080608a436faee92ce634de9f433f6a155efea0ad5184e8e538586e6f3ff9688

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130489157.html
Size 34KB
Sample260910-ajv84sec38
SHA256 080608a436faee92ce634de9f433f6a155efea0ad5184e8e538586e6f3ff9688
MD5 27eb7175bd4520ab6702d628da87fde5
SHA1 7d245f887f6b4ff28f051c375166538a3c4b9177
SHA512 66f81220b035b42be5a0c2900e2a51b7d181cdbdb7a388436305daa8a01359a62eb4b555056a211f2a80e03638f55f72031ba4753af8713960088ccba19710fb
SSDEEP 768:MBjJvx/LF9pA8AkEBNJgWtZ0wrxKLgOpk84LJ/8eTZHN8V99c20sx+WDj2xUCt0k:UVx/LrABBNJgWtiwrxOgO+JZqHv+
TLSH
T1EFF259D072D0F81716CD1AB3AF1E79F9C06E9CB766C8754B8294B68C28B8217C5A4DF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3568	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334729772101764"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{3D54B174-6D02-49A6-B402-182F696407DD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2252	msedge.exe
2252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe
3644	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3644 wrote to memory of 648	3644	msedge.exe	85
PID 3644 wrote to memory of 3568	3644	msedge.exe	86
PID 3644 wrote to memory of 2908	3644	msedge.exe	87
PID 3644 wrote to memory of 2908	3644	msedge.exe	87
PID 3644 wrote to memory of 2908	3644	msedge.exe	87
PID 3644 wrote to memory of 2412	3644	msedge.exe	88
PID 3644 wrote to memory of 2412	3644	msedge.exe	88
PID 3644 wrote to memory of 4948	3644	msedge.exe	90
PID 3644 wrote to memory of 4948	3644	msedge.exe	90
PID 3644 wrote to memory of 4948	3644	msedge.exe	90
PID 3644 wrote to memory of 2788	3644	msedge.exe	91
PID 3644 wrote to memory of 2788	3644	msedge.exe	91
PID 3644 wrote to memory of 2788	3644	msedge.exe	91
PID 3644 wrote to memory of 4424	3644	msedge.exe	92
PID 3644 wrote to memory of 4872	3644	msedge.exe	93
PID 3644 wrote to memory of 4424	3644	msedge.exe	92
PID 3644 wrote to memory of 4424	3644	msedge.exe	92
PID 3644 wrote to memory of 4872	3644	msedge.exe	93
PID 3644 wrote to memory of 4872	3644	msedge.exe	93
PID 3644 wrote to memory of 540	3644	msedge.exe	97
PID 3644 wrote to memory of 552	3644	msedge.exe	98
PID 3644 wrote to memory of 540	3644	msedge.exe	97
PID 3644 wrote to memory of 552	3644	msedge.exe	98
PID 3644 wrote to memory of 3996	3644	msedge.exe	100
PID 3644 wrote to memory of 1860	3644	msedge.exe	107
PID 3644 wrote to memory of 4272	3644	msedge.exe	108
PID 3644 wrote to memory of 4712	3644	msedge.exe	109
PID 3644 wrote to memory of 3376	3644	msedge.exe	124
PID 3644 wrote to memory of 3376	3644	msedge.exe	124
PID 3644 wrote to memory of 2252	3644	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130489157.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x27c,0x7ffcf538c188,0x7ffcf538c194,0x7ffcf538c1a0
