4d2a24ac10d5b9d08303a522b27560449306de5717bbbc35489a3f9cca199cc4

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1.html
Size 8KB
Sample260910-prfkysw1ds
SHA256 4d2a24ac10d5b9d08303a522b27560449306de5717bbbc35489a3f9cca199cc4
MD5 cda08c66be4431f6f01953529d6e6945
SHA1 c921b07992f45fc0d4b5ccf12aa32873278bfa04
SHA512 56737d8deac01f2e76e989077f05aca0b3e3508054455a6db9d1e0351967baa5c573b81d0a19a251274dd08eb03ec35e3bf62b595a9ebc8b6cdabc7f0b5f34eb
SSDEEP 96:yuLhtJZJj/gRF3+ro91pbu3gmpE3wut3gGOZnkauuK53gHsJu+5:9h7ZJj/qQrC4wmJ4wBZ05wHiP5
TLSH
T1C802463852F50C3EA4D382A9E2B07F269DA8D683C74B855DB17D05612FC3C89DD636A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2268	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335172258320442"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{D9F8B129-FB1C-439C-A1C1-656A00B1B3F4}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1744	msedge.exe
1744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe
4520	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4520 wrote to memory of 1924	4520	msedge.exe	82
PID 4520 wrote to memory of 2268	4520	msedge.exe	84
PID 4520 wrote to memory of 2364	4520	msedge.exe	85
PID 4520 wrote to memory of 4128	4520	msedge.exe	86
PID 4520 wrote to memory of 2364	4520	msedge.exe	85
PID 4520 wrote to memory of 4128	4520	msedge.exe	86
PID 4520 wrote to memory of 4128	4520	msedge.exe	86
PID 4520 wrote to memory of 4896	4520	msedge.exe	87
PID 4520 wrote to memory of 4896	4520	msedge.exe	87
PID 4520 wrote to memory of 4896	4520	msedge.exe	87
PID 4520 wrote to memory of 5004	4520	msedge.exe	88
PID 4520 wrote to memory of 5004	4520	msedge.exe	88
PID 4520 wrote to memory of 5004	4520	msedge.exe	88
PID 4520 wrote to memory of 4884	4520	msedge.exe	89
PID 4520 wrote to memory of 4156	4520	msedge.exe	90
PID 4520 wrote to memory of 4884	4520	msedge.exe	89
PID 4520 wrote to memory of 4884	4520	msedge.exe	89
PID 4520 wrote to memory of 4156	4520	msedge.exe	90
PID 4520 wrote to memory of 4156	4520	msedge.exe	90
PID 4520 wrote to memory of 4188	4520	msedge.exe	95
PID 4520 wrote to memory of 4188	4520	msedge.exe	95
PID 4520 wrote to memory of 4824	4520	msedge.exe	94
PID 4520 wrote to memory of 4824	4520	msedge.exe	94
PID 4520 wrote to memory of 1596	4520	msedge.exe	98
PID 4520 wrote to memory of 1392	4520	msedge.exe	110
PID 4520 wrote to memory of 1164	4520	msedge.exe	111
PID 4520 wrote to memory of 4300	4520	msedge.exe	112
PID 4520 wrote to memory of 4224	4520	msedge.exe	121
PID 4520 wrote to memory of 4224	4520	msedge.exe	121
PID 4520 wrote to memory of 1744	4520	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbe706c188,0x7ffbe706c194,0x7ffbe706c1a0
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,17578239574413129635,12443123706133592009,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,2255710759336465709,5058145096902221015,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,7353313302292598252,7555316540605311406,262144 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,12280103474644831937,114187469044892463,2097152 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,10357770865610401597,5061372735641558762,2097152 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,1547452707014634516,10743633557771253378,2097152 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,9962123715564107260,10648259883022838456,2097152 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,15503617900960544476,13991646976876921298,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,16880631241405819476,484985367188605524,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3204,i,4373700356510720594,16563278659770016505,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3204,i,4373700356510720594,16563278659770016505,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,16314068592754265108,17054954359462594611,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,16008850699305760448,12444030881911258357,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,2308178411005087621,13193590500859614634,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,17105105466886033772,8703589468401423719,524288 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,14431419511373985322,5796756484365894483,262144 --field-trial-handle=2412,i,10041292707806696783,18159841670810792032,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1744

