44ca7364a900277f82a0f814201849ef863834c776add10dfeb479d6a41eb263

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 154KB
Sample260910-apb3escj6v
SHA256 44ca7364a900277f82a0f814201849ef863834c776add10dfeb479d6a41eb263
MD5 25d4a75b16b32aec6124418dbcf5e299
SHA1 f148aa5ee97b0ca10e08f451ecb9808014079917
SHA512 e7005cd5ca5cd709a5529373f87077c9ef6d1db587fce8f68f539b0ff71f5d539e7446a173e37c341d03cc265583e0979f7365d09cce84da847d59a2f7a6a0bd
SSDEEP 1536:hVYcK6R4OFIBFXb04mHYofU6XYGnZ0EouJzbouL864NayD3GYlH0PCJInKp9wJEA:KAUl26E9fQQY9Llhwez640
TLSH
T1B9F39663684A202F7137C39161F8F5BBED55C50AC6218A49F8AEBBC9C751F12763722C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1640	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334735146266073"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{34E39C91-2E6D-473E-92D1-85B7967D511E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3396	msedge.exe
3396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe
2684	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 3780	2684	msedge.exe	87
PID 2684 wrote to memory of 1640	2684	msedge.exe	88
PID 2684 wrote to memory of 3764	2684	msedge.exe	89
PID 2684 wrote to memory of 3764	2684	msedge.exe	89
PID 2684 wrote to memory of 3764	2684	msedge.exe	89
PID 2684 wrote to memory of 3724	2684	msedge.exe	90
PID 2684 wrote to memory of 3724	2684	msedge.exe	90
PID 2684 wrote to memory of 224	2684	msedge.exe	92
PID 2684 wrote to memory of 232	2684	msedge.exe	93
PID 2684 wrote to memory of 224	2684	msedge.exe	92
PID 2684 wrote to memory of 224	2684	msedge.exe	92
PID 2684 wrote to memory of 232	2684	msedge.exe	93
PID 2684 wrote to memory of 232	2684	msedge.exe	93
PID 2684 wrote to memory of 1676	2684	msedge.exe	94
PID 2684 wrote to memory of 1676	2684	msedge.exe	94
PID 2684 wrote to memory of 1676	2684	msedge.exe	94
PID 2684 wrote to memory of 4228	2684	msedge.exe	95
PID 2684 wrote to memory of 4228	2684	msedge.exe	95
PID 2684 wrote to memory of 4228	2684	msedge.exe	95
PID 2684 wrote to memory of 4364	2684	msedge.exe	99
PID 2684 wrote to memory of 4364	2684	msedge.exe	99
PID 2684 wrote to memory of 2272	2684	msedge.exe	100
PID 2684 wrote to memory of 2272	2684	msedge.exe	100
PID 2684 wrote to memory of 4136	2684	msedge.exe	102
PID 2684 wrote to memory of 3440	2684	msedge.exe	108
PID 2684 wrote to memory of 648	2684	msedge.exe	109
PID 2684 wrote to memory of 4016	2684	msedge.exe	110
PID 2684 wrote to memory of 2708	2684	msedge.exe	115
PID 2684 wrote to memory of 2708	2684	msedge.exe	115
PID 2684 wrote to memory of 3396	2684	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffefc57c188,0x7ffefc57c194,0x7ffefc57c1a0
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,17188111225127739854,2726439727318199616,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,3673337848949324903,14200780689444501596,262144 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,3805359617162680862,17179389081706993720,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11545609881569345316,17206681279873765989,2097152 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,18082651303018283442,1506730630093947110,2097152 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,4599060776225875448,12730564756584225408,2097152 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,11143146620335040250,6884326079097240895,2097152 