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,1082235075668504876,4822130622417514577,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,9828638049497726628,2873565089688810640,262144 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2064,i,14609474559573253787,14056681966940254933,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,15330967182606452963,6021978864234045483,2097152 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3376,i,7583615464029334471,16425747640750638381,2097152 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,3718054919831726808,15910765565709829151,2097152 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,14020126396081322763,16584751917665153918,2097152 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,4440818316335464444,1482372974938387095,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,16054970720295679123,10960335392336867177,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,4684438005208263785,17755276025023494716,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,4684438005208263785,17755276025023494716,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,507319636445989239,17892182850702692126,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,7527185884737732612,13067600698822076167,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4656,i,16079264611747854312,17989366891424699891,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,8952957747497861022,7658348045520421993,524288 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5824,i,7263631250533861981,9710339021740671946,262144 --field-trial-handle=2244,i,10133439546389714424,11206298116700636431,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2252

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 35f1bbe6795ab0002d950c16b9e76f684c608936912ce0a6c3e9d271e671eba9
MD5 a2c854e85bd7455a9b83dc35766f136c
SHA1 d6cf683672a14c4ef9fd60bcf0a1fbd3d5e553dd
SHA512 c54c580f742a9cf128bfbc59cf9a28c1821565a604de8dbbe2233b53cade670de27d90c25a9fb049aa5b3be9a2d2e42b0455b1515ff47dfaba721b9fbcfc8463
TLSH
T1398196380E6F00B5F3B11FF2B3D14B44347E82EBF993BD9A52816A70791A761B2C9405
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a2b3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a2b3.TMP
Size 3KB
SHA256 0371beeab2e9801c8029ca437767ba9447f76a628a94c325aba404716dce97c3
MD5 198aa18e63d92b2c8c9bcae62caeaf3c
SHA1 70cf747a361602c8c6815bf5c6a943e372593c1d
SHA512 fe90a7852a41ccee413ef2b54bdb48ceed7a9e4a72ed3017285cbde841f5b2e80dd49de2ebbca4422f08cf7fdd3ced6c06dd801151a6488a23d98fb4c6a93909
TLSH
T1D981A7380E6F00B5F3B11FF2B3D14B44347E82EBF993BD9A52816A70791A761B2C9504
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f394d590ec90dc1104bc12e02e9d872049c6079fc9490a7f7932c64d2b497ed0
MD5 be666e14cf8b2a3cf92e806c5de04361
SHA1 8c32056fbb1fc02e05a2530620ef5d70f1ac44f5
SHA512 7a7378fd0325829652f9e4f53c6761969ffb007475de5596e03a46494c0b7cdd34b3bc4a5c98f7c70167afc72591890d7dacd4803ed5a8aa65dc7e35437c9a91
TLSH
