708be501fb993ecf316648afca19410e92b420529e41bb662e269e713498c25a

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 172KB
Sample260827-pmx97svarf
SHA256 708be501fb993ecf316648afca19410e92b420529e41bb662e269e713498c25a
MD5 30f085743e9d771c9e11b6cac4cf5eac
SHA1 c2208839fce9359d57c2601f7a06b432d8b33939
SHA512 ccc54209db4040bca200c88e5ebffa2596a5e320e749f69fc4489ddf8d8557f047b1530695c1b1faf47b1d29d609a026927af9b9e4974401b9b7ce90f6939fc8
SSDEEP 1536:Y01jpbLWRzHU3SUUYwkLqMzVQRw6JcOlu7OsnD28yzcBrfAL/1ePHuzR3LEG8HVg:Y01jpnWRzHU3SUUYwkLqMzVQRRb
TLSH
T1F304FB62108724E71B3395C8F476470F71E6A17EFD030F01B7EC96AA9BD6C25A9358C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323072524473460"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{B808E653-7F17-4F36-930C-16912175D242}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe
904	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 904 wrote to memory of 4472	904	msedge.exe	86
PID 904 wrote to memory of 1364	904	msedge.exe	87
PID 904 wrote to memory of 1128	904	msedge.exe	88
PID 904 wrote to memory of 1128	904	msedge.exe	88
PID 904 wrote to memory of 1128	904	msedge.exe	88
PID 904 wrote to memory of 664	904	msedge.exe	89
PID 904 wrote to memory of 664	904	msedge.exe	89
PID 904 wrote to memory of 1284	904	msedge.exe	91
PID 904 wrote to memory of 1284	904	msedge.exe	91
PID 904 wrote to memory of 1284	904	msedge.exe	91
PID 904 wrote to memory of 1468	904	msedge.exe	92
PID 904 wrote to memory of 1468	904	msedge.exe	92
PID 904 wrote to memory of 1468	904	msedge.exe	92
PID 904 wrote to memory of 4508	904	msedge.exe	93
PID 904 wrote to memory of 4508	904	msedge.exe	93
PID 904 wrote to memory of 4508	904	msedge.exe	93
PID 904 wrote to memory of 540	904	msedge.exe	94
PID 904 wrote to memory of 540	904	msedge.exe	94
PID 904 wrote to memory of 540	904	msedge.exe	94
PID 904 wrote to memory of 4592	904	msedge.exe	98
PID 904 wrote to memory of 604	904	msedge.exe	99
PID 904 wrote to memory of 4592	904	msedge.exe	98
PID 904 wrote to memory of 604	904	msedge.exe	99
PID 904 wrote to memory of 4936	904	msedge.exe	101
PID 904 wrote to memory of 4736	904	msedge.exe	113
PID 904 wrote to memory of 204	904	msedge.exe	114
PID 904 wrote to memory of 1376	904	msedge.exe	115
PID 904 wrote to memory of 4604	904	msedge.exe	116
PID 904 wrote to memory of 4604	904	msedge.exe	116
PID 904 wrote to memory of 4148	904	msedge.exe	118
PID 904 wrote to memory of 4148	904	msedge.exe	118
PID 904 wrote to memory of 1580	904	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff4668c188,0x7fff4668c194,0x7fff4668c1a0