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

8cbbf122-0b9e-4c1d-8bcb-ee0b4dfa276e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8cbbf122-0b9e-4c1d-8bcb-ee0b4dfa276e.tmp
Size 27KB
SHA256 9d6baa4973d8a1ecd446e748f1a712b0f9e40b33f257710ac8f4781f64008b89
MD5 08ee6ff764b140a046bee10898d21936
SHA1 62266c0a7e3d66ae9f8cbcacd8f7ec56868c2494
SHA512 7e86d666370e9e2f0753892c45c38486e4f0681428b008692217b2d309335afe3be13e377416207b659ba0808c97f4fe2eee5854a7f9918b34bfe5466477a457
SSDEEP 768:tE0hyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW70MroLbqJ:KqyvIZwWvu+Q+u1jamFLeR7+Lg
TLSH
T138C2E93B240CCB7E5F801A9D9D5A6F9B3EA802C767588D4047FD994C02C77EA512A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6ab31ecc6a7401a1b42b2266851fb14f909b3e74f804db25f3393ce34a163bd9
MD5 c4d2dac193476bd7e6ceb64f2fac2956
SHA1 c4781bc7b4f7ec0d92095b9ed7ed556a893679f3
SHA512 3d1c8e24fa95ffc412ad0da8fd996bcc20396e35963d5f1aaf5829d53be70e018dccc636934253935da4a3a5e7bce0f4c10172d8e515bb71f925b5b10cd77fff
TLSH
T1FE612C3800554C53E7C52133E4FFC94074B985EAFBA3EE2691736CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d7bd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d7bd.TMP
Size 3KB
SHA256 a4aea46f6a306a876be779a0567d4cbfb6f70ca31bc0441d91666d4c390cdd1d
MD5 17705a73d52643fcbb1385763bf190b9
SHA1 c00880c74905d59b4896f4bae999d776b1762d73
SHA512 787036f799e3706640aebfc2c9ec447dbd73cd2f713d60c39fdc6c0bfb2fa563b6868251870945b4ec2890b95c33ca364b707a9f0724f765e686b4815cbb64a4
TLSH
T1AE612B3800454C53E7C52133E4FFCA4474B985EAFBA3EE2691376CBD6A0E729814DAD8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ae3c20451d4a6cfc652dcb57da7022c0bb1418b9fb2a300d3e5878f96a41c06f
MD5 77fa353ab91f3013bb5438c766e0eef6
SHA1 d2480911303b79eb69e779a53bd5545207205be9
SHA512 5a41eec7375aa24428c87c2ba1013f27c72d2d82506273fd32c06d1f59680cd53e65e1ca0325d264c9ec6ba219b4e612505b240b0297ff8815e3ca85360631e5
TLSH
T18011AAF3C3E4866E8D1116F06B24AE2BCE2D0602421C3D1A89E4EF2B93E3475E00159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4855c03d4eab24e0111d72ae70a5be41d6de793dcb4deab198d66a558b625c1f
MD5 02344365f49c0a388de2d38d89f63f07
SHA1 36d120d5363b21c6726e2fc46b486823d3764d0f
SHA512 09c9be34ab5955f1bcd498ff18c79ea1f129655184c4c2b68f66896ffe67ae5b30dee4a61d96ffb81ff31d689cb4e009e97e4ba37486819c1140c6ee75ed34e0
SSDEEP 192:sxZ3R9W//f7sI+lIdpd6HW6+WNGY9IKCoBIgrJ:sxZ3O//f7sIhQHbGu9
TLSH
T1A522C712AE28A97B8CC7E20DBB15BF13E6F9503251D51E58EAFD861C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 926be2bbfa2028c4e2544afff9b33ed63fbe30a24f7241d73b84e7618832d12f
MD5 76b553e9dadd28336cf16221079dd7ac
SHA1 85cc1ab77093eea4cfe10ce0b3ec2ed983cfc345
SHA512 3be5e540b93a366b03db537ecf87f9fcf35c48184c4ea1800e129459834714c917b2694fc83854d5c67a415dcf501c675314b8f94688c1968b11bf7a4fbba934
SSDEEP 192:sxZ3R9W//f7sQ+lIdpd6HW6+WNGY9IKCoBIg5SJ:sxZ3O//f7sQhQHbGu4
TLSH
T1CD22D712AE28A97B8CCBD20DBB15BF13E6F9503251D41E58EAFD861C04E7ADD221740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 761c2aedabfa21c9f3a07090ce6bec52135edc1d5cbf84f2455bf2c06e58dcb4
MD5 28080473ab045a5703148c0794d62844
SHA1 dfd7b9d7e28ed51f9ee0abffa7510346a36b1296
SHA512 18eff516af6edde9d7a346e1a8145a395b1abe06011cc19f0afce555fd7137b4474a33cf98934902f52d3eee2f0749d6b9863c3ba938adcdc9b12f6c20a1fb9f
SSDEEP 192:sxZ3R9W//f7sJ+lIdpd6HW6+WNGY9I+6oBIg54J:sxZ3O//f7sJhQHbGci
