3a2ffd6778cb05e07f29548115ce05a6fb517da58859ae21a6a9da13a225dbb8

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 22:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3a2ffd6778cb05e07f29548115ce05a6fb517da58859ae21a6a9da13a225dbb8.html
Size 4KB
Sample260910-2wj56axbpd
SHA256 3a2ffd6778cb05e07f29548115ce05a6fb517da58859ae21a6a9da13a225dbb8
MD5 44dc43b7e215a2c2461e0550422b94ab
SHA1 15e509087e2f0c61b9888848cd92c58e587dd2a0
SHA512 a62c93e7589dc3117bd90221a1bb307a0c47004a7d6cef6ba29d13183c5c854cf367554aef3efb511df8747bedfa0a0a1e3dbf67ee17d653b1690aaaba003231
SSDEEP 96:nIzJBd5pAJ9/OEeg2J9LCBCfq/0CqR4oDt/2+/vlDjfq97BoL:IzJBd5pAKEj8qCfY0hBT/tDjfAyL
TLSH
T111A1E875774570299AF611E6F1BBA718363E4220380B4022E7AEFCD13C60E5B5096F8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4988	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335545598712387"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{CA7D5D47-64B4-4F57-A8E2-66863230C849}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe
3316	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3316 wrote to memory of 5012	3316	msedge.exe	85
PID 3316 wrote to memory of 4988	3316	msedge.exe	86
PID 3316 wrote to memory of 4132	3316	msedge.exe	87
PID 3316 wrote to memory of 4132	3316	msedge.exe	87
PID 3316 wrote to memory of 4132	3316	msedge.exe	87
PID 3316 wrote to memory of 1636	3316	msedge.exe	88
PID 3316 wrote to memory of 1636	3316	msedge.exe	88
PID 3316 wrote to memory of 3972	3316	msedge.exe	90
PID 3316 wrote to memory of 4060	3316	msedge.exe	89
PID 3316 wrote to memory of 3972	3316	msedge.exe	90
PID 3316 wrote to memory of 3972	3316	msedge.exe	90
PID 3316 wrote to memory of 4060	3316	msedge.exe	89
PID 3316 wrote to memory of 4060	3316	msedge.exe	89
PID 3316 wrote to memory of 4468	3316	msedge.exe	91
PID 3316 wrote to memory of 4468	3316	msedge.exe	91
PID 3316 wrote to memory of 4468	3316	msedge.exe	91
PID 3316 wrote to memory of 3804	3316	msedge.exe	92
PID 3316 wrote to memory of 3804	3316	msedge.exe	92
PID 3316 wrote to memory of 3804	3316	msedge.exe	92
PID 3316 wrote to memory of 1748	3316	msedge.exe	97
PID 3316 wrote to memory of 4600	3316	msedge.exe	98
PID 3316 wrote to memory of 1748	3316	msedge.exe	97
PID 3316 wrote to memory of 4600	3316	msedge.exe	98
PID 3316 wrote to memory of 4756	3316	msedge.exe	100
PID 3316 wrote to memory of 4500	3316	msedge.exe	114
PID 3316 wrote to memory of 2292	3316	msedge.exe	115
PID 3316 wrote to memory of 60	3316	msedge.exe	116
PID 3316 wrote to memory of 4412	3316	msedge.exe	119
PID 3316 wrote to memory of 4412	3316	msedge.exe	119
PID 3316 wrote to memory of 2640	3316	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\3a2ffd6778cb05e07f29548115ce05a6fb517da58859ae21a6a9da13a225dbb8.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd8cfdc188,0x7ffd8cfdc194,0x7ffd8cfdc1a0
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,14802201586076449351,11339464283079888698,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,13156464332697000012,16951471819330857843,262144 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:2
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,3718568874032710654,13060571160471489210,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3380,i,12359606643947064357,5654209688119575289,2097152 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,704197914123299779,14232398084731352915,2097152 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,1949788390854306876,15465450178706265776,2097152 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,8441639656355530770,4643390365842119459,2097152 