmSY+y6l9nFJSRvBqtiU8:MsNMUvfODbKw4VRNVOK+t9FwvZU8
TLSH
T189321831AC385C7B8EE76545F54736139FB8103BAA892ED4D1EC6A0C01DF69C230A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3412c8b5e719e930da79e297736c2883b196ede3ae18ec58f2ae846b048155cb
MD5 cfb268da2aff8e98a99dc9a7082869bb
SHA1 69f6da4d1eff7e8e5e19fb8fe1f9c04209bdd10c
SHA512 7e76d6e3efec7b4a2d9f12aed4018a5e91de5bca06bf7c153381f0ca41cffc54fd204398dfde723f128b1d2cf9212ebb7b7f6a0d472c852d70d22f1e5cbc030f
SSDEEP 384:UiFiZcIRsNN8TUNTUlIlSfODbKw4VRNVOK+t9F1vZivtuLoY:vFQRswgGO/uHVOKs9nvZiFuLr
TLSH
T164A27D724C648C7B9EFAAA45F94B32178FB84077D6C9AE9096DC9E1C01DE5DC1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0dba4e6fbc540fb7fa4d443dcb7496322fcb6ee13fb5d5df595efdf2ec7a5c1e
MD5 1e66603f543eb5578fb8c94afdb53049
SHA1 5282192a492b6a699c863cb29fd0a8950dfeac14
SHA512 89b076b0a1baf0968e4f6ecff47d53f734ed7308b73ce5dd062173c74e1ebd9bfaae43636999a3f31a6a90624eba29552e49289ad3fcb8f0473fda9079ebb764
SSDEEP 192:ufLsNMUAQ8OAkRbX+QmiU1q9n4VRNVOmSY+y6l9nFJSRvBqtiUt:IsNMUAfODbKw4VRNVOK+t9FwvZUt
TLSH
T113421831AC385C7B9EE7A545F54736539FB8103BAA892ED4D1EC6E0C01DF69C230A91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cab7cb491a7aa730cf31e30f9a309928b413e683b4578e19eebee6b3784eedfd
MD5 d22e83b13d6eadbdde89547052db7bc8
SHA1 b6b2d0f8d09587c06d9d2d53aa1c2dd108080127
SHA512 b217a3a4c9123d8cbf17823ba13cd94c90c0ebdb7a9131a27ebaf211bec600c17b4adf2b7361d2f58c2f3a860d1b476fc7106d2191c1683f71bd96886b30c5d3
SSDEEP 192:tONc6JkRtQmiUyEoW+RNVOmSY+y9h3vyReU6:tONc6UrYW+RNVOK+GvjU6
TLSH
T17902D8356D381C7B8EF66E0AB48B27175FA9203BF9856B84D6D81F0C01DB65C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5c1821c6805df4bd396e7b3d78455f8bfe830fbf0f2e6c9f924642881d5ae0ff
MD5 941b09084d9cdd4914fc76efc6d4637d
SHA1 a3bf278bb9dbc3d7670151ba6f4ce7f298b65b09
SHA512 19e786bd834ba0f3223f27386e15d7243faf08723fc81c1a5d081ecb5de53ca6118b7aa1c64eb34267955f00a99ccbe787c1bfe798586073fdbd14048008c426
SSDEEP 192:yON+6JkRTQmiUyCoI+RNVOmSY+y6l9nFEVcvBqtiU6:yON+6UF8I+RNVOK+t9FzvZU6
TLSH
T1DA120A31AC385C779EE26945F48736175FA95137EA897FC0D5DC2E0C01DFA9C130A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d69621ca7af4929f1064d1cec5cf5233246d42a90c28a905e9d348bb478a2c2d
MD5 304bf3a500f65817cb726a28b82aa6dd
SHA1 737814d37155b136270a3f3cfdd46623cbd7190b
SHA512 35ba2aa697c3fdf2ea88b2c098f6c2ff71e2b33f25bb0a67bf7000642e5ff629fda0ace95f8a93b4f4817d426aff5a0431a3e2cbe970ebc15be68d04d2045015
SSDEEP 384:JZcIhsNMUSfODbKw4VRNVOK+t9FwvZivtuLoY:Bh7O/uHVOKs9yvZiFuLr
TLSH
T1CD828C715C345C775EFAA245F58736179FB8502BAACD6E8084ECAF2D01DEAD81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fc430769535134b40119309cbc34916643533e5e6e536a7baee3f0a42616af28
MD5 d7596debcf2568283b9008e5794401a2
SHA1 7230f9abe4aed60f60675d8f4b66e062efaa2057
SHA512 2a663e2b4a8135d241d1d229533f5dd43c2b0886fa7b3b987b042c8a2c8ee881c645b077d8a5f712eaf99ba096495734a60916a029cc58daa66e696b210b96e7
TLSH
T116412A59B6F91108B3B76F5AAFF6A86D487A78373E0AD15D00110E4F0A63B01CC61737
MD5 SHA1 SHA512 TLSH

Submit Download