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,11282067381720731136,16628856075256985184,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,6355720365093172774,2167941511282821145,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,16782977275325385409,16514606077173116868,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,16782977275325385409,16514606077173116868,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,3999727015151967203,318931708864038255,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,11956817215793967213,5355926929564945829,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,13646329939186390850,5489111367689630764,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,7461859012425909046,7688282186236864236,524288 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6024,i,9105600954638044005,6864055746971680990,262144 --field-trial-handle=2348,i,8263273052500467122,12352286508405108621,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 008ae76632478b0fe10569d0344e94b2a4c79a1c9d6847d2487980def0a6e30f
MD5 b00690850c05e526180f1bb21c713cb4
SHA1 ec3bb83488212bef2ba388fb17977d56cc316162
SHA512 81a455120039640edcefbf9267784201a72fa4522b73ca4bceaa8caab193573373c6eba5895bf09ebcbf778cca5d3d5a5b2afaceb644a51f01059b441ebd6a6c
TLSH
T192713C1800F00F91E3B26FF2CFE216DA3D734D888AA34D3242C49BBE593772484E5545
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591469.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591469.TMP
Size 3KB
SHA256 4cf461f2980b4a87aabb043f1f22a1967f0be4e066ca05006c7d8bbc2c3ebea4
MD5 a7b31a0a3dc3998baa5c999eed47af0b
SHA1 80ea10bed6a1589839170c9761f7abfd26e82aa8
SHA512 123a4127ab26e4979c92a8820cc6f848e1ba628cb8e368ec9cbebd61b26a5d4377366f36f8bbe557678f8f4e980878c5f021aaa4b4ebe9b01278ea037dc474a9
TLSH
T1DE713C1805F00F91E3B26FF2CFE216DA3D734D888AA34D3202C49BBE593772088E5545
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1012B
SHA256 96fa27266a9c3222d38860861586b3ad3c6a229a43fa6120f2ead2248caf0614
MD5 8df2f2b056b3d394d170a0d1fd2850f9
SHA1 fdd32dc71fc16db97494072ebe1f8577a11c9b0f
SHA512 7b13e7d8fe129e7712982e969ff6b8b68d42edebde20616ff5c1456e32e903952efe414277eadee2f83d51048fe1fa6423d0c79bd35cde22392398c07582ae3b
TLSH
T18F1178B3C2E4577EDA5212E09A297E27CE1D0507822C3C5689F4BF2BA3F2471D10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f2399209dcce976376968e1d206f194c35a2860cf41173710d6b8743f0ecee4e
MD5 921af9d1eba957e06e6577b5334f4cc4
SHA1 a13c2357a6ef9411cf69c69b3b45a23a2d98ae7d
SHA512 43d59e25906e0789e6451f81a27cae2e809ade397bc4b7acd324aeb8f8126acba505549d792dcbb234e72af0eba223c2f8266ea3eeb9e221203a5c9a80704bec
SSDEEP 192:sxZs+/yM/jK1Ml8MWk/frsiYIdpdiHW6+WNGYwKYBWIgrJ:sxZs+7uk/frsipoHbGy9
TLSH
T1E642E8116A346977CCDBD309FA51BF53D6F9557292940E44AEFCCA0C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dd1b86467b783dee281e4450c8e90790c55caa143d29de9f3678cd2357dab1fc
MD5 bf321367f1842107773eaa105926d946
SHA1 e0d95adec35718a451cc028e3dbff84f1655832d
SHA512 784b210d8a84975c7d047162f62d685392e17d89e182cb46a171abd899000ba8fa23ca5e29d2b0b1309914b0f20fcffb1abdc983c250c50c402ff415bc59020c
SSDEEP 192:sxZs+/yM/jK1Ml8UQ8Wk/frs8YIdpHiHW6+WNGYwqZBWIg5LJ:sxZs+7qnk/frs8pCHbGX7
TLSH
T15952E711AA346977CCDBD309FA41BF53D6F9557292940E44AAFCCA0C05F6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6780f1cd678ed6ba29d50b4445500ec763cd4912b70b0f9075a561d2346b25eb
MD5 2468cdc5c5a17dd4071c22a176dfb9dc
SHA1 31f5848f2d30ed15e934b28560f9ea1e1754ed8a
SHA512 a01269e500598519ddd4a1a831d73f76bdb520e49029305aacecf033e5fa3ae699dda668fb100fb42b8e0624abb77c982b883258423b098273d2e2f1e0ae5d8d
SSDEEP 768:js4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dsrohEceaD:js4jeXmWvmKLEu1jacPLZQd3l5
TLSH
T1ADD20A3B240CCB7E4F844E5DED2AAF976ED801CB6A584D5047FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ec9082cf041eb0713b75d044a1c6c9859396ffb8c49897be442340d5fbdb775c
MD5 e3366e718968e2190621898b4ae0adae
SHA1 fa87321594ca20660a0de5920de7604119e9cae0
