0c6d18fbf9ec3d5ddb9253738bc10e837709a855e250be79de63af66975ce9b1

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 501KB
Sample260922-ppsshaed49
SHA256 0c6d18fbf9ec3d5ddb9253738bc10e837709a855e250be79de63af66975ce9b1
MD5 fef10e4d844437ba605b38ff68e51e1e
SHA1 125aa839a9463e2116ca9d1eaa19e105a68006e5
SHA512 ea6e96b0dbb667705045e2bc180abb737f11c576102e01fb7e896857e723dadbc108399d413b39c6922ee9d5ccb13fe265e239d4f42ba87153d3e0b4051e8c50
SSDEEP 6144:Pa0jvFYDaOVixL+pGhs5ioFhaP46Z5la6Gb3x3CBrWVhQrOq:i6Zg6Z5laFCfr7
TLSH
T163B4FA6423FB11399463509A7FEB510A7624A0477A0ADE4CBE5C83C80FC6F7596B3BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1708	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345538497767411"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{53B0A89F-E790-4DCA-810A-7C2717C038B7}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1812	msedge.exe
1812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5052 wrote to memory of 3280	5052	msedge.exe	85
PID 5052 wrote to memory of 1708	5052	msedge.exe	86
PID 5052 wrote to memory of 4344	5052	msedge.exe	87
PID 5052 wrote to memory of 4344	5052	msedge.exe	87
PID 5052 wrote to memory of 4344	5052	msedge.exe	87
PID 5052 wrote to memory of 1132	5052	msedge.exe	88
PID 5052 wrote to memory of 1132	5052	msedge.exe	88
PID 5052 wrote to memory of 4140	5052	msedge.exe	90
PID 5052 wrote to memory of 1684	5052	msedge.exe	91
PID 5052 wrote to memory of 4140	5052	msedge.exe	90
PID 5052 wrote to memory of 4140	5052	msedge.exe	90
PID 5052 wrote to memory of 1684	5052	msedge.exe	91
PID 5052 wrote to memory of 1684	5052	msedge.exe	91
PID 5052 wrote to memory of 952	5052	msedge.exe	92
PID 5052 wrote to memory of 3300	5052	msedge.exe	93
PID 5052 wrote to memory of 952	5052	msedge.exe	92
PID 5052 wrote to memory of 952	5052	msedge.exe	92
PID 5052 wrote to memory of 3300	5052	msedge.exe	93
PID 5052 wrote to memory of 3300	5052	msedge.exe	93
PID 5052 wrote to memory of 1704	5052	msedge.exe	100
PID 5052 wrote to memory of 4228	5052	msedge.exe	99
PID 5052 wrote to memory of 1704	5052	msedge.exe	100
PID 5052 wrote to memory of 4228	5052	msedge.exe	99
PID 5052 wrote to memory of 4268	5052	msedge.exe	103
PID 5052 wrote to memory of 1540	5052	msedge.exe	108
PID 5052 wrote to memory of 4828	5052	msedge.exe	109
PID 5052 wrote to memory of 3844	5052	msedge.exe	110
PID 5052 wrote to memory of 2152	5052	msedge.exe	119
PID 5052 wrote to memory of 2152	5052	msedge.exe	119
PID 5052 wrote to memory of 1812	5052	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff82394c188,0x7ff82394c194,0x7ff82394c1a0
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,4747974508104129344,914998248672948702,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,6385525536724013292,120286759930951841,262144 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2632,i,9274731000162226653,1672181033400932182,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,13226336435310440978,9079616954625972584,2097152 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,189742355161114407,7589041825705178700,2097152 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,1281943046157161276,17879325844913603325,2097152 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,836079988062106527,18124304459683660032,2097152 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,2813235561838526894,2577434474550711597,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,8247544315436365316,2602587611908090164,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,13106187660214905008,5258352541992549840,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,13106187660214905008,5258352541992549840,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,12946395644806403773,10890439077217442374,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=696 