T1A6117DB3C3D585AE890156F06A24AE2BCE2D0605421C7C1985E4EF6793E3075E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6d96df1480c4a3e65968b4fcfd84ece1b41b46f3af1d80657df875ef82c95876
MD5 621ba58ce84f9e1aa7e1aff045ed3391
SHA1 9ff5361509131ca8503b8859608b4f00641a14c8
SHA512 5d80f63325f648b78954c14b5e33871d3eefe940f893525ed863fc930e8790f0dfc002190ce4754bb0362244a1a40f878eacb45b9adb13ed8f6b6449711c21d2
SSDEEP 192:sxZbRdyM/jK1Ml8UQLWz/fHsckiIdpHbHW6+WNGYzjC1KIg5RJ:sxZbnqqz/fHsco7HbGWF
TLSH
T1A852D651BA34A977CCDBD208BA417F53D6F9557292940E44A9FCCA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 58738426647d313be2c5adcea46b306c4d173a20b109c5b1b59fc799a442056b
MD5 d36baa65ca6389b49d1008234303daf9
SHA1 501878311a43b577e2a6e5c575a67054dfb7a7e1
SHA512 47124ba250fc4317b7e11cee2dd77aa32223f49c7c2d1eb38f5b21bb8bdf703a4a2d50575844a7a1c555cd60481366050b75375cd05ba4f7e17807d897b7f1a7
SSDEEP 192:sxZbRdyM/jK1Ml8MWz/fHsckiIdpdbHW6+WNGYzjh1KIg5RJ:sxZbnuz/fHscopHbGbF
TLSH
T1A042D751BA34A97BCCDBD208BA417F53D6F9157292940E44A9FCCA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9551a8c4313ce2788881287769fc74e6a8d55b03c537999c5052ff7e372e340a
MD5 ccd1a6c9a8398a128184580145c1abe3
SHA1 7a2ab1832faeca230068453bafe2632d498e3b60
SHA512 8e0faeef6e884a6151fb0772a16a66c26d2b5b3b8ecf101d20dd08d661bf9561f91081310e5707a8ac638476d64df2bea1ead7c08f0fbe0c6e6f173f49976c95
SSDEEP 192:sxZbRdyM/jK1Ml8MWz/fHsNkiIdpdbHW6+WNGYzQT1KIgrJ:sxZb1uz/fHsNopHbGM9
TLSH
T13342E651BA34A97BCCCBD209BA417F53D6F9157292900E44A9FCCA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e3eb78d5849637622ef5ef7ebc7bdde691d51986127575124d204f234cc4b335
MD5 883824bdb05c6067972512c9519c37da
SHA1 c0f3eea620e9890d263f19aef40d2f525bbcd8c0
SHA512 f24cc1b23586c18175b24cd0bd2f15918c9832eaaf8fb9237e10b5ed1f3f45696793ef6cfc70838344a350b0320ecdda1d228528d157f7b6c34d3d5fb157fbe6
SSDEEP 768:E/W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjJroIbgiEYh:E/W7kf0Wvqidau1jaa5LA3jiah
TLSH
T1A4D20A3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c72ae309a9628af9ed77b4c4fe113a1e32c39348bc8edc23859d84a2c544ab8b
MD5 a36b62d396446923a01df1751ecc3497
SHA1 9cb5bec340820115b383884369cbdb4157fb1dc9
SHA512 7287b9bd05a1ea14ad0d0d911d51ddca47303b1cd30b8867d0e5d31a36a0b89f890bd2e4cee3be1c69c9d447bd4d37cd3caf3d0ff30b99c7fd9ea1bd751eea1b
SSDEEP 96:KIbCKc061e6UccuKMf10auKsb0IuQCa34qv+XeKEcPOkKrCGg:sCFpvrg
TLSH
T13AA14112703F060138BD2C48A165CA3A5E4272A33564A9FF7BB910630E67E158EFEDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 84f83009a10f09dd30c3cb806d67fb09d6ae21abbda75be54dede4f1db8178b8
MD5 579392fc92a208e173463e548938952c
SHA1 b6fa0df469cdc6e540023b174b03b153cd7d13ae
SHA512 83f8d9b64b7f73ebb72fa11a5d8dae27bdfea52daf3c228cee98e588d23e907d3c51697b950d34e90ce0e58a5a0fa11cf787f64190df9ac838d99839a4d28733
SSDEEP 192:uuLsNfbA9QyinVWBbPGCdQmiU1hTP4aGBPKXo+FdGJaV6FC1SJrWdNVqQU8:PsNfMeVYb/bjgIdEaACEJr0VU8
TLSH
T1E0422A756874AC3B9DA2B251F4473B039FE8413B9AC46F84E6ED9B1C01EB79C530781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fd44f3a9ae8e2ef01d42c1be30fa28eebc7f616e21603a2eea10cbe9461bc950