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,3141800514433921909,13720587740306376072,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,8021851332407335240,6684719608711358279,262144 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,7274927099171598055,3556450591818529921,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5561375652341927941,3223712967578124008,2097152 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,13713944840100323162,9479277645126779645,2097152 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,2230854564022907011,6853647234276338976,2097152 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,3300970115063099039,1299332296917355482,2097152 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3508,i,13822774275665905520,11418545313524361846,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6164323205003613634,8327166958652182145,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,14319765400966396081,2651803884658926903,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,14319765400966396081,2651803884658926903,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,9688617144476862493,14611981457785880115,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,3717177887090313435,16514272509253673140,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,5282772797610248899,12611148121066330005,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,5740857149260637802,16230738648049662973,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,11687055587496888831,11774833037287792345,524288 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5872,i,9890217691105920664,13847890124993474937,262144 --field-trial-handle=2276,i,926287350834320795,7803111741034085101,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1580

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f1585bf9f4cc0f0c332d5f7abf3a339dda08bc533bff40a8331ac576377dc509
MD5 5dcf3d59fdd0671a03f6c344e38ceb65
SHA1 b84d4eb68e59416ac0c27075eeba1f1c76304370
SHA512 bf020674a0abe9971b3a94a008da1638b392b9767f87f703a0349ced11fb7aec0f601b4864bb41889fcf02740db4a76ec102d2a3a1ce6f999d58e071c206afaf
TLSH
T19381C639C20301A5DB2D01B9B1CD112C34FB9AE9FEAB1E958CD56B7678323D5E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b457.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b457.TMP
Size 3KB
SHA256 ded8fc6ea380a501dd70a39e0be4077940bb60a71560a21d10398b8b15df040c
MD5 1cd3ccf5e8f0c777d7719711dfc40f47
SHA1 24e70e20c4813e8aa79b07794523f7d9824a0dbe
SHA512 9b2311d2a57104cd8b287fd021e180a4a527ce913e706ca0443117137e587883f14bad0934b318c91cf4b14454627ce2f98e0f3448eb27d5e74c582ccb2e24c0
TLSH
T10481C739D20301A5DB2D01B8B1CD112C34FB99E9FEAB1E958CD56B7674323D1E39825C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a8942a7f5875290f9baf9f83771c54a4e5d2345e24e6fcd5ad491add447b9bd4
MD5 bcc66772cde726a9f8e8d7d429de9cf0
SHA1 be09191db532053ddb273b351c245f479f2ad31d
SHA512 2771e79f58681126d14ee9a70744f3e2d88a15d85ad9e4f15160e4c67b69a8b86a14e48e34df3dae011b2e6c25bb681c5cacb91d7ba755ebb801da67e8cef550
TLSH
T132217CF787E0866E890156F0DA24AE2BDE1D0516421C7C2589E4BF2B93F3475E00265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6ef1004dbfc4f34a115e99cf094b919a70f95d34837fa9a95786cd7d8cf9f281
MD5 2d3f376e446970a1a0fdc04050167911
