dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260924-pg9faavsbt
SHA256 dbe56391d38fd5931a6d149249f1113024b8aea2af25fa8674fc5c3e99cf4c84
MD5 cb1fc49764c26340f3f059f7fba932dc
SHA1 dee6828bc5016de3a1f5fcffc7509ca040daace5
SHA512 a06e656cf0e0a49dee6ec593eb303b1660d7c64cdaf6dc8db2f3f4c1ab7d94f1f35921524a2d8e6733b7161e1a20a2ddf5e4d8d1c580461f3c01eb02628b52ab
TLSH
T1BB517272E192643BA127C5DE7070939EB0E6C402C7976A176DFD9378CACAE939B1134C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3316	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347259594291124"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{59AD1483-12AC-499B-98D5-1C7480ACA62C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe
1832	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1832 wrote to memory of 4892	1832	msedge.exe	85
PID 1832 wrote to memory of 3316	1832	msedge.exe	86
PID 1832 wrote to memory of 452	1832	msedge.exe	87
PID 1832 wrote to memory of 452	1832	msedge.exe	87
PID 1832 wrote to memory of 452	1832	msedge.exe	87
PID 1832 wrote to memory of 3268	1832	msedge.exe	88
PID 1832 wrote to memory of 3268	1832	msedge.exe	88
PID 1832 wrote to memory of 1468	1832	msedge.exe	89
PID 1832 wrote to memory of 1468	1832	msedge.exe	89
PID 1832 wrote to memory of 1468	1832	msedge.exe	89
PID 1832 wrote to memory of 628	1832	msedge.exe	90
PID 1832 wrote to memory of 628	1832	msedge.exe	90
PID 1832 wrote to memory of 628	1832	msedge.exe	90
PID 1832 wrote to memory of 3984	1832	msedge.exe	92
PID 1832 wrote to memory of 3984	1832	msedge.exe	92
PID 1832 wrote to memory of 3984	1832	msedge.exe	92
PID 1832 wrote to memory of 1232	1832	msedge.exe	91
PID 1832 wrote to memory of 1232	1832	msedge.exe	91
PID 1832 wrote to memory of 1232	1832	msedge.exe	91
PID 1832 wrote to memory of 4480	1832	msedge.exe	98
PID 1832 wrote to memory of 4480	1832	msedge.exe	98
PID 1832 wrote to memory of 392	1832	msedge.exe	99
PID 1832 wrote to memory of 392	1832	msedge.exe	99
PID 1832 wrote to memory of 1076	1832	msedge.exe	104
PID 1832 wrote to memory of 1068	1832	msedge.exe	115
PID 1832 wrote to memory of 4604	1832	msedge.exe	116
PID 1832 wrote to memory of 4912	1832	msedge.exe	117
PID 1832 wrote to memory of 1092	1832	msedge.exe	120
PID 1832 wrote to memory of 1092	1832	msedge.exe	120
PID 1832 wrote to memory of 4752	1832	msedge.exe	121
PID 1832 wrote to memory of 4752	1832	msedge.exe	121
PID 1832 wrote to memory of 4716	1832	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff85864c188,0x7ff85864c194,0x7ff85864c1a0
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,15316306540952216167,4135431766152769298,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,18003701112966423392,9921090207083150253,262144 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,17874647893025657229,928782631266638289,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,5738585041345449739,15879110487742538564,2097152 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,3082430480552207869,15589612104776897377,2097152 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,12759297290471975090,6546445026158314183,2097152 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,13095832600195283629,11614091809935557877,2097152 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,5667433564349504779,4823517870416110471,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,11397144932030075906,15259193397397901743,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,815776000829317455,4794692790013433065,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,815776000829317455,4794692790013433065,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,5836277988605822197,6990463030405439429,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,1351756389370627298,9218279031614241982,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,4834415943072086525,1981250146057457699,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:8