SHA512 c0dfdb006f20a087484e49680c3e4e9f7d16fcd25fdbcb3739bbd8cbf5b23b5abacd239f1157f812944cd9d82bda82102e5081f912391fc10e51031371922cdb
SSDEEP 24:Kd2fZKLaYdM404sY+/IjO0Ki3ha401EWkSmqM782yyXYQf3kVaadCC+4SO+lIjYI:KA7IVKMMAQyFpIxKCkUOBI1K6Q4nyu
TLSH
T126917913717B22123C7E250D9295AB2A1B4275633048B56B7FAD0072CD6BE649CFF4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 7e7d339ebc36f3d39c8f7b6b1ffab079d3930cf99518fa90dc3de34b5a131a47
MD5 1eb49f0bb96e0f2b6362cb24e2a0f9dc
SHA1 868cb460fac125ce16e2f263e2b984cf38c21655
SHA512 96f7ebd91f8e6fb261b44a7f90eecbfda526acc5c0fbac084297df615f2a25646cfdf48792b26c95cc18b947d567094de995f80cc27ad077a738374d89bbfb97
SSDEEP 192:ucLsNh4kqQOECq8ZEUgQmiU1c3B4H/+jVSjzorh8F9XMEx5cFT9qhqwSRL:tsNhWLECq95kuf+o8hy9XPUF9V
TLSH
T155422A326878AC774DE29A95F04732139FB8526BDAC92F84E6ED5F1D00DA6AC1307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bbf5136aa6ee694cd68047ebcd32d5252f72b696f870221bdbd6d49e3c68d22d
MD5 5f07337a95923c97e1c1b1179dd58424
SHA1 6e25f5d4249c8fcbbdccab66ad353eba2a56f22a
SHA512 eeed0d1991b035265de2ff8185dbad4304e5e88e4ad9c5ba14fc2723341469fb57133dc117e9976875fef2aa23e62f3f32df027d37544fdb2831d895a9e43e93
SSDEEP 384:yZcIhsNhfLECq95kuf+o8hy9XPUF9xuvzxV+MhdpQBDoT:AhiENAe3Py94184pQJ8
TLSH
T10E828D316878BCB75CE6A241F84732134FF891279AD97FC0D6FDAF1D009A6A9131AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1641c2e856266c2eb56214472772d2e8951fa113cd7afe224111e2628ab11c86
MD5 6aa7e03834c1b1e0ecb98b111e6e633f
SHA1 ce92d9ed91dc87c8c818f889c83dbf6c7d47dfce
SHA512 7ecd2bd310add5963bca1b2466c0b3bddbe8973f1545b143b26eb7dfb378d36f2e2980dbf6a4614c11329be6cf73784a2cd10ab1da1b9909e2a4737a4588ab03
SSDEEP 384:YZcIjsNh+LECq95kuf+o8hy9XPWF9xuvzxV+MhdpQBDoT:mjZENAe3PI94184pQJ8
TLSH
T1EA827D316878BCB75CE6A241F94732134EF891279AD96FC0D6FDAF1D00DA6AD130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2887d91b109bf47853a62ed69b61071cfae1f025b781755411c4b321ee679473
MD5 10be196cf7276adef26cfefa94673d61
SHA1 72b87a22c82082defb580124eea0a712ae860b4b
SHA512 81b5ee26040dbdae0323826c32298ae38c33b36f400e606e34a713a5acda12f6e3df22a75dcfaee74e420ce0e77e1294e3663786e2f6a9278dd5609137935729
SSDEEP 192:EONT6hZ0QmiUyrOpc/+jVSjzorh8F45wOZFjU6:EONT6oBpu+o8hyH2RU6
TLSH
T13302D835A8787C678EE2AE45F48737235FE5112BA9956F84DAE81F1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e80b4d702f2f60a166583fcf51b8b65469d9d9bdf5436b4929f662fc442e5feb
MD5 1bba4f47cbdfdc496593288f9f7b7c31
SHA1 6ad50bb022a7dbbbdc2cb9c03f4f97b5d1e10b1c
SHA512 210131092176e04843a0a9d05216ef26ea386c48ae3261deefe9233bf0b1bd8348263e5fd5e9b783741fb875e98fc7a2ee39bcd8a2c15ff2722cf33256f18245
SSDEEP 384:dZcIhsNh+LECq95kuf+o8hy9XPUF9xuvzxV+MhdpQBDoT:FhZENAe3Py94184pQJ8
TLSH
T18E828D316878BCB75CE6E241F84732134FF891279AD96FC0D6FDAF1D009A6A9130AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cf9a139e644e090f957040037045602f0bc5477293a1f12c86093a6612a2a0ca
MD5 954fb7b95378f492d08f214b2bd1d3d9
SHA1 6f5cb581b3aab832ab8383ad33638ba4488ca4eb
SHA512 960ac8e9ba1014a2b3a5004d0553fe97fdb374b602cf63a5bcc437e7018e4bfeb6322b6a4474150e75f06982b31210f07920fc035459e2da958deab75c250d9b
SSDEEP 192:LONU6hZzQmiUyjOKc/+jVSjzorh8F9XMEX5cOq9qhqU6:LONU6JVKu+o8hy9XPa99U6
TLSH
T19812EA366868BC674DD2AA55F08732135EE55227DAC57FC4D6ED1F1C00DF6AC130AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9eda5b31d545c0d234b5554ca3dd71f35ab67673e1fe2a87a28847b3111e7172
MD5 ed35ebf1325688adeb402181af6b6b1e
SHA1 f6bf1e2fef648078cba3ce3a16e8bff9e2d53b15
SHA512 3648aa4c218d9947b77d38bdd8db6b679cbbd00d91f2b0a7843f3b8449a5ca83ea9f7aed6977f37709d9f22145c3f1581a7dab0642f5cb105f4e683618598f67
TLSH
T18A41F44CBAE90158B3B76F569BF6A86E487B7C772F46945E10110E4F0633A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download