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,12519021882394524688,2059082833246960493,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,18198683333221710108,1975679785273895006,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,8604455089259068802,18104734146963476653,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,8604455089259068802,18104734146963476653,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,15054573442104800271,8447324618589506463,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,7435997579247323214,5682899251137668369,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,3280039350251395018,16491195455850215661,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2888,i,3874042877564764136,12776368969482007583,524288 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5980,i,925884583941075426,9408578711139951224,262144 --field-trial-handle=2364,i,13080232101451354725,5703200537647503563,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 96998cee1003ddf63dd5bfde4c3a115e1ded276d9dbd660318d2de183862c5d5
MD5 42f1c29d3869c9891bd2c5abd5e3ffb6
SHA1 59a52ee335e35de87dc7e2d3a360e6f5c0240083
SHA512 baa9e6bdee96c60b511972c8808b1b010574cef577779f5e7fff960a6696e9feb6ccff44d89fddba43e3f19dcee836dbc3ad8953b015c84b70ade5aaea2e41a6
TLSH
T17561A218065259F4EF4D4231D1F1DAF27D31809EEAFB9EE1B0842C7F6C05F4561062D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a7e3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a7e3.TMP
Size 3KB
SHA256 4d5f038eb802442d7d16cc2865d756c78685e576f55ac81ae370bc70372ed7ab
MD5 4486bdc6f1fd9400f0e4295beaeea8fc
SHA1 c65fe48c4381a152fb115e4b20d3a67cc205d99b
SHA512 5ee58276680fabad0d1541fd54b882ca6a0437717083509f2fb60e0bd9695d1f18223734408b83e248588d9624b6b6c86a6532497c45fe63f1872967a8a550e3
TLSH
T183618118065259F4EF4C4231D1F1DAF27931809EEAFB9EE1B1881C7F6C05F4565062D8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 967B
SHA256 c1982a337f4141798d4f1c317eb2c9c9b7fd54d6bc28e9add26fbaef6d917cfb
MD5 78b39691ee235941813f86e67ae1b903
SHA1 e4ecc88faadcccc6903bd2018324fe830ee5f92d
SHA512 c62646c34be230db854ec1f3f13c4ac0fa8e00b2429ca86a3232441d3e0f7980d4575de0188d92bcb8b6e4ecbe9badc1dd3e638bc15865212825e11208fc814f
TLSH
T1D81171B7C3E5967E8A1156F05A185F1BCE6C0507432C7C6689E4AE2753F34B5E00169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 40ced92d70023a9bfdaf02dd0acd287469aea16319683a4952e505afd1712be3
MD5 b366000a26aa44f1c90f6f0036b23844
SHA1 acd64e9dfd35689459af18c9ad18587d505d6e60
SHA512 8a7890e5a849514cd4c437199b37bff87a2ebe9ffbe7e8a57cfa181f5a0297c39a6202ea085fa1277a6ceecbcab24ecd6865d6b2e3c367100cd8c12341a8f48f
SSDEEP 192:sxZtRjyM/jK1Ml8MWS/fVsrqIdpdXHW6+WNGYHjQq1IgrJ:sxZtluS/fVsrjBHbG49
TLSH
T13242F715AA34A977CCDBD209FA557F53D6F94472A2900E44A9FCCA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d4e7cedef0111f162e6113138011a9cd26daa754169ae03372f7202f19d8af04
MD5 c283a1402b37f9ae34f30eb799c9baf4
SHA1 6955e381d440dc5109c909df0186d1e2c5c059c2
SHA512 b3e0fa30e278e3cb5817174591b74c91a3cfc7e8684e8f52de6de1dfa80fffd2261f31e8e270c398cf3abd95a0ac4d7790702bcc61b415c31033b719c19d0a82
SSDEEP 192:sxZtRjyM/jK1Ml8UQbWS/fVsRGqIdpHXHW6+WNGYHLnH1Ig5VJ:sxZtlq6S/fVsoj3HbG29
TLSH
T10B52E615AA34A977CCDBD209F9557F53D6F94472A2900E44A9FCCA1C00E6BEE2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 157087b08481cddbed964e351b2e80d2da802f7da38c88237f34b79df5125833
MD5 401ba06641db3f99e921c1e619b9cd45
SHA1 3f3860d6aeb61f09af0b4f2466214e2290ab7e7d
SHA512 7047f4fadd5312eae9d4cec02abec310d86fc8f3700c3c6c11d3169e4246903036a0979d6bffc480fd9c058d95ab68098529a4138daec0d35623a45c51535735
SSDEEP 768:C5UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RproVB01:C5UZYTMWvg0Pou1ja7eLZmRC01
TLSH
T173D20B2B280CCB7E4F844E5DEC2A6F967DD801CB5A584D5447EA884C03CB7EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 ee053c31bc5f5b9ecee6e0c64886575d6717aee47ff41bac5b474d869bde97df