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2804,i,3297133565000709459,5662587112482900606,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,2602996480447253955,8309149627908826275,524288 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6156,i,11690691322955840161,5618916383353922745,262144 --field-trial-handle=2308,i,3444647876174013972,4435980167283396217,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cd90090522a576a2007c2ecd8351207e5f5e2c1dca081b9bbd59506599eaab51
MD5 0f230ad0db77b94fcef145625eda78d9
SHA1 a1744b7f1338f88f1961d9d403643efaf1dfe2a2
SHA512 1c9cea14bf14fa3eeea83f3e3d9ae0ff23ba35c954a13cd4e025451b060eee8fe67fea42cc946afca25d6edfb64fd7f1f4bf62003399f1071c3a5bbfaefd89a6
TLSH
T19161FD806C404E64FF965F78A3F622FF35B5F0815AF3AD9D31B8C879A466759920434C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591a83.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591a83.TMP
Size 3KB
SHA256 7907f13c4bbcf5f8c81ed15f9bdd209234fa10f8766d5b80100f04b950c8298a
MD5 887dbb6348d8ed088e1780d85a285ce3
SHA1 3f1d0734c9c5b8b123c0b330bf1bfef20b13d7d5
SHA512 864d2e2a1c510050cd0dd73c83f834a0dc96ce1141763cb30dea64aade74e3f62475796105cadafaf83f7bbf5f5b9963c40f0e4a23a7fc6f6ae13fa1b9a4e5d1
TLSH
T13261ED806C408E64FF965F78A3F622FF35B5F0815AF3AD9E31B8C479A466759920434C
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ba4a73ed464a4fe26391ec2efe0d2d8afe352868df02d8f7790d4a1a763c9a13
MD5 914dca30ee9aa7160165f1ffa63559fd
SHA1 60c7998a909dd259b1ffefb7a11442c1f1fa0bba
SHA512 8f9d5d155446a397f92ff896f5d06ef4dd593f2b88b10c0d3d63e8efb221c420a9258ac4988daca5b90cc7fde061675c6dea8033a58877a21226ace7db27b49b
TLSH
T15A11CCF7C3E5866E8A0556F05A28AE2BDE2C0506422C3C159AE4FF2B93F3075D00299F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a406a5521187d1c339f5dddf82f19ac2b1e96316cacefffd4a467d03259af98c
MD5 acf6ba8fc52c2af28f37015f4bef48bf
SHA1 4dcbf6d3c4ed4e6c77edd06f81614cbdc57d7497
SHA512 c5a055428c52857b9a9d7e5fbdf0e423802a237bd94c636a3ecaf3c42d8ce0a8e47e98d4863b9f1803b27d9e5ae6e0aaf2848a9292b41647aecd09909a1d6cad
SSDEEP 192:sxZDRLW1/fCsazpIdpd9HW6+WNGY36asAIgrJ:sxZDA1/fCsaziPHbGXS9
TLSH
T11612B6566E28A97B8CC7D20DBA25BF53E6F9503291D41E58AAFC861C05E76CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 991e208d0196e20d0df73a26baac2bed072612ec4f12fbd6fee01588d4820b3a
MD5 51bde5ace6bfbe46c0f07ed148f1e1b3
SHA1 d886eba52f0449bb801cb29d57ea3e397aa9702a
SHA512 99b66d801bba8c6e02f2d2a533f18a9af5f5279ed45f43b772d561eacbce2031870d0d5cf3831cdf4dc1309398cef4a38c2335a509ea69954c0aea5a932857cc
SSDEEP 192:sxZDRLW1/fCs0CpIdpH9HW6+WNGY36YsAIg5hJ:sxZDA1/fCs0CidHbGX4p
TLSH
T12822B6566E28697B8CC7E21DBA65BF53E6F9503291D01E48AAFC871C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 296c9c832e5fdd2e7ce382e932e13a03db704b6d4f656dac9b05ace880d9ad1b
MD5 eabae715682f88f2e5511c433187416c
SHA1 eddee04fa1650ac84562a5723cb4e9aa1e9708e3
SHA512 0d0150a3f50e4c1c63eacb93eddaee990d0399d47adf7fb90a897464c9b92000708683f775e65fe0b660c3b8ff316e3fbda3f80f472ff24609ab8feef7221d4e
SSDEEP 192:sxZDRLW1/fCs0CpIdpd9HW6+WNGY36+sAIg5hJ:sxZDA1/fCs0CiPHbGXep
TLSH
T1BC22B6566E28697B8CC7E20DBA25BF53E6F9503291D01E58AAFC871C05E7ACD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 69d9e94397dee9f6772f40a0dc09021cb9bccac1de995bd2fa79ebe01813a419
MD5 7638c687bc2996331fcd261e85f8d46f
SHA1 9690830d09e1142594829c85aa49df1f61d7f1c6
SHA512 75b27debd1b83e65e8ef989d5fe4a6c0214315ede45ce461150faf75849a7f0ce81a9b12118a41a5198b1247f0cab540742bb284350c7a8a9542e4cfe9867afd
SSDEEP 192:sxZDRLW1/fCs0zpIdpd9HW6+WNGY36asAIg5TJ:sxZDA1/fCs0ziPHbGXS3
TLSH
T16B22C6566E28A97B8CCBD20DBA25BF53E6F9503291D01E58AAFC861C05E76CD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b23a1669f35e9537302d02ed18e5065802b6ada13f7e1a845a213e44516e2679