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,4801412890340286695,497813274612850010,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,730759001367502875,17628963097812039971,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,12808512706904056094,15268723067443314464,524288 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5524,i,3499362305848267163,17337544432330876914,262144 --field-trial-handle=2272,i,3965934218371886519,1860466628303984598,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

96e49a63-7a34-4c2d-9be0-cfd36edfb45f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96e49a63-7a34-4c2d-9be0-cfd36edfb45f.tmp
Size 9KB
SHA256 bd9554b2804d69b62f87e9b2d94882f4a4f4d5615b47fb6b1c024148dd639ef3
MD5 87d0c6f8310caed3c9e73f2ac9965a69
SHA1 c8c262552083d1e9b123660737e25824d904bc57
SHA512 87a473af9515f4a7a894c7441f4a0e7da775ad5ca63838cde1ad2c1485133ba54b28f71887da8b790c747f6ae323fc39169d9ab7164611e25858a9998bbaec59
SSDEEP 192:sxZomRrW3/fTsMxIdpdkHW6+WNGY36a+tIgrJ:sxZNU3/fTsM6uHbGXV9
TLSH
T1BA12C8126E38A97B8CCBD20DBB25BF53E6F9503261D51E58A6FCC61C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 99a16c456810aca9bd53b923b6c64eb9d566bef40873e1402dfc2df54e5f98b8
MD5 b29e7355cabc5ed8a19f6bcb76aa6848
SHA1 a51d0fa71cf529dc393a4f58ef461fa35a5e900a
SHA512 617130599c39c3ddccafd3b1d7d05800dd39caab420cdb2996a351c79fade68592bf667a0090a1cad7ad2c963f59930c78b13b8fba22cb7ecd96dd86d59d4e5d
TLSH
T1065194829FE303E5FFDA88F68FE529EB373E45C091836E72D598D6B8C9477548095088
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5951c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5951c0.TMP
Size 2KB
SHA256 606ba47f38761bd3fd987137b627339e9f59cbcace06567fcf2665bd0784434f
MD5 ad60ed2c65fe541d35f06bdb4caaacc4
SHA1 38a0c99eb8b77c37ea4d48ff4600c457df7c2f8d
SHA512 d7f291ef793c6811f068e6370adcab313348302e58d1bede0953b788725f28bfa61bcc3efc9fd542c848b3a7a1ab147d2e4a5fae8a68edfccfaa9dce71024f88
TLSH
T1E65183829FE303A5FFDA88F28FE429EB373E85C091836E72C598C6B8CD467548095048
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a597458-5873-4b53-b056-d4b9956c6d42.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8a597458-5873-4b53-b056-d4b9956c6d42.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 84be0fe46846cac3af08500f11342d6331444e647ab557c1f83711498034d978
MD5 e998b2bac430e7565a40c012b470022b
SHA1 d96146b7b67399788b566f4e8aff6e6651aa55ab
SHA512 faa9ecb05b49e810a22423c8ddeb047c6c0eea483454edfb51e60c29ee746a43cad6d16e963b9eede53a81496f78aef483a08eecd7da6e05d3262eb578c59c60
TLSH
T1F3419CB6C3D9866E88115AF06A24AE2BDE1D051B42283C1688E4EF5FA3F24F0E20155F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 da945a85b6f1a0b1829cfbfd9c53cfc8ad2a6d1764d1b649b448475f94476bf8
MD5 3bcb8925527c835bf3f167edb0af0475
SHA1 2674f880468326a05c1319341826aa1333e4e881
SHA512 550a539f4512052d665ff124002abc6d7c98cea38958d161a126dff6bcbf93447fc1b3a346070e5e697e96ec517d9de0a07bd49de4c14d817e3bf45d5a424f8e
SSDEEP 192:sxZomRrW3/fTshYxIdpdkHW6+WNGY36a+tIg5EJ:sxZNU3/fTshY6uHbGXVO
TLSH
T18E22C816AE38A97B8CCBD20DBB25BF53E6F9503251D11E58A6FCD61C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 dc0c7b8746493fae0561a1022a671b47cfca197faaecee4c0af90848eee17f1a
MD5 3817b27ec11ae5b8ccae46f48b14f0c3
SHA1 f01336d399b711451bc617e91241ed23b1299458
SHA512 a93de57bd74f5de2e390317c499037d94764d2614d93f0fc770e415e2fb38baef009a348c9bcf27857f80a345875c29a4151560711aed165991b65bcb6dc9904
SSDEEP 192:sxZomRrW3/fTshWxIdpdkHW6+WNGY36v+tIg5mJ:sxZNU3/fTshW6uHbGX+8
TLSH
T1A722B756AE38697B8CCBD20DBB15BF53E6F9503251D11E58A6FCC61C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e90d5e3216d6f3784efddfc55f61fdc81343e2b13d6f16e6545365f97ec179fa
MD5 9f2cd3dd6bb69facf61cee396aec9e6b
SHA1 4499411b7e5d67179987b96aca816cf800fafe03