SHA1 11373400278c6437cdbc330c70121013cdb869c3
SHA512 beda74a1715eff3d0f221e77cebfdcb9f731d7f6bbb47d7543a8da1400ac376a277e240a9e52bc75c68dac25802dd29a7b8f72977a6c8263d56e0ed6b12e8ff5
SSDEEP 192:sxZaRDyM/jK1Ml8Mk7/frsvsONgIdpdUHW6+WNGYzQoE0MIgrJ:sxZazM7/frsEOr2HbGp9
TLSH
T16A42E7126B34A97BCCCBD209FA457B53D6F9147292900E44A9FCDA1C04E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6fa91c1dc8e09b8117d8eb0280ba4f2beb9935830ba428f47d50c2204c6013b5
MD5 0172106f3c4ced560511feffba310ace
SHA1 6ddf0ae2b2078d928b7cd8dd7ea330e742873f6d
SHA512 c06ad7c00cd33cff74afc8ed1df33418b77272da8467db4faa03231a271b1261057d791b67661312bc472d341c2fcbacd32301a1c6e713c857e33f29d3e1020a
SSDEEP 192:sxZaRDyM/jK1Ml8UQnk7/frsYsHNgIdpHUHW6+WNGYzXoH0MIg5oJ:sxZa9qk7/frsRHr0HbGrG
TLSH
T17C52C5526A34A977CCDBD219FA41BB53D6F9147292900E44A9FCDA1C00E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 06ecbc8a305e05e9cb8f37bc110aabd677a62facc1fd3e5bed47ede228d9963c
MD5 28f3cbbf0e3a1ae210e846e7bda1983c
SHA1 ed690732483ad9c14693384e78d78d9b8a06f566
SHA512 3f1bff2400224e4edfa325b4fedb3423d015e2ff42e2a2c09f4f74b5e0ccd197677789cb602b9443b3727b443bcbc57809568e50e3316a0eabee43e930b537ed
SSDEEP 192:sxZaRDyM/jK1Ml8Mk7/frsYsONgIdpdUHW6+WNGYzQoE0MIg5CJ:sxZa9M7/frsROr2HbGpM
TLSH
T12142E8116B34A97BCCDBD219FA417B53D6F9147292900E44A9FCDA1C04E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7b7f2b0dd47c157f25d2d0aeb2c69fc30797e76d4fd29057a3a9d57f0097e89d
MD5 8d12adbe91e5f99b936e7fdd26a1ed0d
SHA1 2dd9bdae9e418bd47faea465c7dc3488db34bc66
SHA512 99489f98542f3e9a3b018a568659cac5cc6a9c5fb780e1c29dadd45651c3189803a6936677a65cdad17e1c4ac4bc3ea03d56e4e59c25a1c69493a4f4ce522daf
SSDEEP 768:f+W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjAroIMitY5:f+W7kf0Wvqidau1jaa5LA3jL55
TLSH
T118D2FA3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB7EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 87585025199428defd2bd1a5f1ad3ea37949d8c621f8abaf372c2dec38606da7
MD5 0a68a0dbfa57e9497712c0f80a2f74e6
SHA1 43c4a2e6434057cad46c3d9fb4c82ebcac128a6e
SHA512 b25403c33bfdcaa6a6a4db2c96716d28d9a51d75a7dc86c3ebadc8131e116d4072936b7f3b85b56410bfdd8ca546657ff70371497e7f8926494689849e35a82a
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTjNIdKeQAXyhIIXKJukIvIFK0U4y:KIbCKcjNmKeQqCIwKJunveK0Uv
TLSH
T17EA16583707B465138BF29989295C5369E4235633418E8BF7BB854A21FA7E110DFCDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e8c32dae0376dc677d125f8a1d673cf41deb898f5aab3a96d562a0d6d7296602
MD5 a6f8e11882aec1e4876ab2174319aba4
SHA1 54715e62e9d305ae22076bf2110e72607262bcf9
SHA512 22c5b1468502c68b7968a8f9a4423f7fae058346420684b723956be83343140827dcb7a9355df972b0f95037e8879039e3c164e596e788a2cc6363dd6765a887
SSDEEP 192:u0LsNCjRQ3tWsn7BvGBbIzQmiU1ki04aGBPKT++FdGsr2PNTdNwqQSj3Mi:5sNCNtK76bgxLGdpqbKSj3Z
TLSH
T1E7423A35AC75AD3B5DA3A141E48B36035EF8416BAAC46F44E6EDAB1C01EF39C130B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 616f0785a1fb4294abff44f5095e1c35553e510c35793bc944a8b0b54655e4f1