MD5 b28a11b042ce46c0944462a1a0b77b55
SHA1 4d982ccd1f18204d5f7b8b9420dc42489450e058
SHA512 85578c7b959bb3aedcfe294abcb63c708924c46e712cbdac3d9aae5ff0e7e4f89c67941ab6066d1a7a31f7f36463c75462b4e1f18a4650394b1fff9fbcfc30c8
SSDEEP 768:iYKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/troNq:iYKlm7QWvUYe0u1ja8/L/E/GNq
TLSH
T1BCC20A3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a63bacdb-96bd-4503-b6c0-da0543d94034.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a63bacdb-96bd-4503-b6c0-da0543d94034.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59b608.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59b608.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8069d6bda2283d6e3ea8b95a973cf9dafbb8d260ebe7c6469c1201b6c4c6957b
MD5 d031f4344f6b1bdc7620885a9fb3017e
SHA1 146b7fa9f2374b55c5c19f199bfcb88b5fe3bd0b
SHA512 6fe0aed60c99f8249cced3a9d562902808bfc988e51352c2e66757b74e60e0368707b81d07c9640edbdc9dee0f99a0ff34e2bd5064244a9921d87e671bac28ca
SSDEEP 384:riFiZcIczsNr8TUNTUlIlUhi+bdDqh//PebawTeUCMsoH:GFQg+wgqoYi/YaweMs0
TLSH
T120A26C375CA4987EBEF7DA85F44A36138EB480A7C6C4AE90E6DC9A1D00DB1DC130BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 948e3b24b3274d5059a9217191b3114e3541e8df5fa08e43e4e2d65722293c40
MD5 f1595974efe55156dbb869a2bdaa6a17
SHA1 010e4339cb312e020cf2fa04062d7a7197cd4eb3
SHA512 020391432c5394f5ecc71d06e836c97b3f4e0bb19d7584d449d7483483a70ccee6c435d14464e7b0f7cc7c3c3c333262ac8491e6eaec1100b3df85bdf739dd3e
SSDEEP 96:KqONkPQsjpfbUmjH5ih/cIPURHl8h4otop5yAaDHBKP4v+Y1xf//ojdexBywvBCR:BONX6JUm0QmiUyEhso//3ywvBCi/VSU6
TLSH
T13B02E838BC687C7B9EF3AE45B4877B235FA4106BAA952F80DAD81E1D01D725C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 511ff3adc9d1240e7cf8b0d7d0060918aed1855dd4e8606e1f8558e9861fc494
MD5 e81da2a6e422c9b7fed5ecf147d3f366
SHA1 3e5d749d67a9fed7a62012029044abc900bd4011
SHA512 bb270871ae7532ada858aed655046f40adad00a6f467ba1efb5c193dd69b11a29e226435ef6ea69b12c2a8216d58caf368759e53954b0cf0215db0eeceefacfa
SSDEEP 192:uAm+xasuheOwQxMGsNJUhQZlqgUbaGQmiU1szi14h//3ywenezIaoMc/QwTeg5/B:GZcIhsNJUhi+bdDqh//PebawTeUCMsoH
TLSH
T189829E366CB8AC7A6AF7D585F4873A139FB48067D7C86F4096DCAB1D01CB198130BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3010656a3df4da3f7f5536d04d213f548b788507b7e3a7b6d5f09b7a880d081a
MD5 15ecbae6f975e3c67dcf4d7e739e1ad0
SHA1 99ce9576e286fee281d6cc90884fa81f7d8e574d
SHA512 b3d9dd669e0d1b48d5eebac4e9e362b66929509ab98f62f8dd3c197053aa40fdd5499a91ff2e4c4bfda7b3b26b7a95157bd2b0a8082f187a57073ee1ac92ecb7
SSDEEP 192:uvm+xasuheOwQxMGsNJlhQZlqgUbaGQmiU1szi14h//3ywenezIaoMc/QwTeg5/B:dZcIhsNJlhi+bdDqh//PebawTeUCMsoH
TLSH
T1B4828E366CB8AC7A6AF7D585F4873A135EB48063D7C86F4095DCA71D01CB198131BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ed42d1dde7ddf927e090dca10dddf0441afabe2f45482aba25c88afac5f3f616
MD5 c7be715078e4e31707df41ab16af69a3
SHA1 54eee95a351266669045c180a73691d6a0ca7679
SHA512 c94f8d6a0ee4c9cee8d18db8d87233b404b78496838e0f57a92005a98cbb08652f6751c20504cf6a8313a40b37d3bdff36812dcdd7f79241b5543d6e434b2511
SSDEEP 192:BON06JUYQmiUy6Uh2o//3ywenezRNxMc/QU6:BON06+4c2o//PeMaU6
TLSH
T17D120A35B878BC7F5EE39990B48736139E644167EBC97F90DADC2A1C01DB19C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6ba9b22-9c8c-4087-9219-305fe69f6d6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d6ba9b22-9c8c-4087-9219-305fe69f6d6e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8d7799d06c45537e9af527417081356de2d165f295dbb44b5c8a38fda757535e
MD5 07c2f398bc0fde1692b2706b11179548
SHA1 2274cff7193a23cc2984285c58a0f71417ef10a7
SHA512 5f2ad625b9835733ef0c037c418bc4079308080dae85c8f1c138bed4cb70c53c308fd84389b405cdc0fe43bdb3cc1a5089e762fe03371cd0b13baa458c2b7b22
TLSH
T1F141E958A6FA1108B3B77F59ABF658AD487FBD372F06D55D00210E4E0676A40C8A1B37
MD5 SHA1 SHA512 TLSH

Submit Download