MD5 b8ef5369ed1b2cfafb40a0d9f344c44d
SHA1 b953d389b0ae1bcf612d8238fa086ef46ceaefb9
SHA512 5ccecdbb6cbd84c5376e579a87c36bf7d72118664f4e5e1c14786541af7ea698f9290c6ca42ef81ba1e6fc933b48bbac1d65bb5a58d73a9d0c5384a144dee390
SSDEEP 96:KA1eK2AUe4KLSumpCKaMFjGKw0y+JGKCg2:Eq75nlN/
TLSH
T1D6D18A1630BB0B073DBE2A09A654971A0B4171A33115B52B7BE904B35D2FE384DFE8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6693ad9-d8bc-4488-85d8-f3a9797d00b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6693ad9-d8bc-4488-85d8-f3a9797d00b8.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594358.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594358.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a03822d8aad9ac2c045d56bc9b010214aa9b753172f7ac254e219d5538c61212
MD5 d07f9ba6bb22e351a354d5f8326d807a
SHA1 31997cb88a222bbc696c8d47146a2d597b9d453f
SHA512 c56906d4bd122203ab6001e9b189f792d88fa9b2ef38dd613254e5bb9869dbc350e8d1c8b179b2e4c50fd1f451ee0384186b96411a2ba938f9efe81fef8602ae
SSDEEP 192:u4LsNDJQ/ioqtAGgQmiU13iG4zX5Obd+joOpmiO83i4QrqVU8:JsNDJ5oQUoJzX5od+8OGQuOU8
TLSH
T17C3209326928EC379DE3A595F44B3A039FA84067DB843FC481EC2B1C05DF69D231AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 20470bce2349b6815a7d9fb3e0a1ab3be061d85fd151e6e036387e0d302018a0
MD5 b9bc5964bb6c49372e1b3ececa0080d1
SHA1 cb278f205d6e35418cfce296218008bc70b085ed
SHA512 bb6212ae835e02f3cb55135d1d12e4504bda6ef68c0fd43dcb257eec7ac22d9e348f4deeb0ea129df33d357726e6e1d6941bbecb6aaafa197f724c9edcb0945d
SSDEEP 384:8iFiZcIZsNd8TUNTUlIlG5oQUoJzX5od+8OGQOOxuvzxV+Mhdp2B5o6:nFQZ8wgEoYxOFOGHO4184p2Ph
TLSH
T1C2A25D725858ED7BADF7A645F94B36038FF880A7DA84AAD0D2DC6F1D009B299130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 da70281e630b2f93ba03c7c94c7b1bb9b331bc036e8a1de171038575cc446795
MD5 08cb763438efe38bd8e1fd0a862f7573
SHA1 8a02c9516149362ad635790a8efa69feab241cf8
SHA512 088a1832f86b3ebfebf29feaa848814fec1ab6bbe6482da2091dc128d180ebf1768dd56cb20e98812458b995d9ba072969eb50097fbd48a3ae55f74de3130e4b
SSDEEP 384:AZcIhsNDG5oQUoJzX5od+8OGQuOxuvzxV+Mhdp2B5o6:+hjoYxOFOGRO4184p2Ph
TLSH
T173826D716868BC779DE7E145F88B36038FB88067DBC86FC091EC7F1D059A699131AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c10925bc2323d1b18ab3f0041159a053f4c82e064df8578701f3ebcc28fb02b6
MD5 fade8cd4943e5a4c687f7ded0dc6de06
SHA1 f94a98304a3bfeefc58f7024d46bc445ea9c6969
SHA512 8446dee6346b927d14d081cf787df6405b453f3b4a469bd7a970d140f681bacc515865f529fe193f516a38cefeb3f6eb859ad0872d3d3e7b3e0a43029616ac28
SSDEEP 192:yONS61VWQmiUypEgGX5Obd+joOpmid/a03upU6:yONS6W3gGX5od+8O4RpU6
TLSH
T11502C63568687C778EE2BE49F58737135FA8206BEA546F84D6E81B1C00D765C2306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 65c20afa2f13b373ab6553c2ab7936b77408494eaab516aa827a606d1ab487cf
MD5 994241f76192fde1de3996a61aacc280
SHA1 2dc8298e6c6189ac8fabb957c3219d608736b676
SHA512 41f692f1aff637baf39537f9879d1f89c573e9df0c310fd5799b98f559013a725368305e5404f1021e6a46d0302457747c7f8b8df4a2378990890060e4de815f
SSDEEP 192:jON261CWQmiUyPErGX5Obd+joOpmiO83jjJrqVU6:jON26XPrGX5od+8OGQxOU6
TLSH
T1281209326868BC679DE3B989F48736038FA95167EB457FC091DC2B1C05DF69C230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1eac1d4f-909b-4d0b-a36d-d7c15d309a29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1eac1d4f-909b-4d0b-a36d-d7c15d309a29.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 47322cbb59f1fa0904838e03e06ade702eeff8b4d525e79944579e2f095242c5
MD5 657f3151c23232c35137faca1f466963
SHA1 782a735d9866fec3865b94db21728d441d0ff485
SHA512 959f47e61a335b35691d3271e4e8106813f63731099813c778653a920002ce4a210189bc357f604e6dc952a2c0498e1da7337ff85de6f20668427503ad7f6a8f
TLSH
T1F641D858AAFE1148B3B76F5AABF3686D597FB8772E07945E10110E4F0663A40C861B33
MD5 SHA1 SHA512 TLSH

Submit Download