MD5 fabe0b7821b743a0cab4d34babdeacc6
SHA1 81573d476ac823ac5f54038e1a05f5f96ec45197
SHA512 6241d8c6ab2a9dcb9c6210749e6521837c7ca9378725cab5d4960c0c5da7b3de64428ea3af8adafdd84d97d48e97e57bfe0368a89bf35339286daf3c8cdb7a5b
SSDEEP 384:BZcILsNCNtK76bgxLGdpqtKS+LBNj5E+oV:JLVKm0SwKSWN5Ve
TLSH
T1D7928D719C786C7B58A6A114F58A26035EF8407BA6C4AF40E1EDFB1D05EF6A5130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 68fb2147d0896a6fa9a700e867efc78d4ae1b247718f3ef8a4246c5f6b339ca9
MD5 91bda9ed77ba7828fa3db3ae0d25d2ad
SHA1 1578fd390041dccd3cebdc9060151a3f3fe87c5a
SHA512 9a28acfed6a0d17665771bc4bcda6647d205c70df6ccfd49e33779a5ac5ed7a926c6a7c3692435bcc5f72b4f438619dbec1e3e9556a497d2820376bc4a77765d
SSDEEP 192:MON064BAQmiUyS1tW5GBPKT++FdGsfaDZouU6:MON06eApzW1dpc2uU6
TLSH
T12A02E934AC796C7B9EA2AE45F58627175FE8113BA5C41B44EAE85B1C009774C234782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2c5062173927767fa97dc8b3536721232186727b2a3e187034e2314d6744aa7f
MD5 05d26eb54c4dcfa2ff6de9075aff3763
SHA1 980d0a75115d7c45f0483122a8c72910877b0522
SHA512 5922e52d471994a3960c26f73d1ff6aefa81bc8dc46e95e7da1ee75b3f9d565f4f5030b704b4e58532ff445f01e72dcb435a349127a7af76d4dbdb78fbea3903
SSDEEP 384:WZcIhsNC8tK76bgxLGdpqbKS+LBNj5E+oV:Eh8Km0SsKSWN5Ve
TLSH
T129828D729C796C7B5CA6A110F48B26034EF8417BA6C46F40E1EDFB1D05EF6A5130682A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e69a156266e9530973f1a0858cfaaf74a6bfa2dc81a4f772c91a32f9db70c906
MD5 1347c6342fe397237178d4d6d6ea48b5
SHA1 3da76a66ad56eed8f9a77c9ca7dfa54fc29ed1a7
SHA512 f37e07f4538e61df27861a7fcdeac842de2b20ccbe88b3cbd08693a8ef56033d6ad9bca6e50ab018cd0da65fd879ae5d3e3575a7eeebde1fb5ab36561ec61fea
SSDEEP 384:7ZcIhsNCNtK76bgxLGdpqbKS+LBNj5E+oV:jhVKm0SsKSWN5Ve
TLSH
T1E0828D729C796C7B5CA6A110F48B26035EF4407BA6C46F40E2EDFB1D05EF6A5130B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e2c3c35c7ef3db1c5fc7643988381cf1a0745858e348d3e52cb0a7f17cab14ef
MD5 dc62abfd3eee7b8b874ec6c64be841c7
SHA1 6a71ac1aee3b40e684589c505d88364554f0238f
SHA512 3864cb462e9fa955e7cb46cc573827a8d4b675f025f28941a54035dd994f66e84e03a2e722ec4ff51eab5768720fa8fd476796ce5db1def0df33ded3b8be8608
SSDEEP 192:aONj64B9QmiUyXtJ5GBPKT++FdGsr2PNKWwwqQSU6:aONj6e74J1dpqIKSU6
TLSH
T1D7120935AC696C2B5EA2A551F48736035EE8513BEAC56F40F6EC6A1C01EF79C230781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41c01753-1006-429f-b6d2-b67282474b98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\41c01753-1006-429f-b6d2-b67282474b98.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 887107db5d82d28e68bad0da155b6d4f86bb9b12650e9467dea2ed05b7a7607c
MD5 d2b1c103ba0bc1d52b6371cbd7391a08
SHA1 f4e7ca4c0f5bb0b91fbee37cc6fd588aeea8d80f
SHA512 7054780f3e58eee98c1c8df203de5007039a27d82ba5f1173be16d96a1c403213c0d55aaab3e0b3624ac40502426936a89cf5490b0a32f48ad5d22408af90995
TLSH
T1F541D66CB6EA1148B3B77F169BF6696E487FB9372F07949E00010D4E4A36B40C961B37
MD5 SHA1 SHA512 TLSH

Submit Download