TLSH
T16322D612AE28697B8CCBE20DBB15BF03E6F9503255911E48EBFD861C05E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 3b214c5b8af340ac18a0ca5b1cae0bc8802112a0552f8430de082c19e55e50be
MD5 51ff2f557b214366ace7d21ed0e9dad6
SHA1 286448da4fb0b01f55e5d6a1c2313f8804f5c6a1
SHA512 a72ace04fbeed528c9c59864d11ec75f6a12f477ca6f01a869b611f2085fc368ed510963bb480c6e683f58fa55694c8bf170639703c5a83783dcb4df14b912a8
SSDEEP 192:sxZ3R9W//f7sJ+lIdpH6HW6+WNGY9IHhoBIg54J:sxZ3O//f7sJhaHbGii
TLSH
T11122C712AE28697B8CCBE20DBB15BF13E6F9503255901E58ABFD861C05E7ADD620740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01afcc0a-dee1-4ac2-97ce-1432151c9e0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\01afcc0a-dee1-4ac2-97ce-1432151c9e0a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 7adfb41aaf44d68517d4afe7a2c328f22803ad0938a7b00188a35f20f901d336
MD5 beab0a32fa7290d104ff01a549ab75fc
SHA1 21e7b344535c988894ac60397c4d8c99a59ad6f3
SHA512 cc89f26811b29a167be52bbaf1c04dc5f7f45c6a94cffaebc7c46060e3c1a20ed1369b1758d1ea8f96de5f897aa3c4efa8cc8c986726444c83b0e8eb6918a1c6
SSDEEP 384:ZZcIhsNgFyfcNzizKiue+CeODejhVGQxuvzxV+MhdpHBpog:xhIez+2OijhVGQ4184pHT7
TLSH
T143827D3168385DB66DEBA145F84776078EB8C037EAC97F80D5D9BF0D01DB698131AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 dfc6dfed99cd7c578bf61e04e48f24b4cf509ea5ef042f799b6a5f908faace49
MD5 6e3bf1361941100435e5b0f2c595abd2
SHA1 90b9e4d9c89d45ccddaf3f4493e2cc8855c52073
SHA512 6188417a9091755510b41c2f125fde5f4a66be8bee0878246b07b61053826af84afa6a6e82a333d007d89c946de0404bb2d8c3b5bb032ec538910a293bb3ae2b
SSDEEP 384:BiFiZcIAsNg8TUNTUlIlMyfcNzizKiue+CeODejhYGQxuvzxV+MhdpHBpog:oFQA1wgHez+2OijhYGQ4184pHT7
TLSH
T160A28E325C588DBAADFB9685F94A32078EB88073D9C5BF90E7D9AF0D01DB1D8130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0c711fd19ebce2d21c82ab18837eba9953d69c5aa23b2c7b1170b5708ad728d1
MD5 8a67dd7db0cb0fac7078deeb0ebb3953
SHA1 b15fa2dbda354bd4c554c7c199d43554a0f610ce
SHA512 dc172bb111982b5f82bd526935e6cd6ef9725423847424e2856b06c38f2e3ec18805b25d686f3fead1611de52151522f6bfe15bec0dce40f523f3c745107c14b
SSDEEP 192:JONj6v+YLNQmiUyPqZh+CGLOD9oqusdZU6:JONj6vz/DZh+CeODeMjU6
TLSH
T18C02E935BD282C7B9FF2AE45F98736179FA81177E5952F80D9E82B0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9fc119b2400e70e0bab977f1ad6141ad8d679856bb3851af0dfc5c6fa63be711
MD5 c0e347e1ac8e4b4624682d8d167843bf
SHA1 2ef9df4e5be7787ba5fc348e9979da577e6f858d
SHA512 2e587f2b595a00ad0d8182747fe47879ad029838948aaf184085f06974670e72942d4a0d77e3cfff0d2ccbd6f93c271b14f5f4de23e89c263fc23951d1c7c333
SSDEEP 192:sON56v+YLVQmiUyGq1h+CGLOD9ojhoCHqq+QU6:sON56vz3g1h+CeODejhJGQU6
TLSH
T146121B35B8385C676EE2A985F48735179EA98137EA863F80D5DD3F0C01DF69C234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 de3027fcb301bca0b370b766fc3b4d1c13f3e991397e3652b0bef13b8883659c
MD5 1988452c3d17df24d758c363adf65182
SHA1 1ae8b6d94ac5eca023fcbfc33d7cb938cd1adc8c
SHA512 2a7ea1d4568980f1124ccc32c44f765f0ebf30e3c0f9dd4ceb13785225c64780fa0bf0461d254ceeb4a249fba7e47629939b0e7f87995b7d5d84a8ebfcf9a059
SSDEEP 384:0ZcIhsNgMyfcNzizKiue+CeODejhVGQxuvzxV+MhdpHBpog:yh9ez+2OijhVGQ4184pHT7
TLSH
T13B827D7168385DB66DEBA145F84736078DB8C037EAC96F80D5D9BF0D01DB698131A81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1de4fc70-e7bb-46dc-87cc-1bf280110388.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1de4fc70-e7bb-46dc-87cc-1bf280110388.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3525ad4a0935c8936b145513bba65a274e96d8d7047a1da61264cbcb52c2ab70
MD5 378b52c28427cd2bcc107983a88f2903
SHA1 0fd4e5c206d3c22f906304b2131c85f0d5877b6a
SHA512 defec0ce19fd9a86a56540b44955291bba8bd1e615711a7562f759eb1ba052d553c3f9cf8d271df9f1b16d2e8a6f875d085f4e9ba2115b7aacac2aa81d3d3af1
TLSH
T17A41D999AAEE5118B3B76E55ABF7646D487FB9332E1A945D00010D4F0727E01CC61737
MD5 SHA1 SHA512 TLSH

Submit Download