MD5 2b12a6d9339dba35080e76af0297c417
SHA1 95e4e7c8eb94be551e3dad0ee7135b7c8e66c819
SHA512 01c8179ee0f996207889398d85b5bcdc990ba99894e484a89ef86f35b481f8c8385ca27c54b2b2c90fd9dcab8ec17a46f86fe7dff1ff9adf5da29316e0c246dd
SSDEEP 384:pZcIusNffeVYb/bjgIdEaACEJrgVsa+VYERoE:huBYbtyhgVhgXRH
TLSH
T1AF828D716C74AD7B99A7A341F98737035FF84127A6C86E44A2EDAB0D05EA79C1303C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bef3151b2d69f7b9f1467d8c26e1d643e6c02e19817181169a5c6abb0751ae44
MD5 a874a0bff1ff9a220772088e21113d47
SHA1 b28f53f657f2710a4612874626d073e7eb6aecde
SHA512 3e2ca92e7c9ca317f75cddb2c6ceecd596a9912ce1c975e0909d64f27a0f01d617cef227ee14a8c05fd71a1a84934ffbd066173ffa5065602e85ef97a40f464f
SSDEEP 192:MON664BAQmiUyf1yW5GBPKXo+FdGJaraD+hLU6:MON66eAw8WTdEaQILU6
TLSH
T12E02F934AC787C7B9EB2AE45F58737175FD8113BA6C45B44EAE85B1C009764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1566fa342cd313561c24fce63c52036541a1a82d7c6864187cd4e7d2eb01557d
MD5 07633e24f5ead392351fb67d1d91ba91
SHA1 3aaa38deb5b05299f2abe6d46b46b0c5b99e19e9
SHA512 4095f75ad8da92a765872c0f2aa0741c95b0d10f6608730da07203b68a0d638443147364adf25e2dbfdbbdf066aa95e76df37dafaf7d2a7c2506c4d322715acd
SSDEEP 192:utsxsNfbA9QyinVWBbPGCdQmiU1hTP4aGBPKXo+FdGJaV6FC1SJrjZNVqQU8:NsNfMeVYb/bjgIdEaACEJrnVU8
TLSH
T19F421A756874AC3B9DE2A251F44737039FE8013B9AC46F84E6ED9B1C05EB79C630781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f0a3ed8e861d9dc52027dff0ada8bb2978df5d7895693d24b9750c4326902d9e
MD5 81109c5cebdcd246e8eaaa6c86f5efb8
SHA1 3542439e8d36331aa95b68b02d9d58615ae4189d
SHA512 2848ac50376bb8c79a8c69ceb599025a19cd89542685347d7375b748e68fc398af91e63e04304da3c3021622dd0ac5319d219f55c7007e9b8522e75a61434bb7
SSDEEP 192:wONa64B7QmiUy0yA5GBPKXo+FdGJaV6FC1SJrUWwVqQU6:wONa6etcATdEaACEJrqVU6
TLSH
T1C9120B35A8746C3B9EA2B541F48736135EE8423BEAC56F84E6ED6B1C01EB75C2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b75b85e743ad438d437ca2f6019bee751aa4df53fdc31be7498e89384814a367
MD5 6e23120edb649836f170744a7f5db710
SHA1 e43310beaa2422f546e6e95b512dce189ad5cee6
SHA512 5e78e6ca1fcfa3f017f0f8c966b59dca3ef0e3d3d1171725276d3f1ef1a383f7b887a8847020b7aa98bb34a819865fe26c8918ff93d5587bb86b7ad486f7e922
SSDEEP 192:uWLsNfYA9QyinVWBbPGCdQmiU1hTP4aGBPKXo+FdGJaV6FC1SJrWdNVqQU8:LsNfdeVYb/bjgIdEaACEJr0VU8
TLSH
T1FC321A356874AC3B9DA2A251F4473B039FE8413B9AC46F84E6ED9B1C01EB69C531781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d628f933e5cc138a835022c5344f0d687d4a9966f91c79f432dc6402749ea51c
MD5 a7a64fb885655c8fec9e87b93ab93940
SHA1 42e21f50f6aa2428b15ec26480b5c7c6010625b8
SHA512 1f2e6f686de4df572b881316662580a7c83f5536356ed233afd96d4f7a29b0784eb4af58b61e8de6bf98a45db900d8a5928cb1d384384d42ac96eed4b942f082
TLSH
T178412858A6F61108B3B36F1A9BF7A86E847E7D332E56945D10120E4F0A27B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download