SHA512 4684ad28e06f5c2c9043d35d61bc90c5e681566913cb8a46b3587d107d7a5f1bbc7380d135c60c1428c3f8abdd220cfa14bd3ba99b7e8dfdb3c4b53339d6c1f4
SSDEEP 192:sxZomRrW3/fTshWxIdpHkHW6+WNGY36F+tIg5mJ:sxZNU3/fTshW6EHbGXk8
TLSH
T13222B756AE38697B8CCBD20DBB25BF53E6F9503251911E58A6FCC61C05EAACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 50474f6ed7925d7af0f9e3a2e699664ba9702c57211d609963ddd04957c9a884
MD5 bd794d82894a8c09a0f91a465c6d8851
SHA1 67a8ad76fa3cd57bc69c02a45bed24b2f7934955
SHA512 594ea4018ac3744984d51b330c9ec6ba561bfbf889a4a9dd611dd3a28606b8a38ffba964c62408900f3cc972d9a13c7bbf2bf2bcc7af8a6cd91f83d216892a54
SSDEEP 768:HrKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Yrovv:HrKlm7QWvUYe0u1ja8/L/E/jvv
TLSH
T1BFC2FA3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 deff96aec6da85210c8937ad655c1c2e2f512a804213e8c7c19a725fe39ab0c0
MD5 9fe63faff428491c624fec28dea03b3a
SHA1 4073c0b88596668dbab0fe93570743be37d67fb1
SHA512 fe2a86e09a0a9e7191c6124c42f5641cc9e69b5cb076db324a9d83a52bd5c81332d8bc290b621ea9782f34e306d8079031c493f91ae6c98e743056dead218795
SSDEEP 384:CZcIhsNvkDCybdI+h//at67ujdsa+VYrGaoU:whqRe/CjdhgmZD
TLSH
T1EC828D326D34AC7B58F7A295F4473B139EB880A796C82E44D5EDBF1D01EE5A81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 237c406407534b2b4fdcaca0b9dcef05d8b8ce40d909091daa911dae248f79cb
MD5 00d503e3c1029d69b1727411e6877a9e
SHA1 da79436069d268ffe97345b55561c0a855661c72
SHA512 79f79bbe6fda247fff292bbcba85bbfd02feb936acdf0fd3b1f51a19006dd07200b6f0d30cbed088907cf6e71d9ab3738a394816c1c50c8cd46900d4834f5d0d
SSDEEP 384:EFiZcIJzsNR8TUNTUlIlRDCybdI+h//at67ojdsa+VYrGaoU:EFQpAwgqRe/sjdhgmZD
TLSH
T142A27D335D64D87A9DFB9A95F4473713DEB480A7C5C8AA90E2DDAF1D01DA1A80307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5756f551a784606f53792ef3836730b8562b78367a21d2cc5136036061955ff3
MD5 55f09f8bd81682bb3db9b8c08eb62313
SHA1 11a6a77eaeedc64c61ff7df816566e300895855f
SHA512 e02afb773d90d5b61df93867d90c280b90e662a9ed04b84a337761b389bb3b412df67b80f4f4143fc6b64b8feb2abd39993708e5c7270dc2dad40a8dfae404b0
SSDEEP 192:BONO6JUm0QmiUymxso//OywtvCxBCjQ2U6:BONO6+mEbso//at6WjLU6
TLSH
T1A402D739BC28BC7B8EE2AE85B0477B239FA4107B9A911F84DAD92F1D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 df9f0324645e1ac4ea42c4de6f2b2f3d3d056fa02f92fda75dbe0f5ddf3bb3c5
MD5 c0f04ba420c2ba3546d03312afab17e7
SHA1 a2f3ad357cf1e35158696e2ee0f574dd1ec41834
SHA512 5ff0eeabf89f2a8066eddd5a91ad0dbc6fbdbe992a72c17c118806a2edd19739dc0be6483ae78764ed07e3f7b5bcd9c688b08f1a45c993c0f041741e28f4ec1e
SSDEEP 384:0ZcIhsNvRDCybdI+h//at67ujdsa+VYrGaoU:yhPRe/CjdhgmZD
TLSH
T1E7828D326D34AC7B48F7A195F4473B139EB890A796C82E44D5EDBF1D01EE5A81307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 57babd6292b5d8421f317ca46eefa8b6ae02ba99ecd3eb4f5a7d78ef6c55915d
MD5 47339d1a6eb8d5918005db321b375180
SHA1 51a7359a3089629a24db34549efe5ed371d76c6f
SHA512 f9298beea8f1b0076b2fec9058f37cec97c8b8cf09b4697eddafa985694b4d1f3b2e550b127f048b6e5d108b4a88be2d363f277cb3d276062157d6ff5c95c10f
SSDEEP 192:BONy6JUYQmiUyEx6o//OywtvC7OezfTNxjk/YU6:BONy6+4d6o//at67FjdU6
TLSH
T19212F935B878BC7B5DD2A595F08336139E644167EA896F80D6DC3B1C02EF5AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90454ed0-74c7-49d8-a982-ed222521d735.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\90454ed0-74c7-49d8-a982-ed222521d735.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2f9bddb0053d8c11ffda370043cc32fb218af41757cc7dd8d673ed39df5593aa
MD5 8f6a186f89c6f604df3337685c2c31e7
SHA1 a19f540fe2d576ca9943d6943949b29915b34c4c
SHA512 77372d9506c014e3f41e53a922d4f0ab3aa8d6beca1c4ddb1ff39ff769b5d3682e168eeba51b3eefecd07af7fcd6130558970e231bb731062a09cfcf8af0ab2a
TLSH
T198416A5CB6EA1144B3B76E5A9BF7686D447FBD773E0AA55E10010E4F4A23A00C861B37
MD5 SHA1 SHA512 TLSH

Submit Download