43c2f181c6dea382d12c3b540854f81633206844bacf7e13e4033ab1edaf5122

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 4KB
Sample260925-prrcfsstfv
SHA256 43c2f181c6dea382d12c3b540854f81633206844bacf7e13e4033ab1edaf5122
MD5 e02622d5796957b2e266234467c66da6
SHA1 af00bebdc53d35d3b47da2e88ba9613c1eb80247
SHA512 9315282ae6a22441f8ea96386bed8448851049e4418e925058a9a6b2a637978f85ecda635d1fcb1ff00bba799d9b2c2c366fbfd6625a7f9e65ffb787ac79ab78
SSDEEP 96:57evA1GwLezUb/yMJFMJp2MJuMJnc1MJpfMJp2MJWWppdENL/d6oGniGJGku0FAc:tesCgl6rxcqGrbpoNLE5DDeCB
TLSH
T1CBA1FF51BAE5575F8A030146E341FE9A8FD0946A63360B98795DB2FB0FCA048CC27BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4596	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348133441833543"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{1DB04E94-D6D2-4760-B2A0-D8AA8B4079E6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4280	msedge.exe
4280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe
4256	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4256 wrote to memory of 4576	4256	msedge.exe	85
PID 4256 wrote to memory of 4596	4256	msedge.exe	86
PID 4256 wrote to memory of 4460	4256	msedge.exe	87
PID 4256 wrote to memory of 4460	4256	msedge.exe	87
PID 4256 wrote to memory of 4460	4256	msedge.exe	87
PID 4256 wrote to memory of 4680	4256	msedge.exe	89
PID 4256 wrote to memory of 4680	4256	msedge.exe	89
PID 4256 wrote to memory of 1656	4256	msedge.exe	90
PID 4256 wrote to memory of 1656	4256	msedge.exe	90
PID 4256 wrote to memory of 1656	4256	msedge.exe	90
PID 4256 wrote to memory of 4908	4256	msedge.exe	91
PID 4256 wrote to memory of 4908	4256	msedge.exe	91
PID 4256 wrote to memory of 4908	4256	msedge.exe	91
PID 4256 wrote to memory of 1860	4256	msedge.exe	92
PID 4256 wrote to memory of 1860	4256	msedge.exe	92
PID 4256 wrote to memory of 1860	4256	msedge.exe	92
PID 4256 wrote to memory of 1124	4256	msedge.exe	93
PID 4256 wrote to memory of 1124	4256	msedge.exe	93
PID 4256 wrote to memory of 1124	4256	msedge.exe	93
PID 4256 wrote to memory of 3784	4256	msedge.exe	102
PID 4256 wrote to memory of 3500	4256	msedge.exe	103
PID 4256 wrote to memory of 3784	4256	msedge.exe	102
PID 4256 wrote to memory of 3500	4256	msedge.exe	103
PID 4256 wrote to memory of 2880	4256	msedge.exe	107
PID 4256 wrote to memory of 3200	4256	msedge.exe	118
PID 4256 wrote to memory of 1104	4256	msedge.exe	119
PID 4256 wrote to memory of 2120	4256	msedge.exe	120
PID 4256 wrote to memory of 3076	4256	msedge.exe	123
PID 4256 wrote to memory of 3076	4256	msedge.exe	123
PID 4256 wrote to memory of 4280	4256	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa42b6c188,0x7ffa42b6c194,0x7ffa42b6c1a0
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,1425782811601785274,17998912378411856437,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,4987434399302810587,16783747868954662579,262144 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,14416269129186212933,15889253193072692187,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,14784522880768950483,120202274228617605,2097152 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,1032070275001476031,8943377318202525290,2097152 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,12699565176617133313,5999707236168881226,2097152 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,10346379456933402695,5453548330064794041,2097152 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,3307774819143241341,17556335707499901432,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,4765265869937599887,7588437533702197575,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7412844114472625006,10937336195477877478,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,7412844114472625006,10937336195477877478,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,4979727664426247806,15729378824461143810,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,18414538462438312591,8416609282381405878,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,3107052864617640542,7735098602911289125,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,12409297393653541651,436884738504101203,524288 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6284,i,12558891977835012489,18216884746251078469,262144 --field-trial-handle=2248,i,10458834608372831767,16161399542976424250,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3224

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a34840a9da263dcc78e4996bd0cf5976384df5b01117d355caf949bd1d6adec
MD5 25ff4b287462c56667a0237a8aa039e4
SHA1 c16837dd65f6f718214c513ee003bbfb20a04e66
SHA512 dfe6e213f2618070d5c669809893c4af033a952f75e51a6cbea85fc080fc5dfcde7fa3d52adda8ad9dd2a3a2434f82289dea26adb1dbd983ae2c4a487780bd61
TLSH
T1925178C741524C60F796C3B7A3F649E3BA34CAC71D9F2E520484ECFA8846FD4C18014A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a880.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a880.TMP
Size 3KB
SHA256 cd6d4cc0141edc73138549e9259bc8da2be7d9297f88fcdf67cf9473ef94f0e6
MD5 10aed856e92827380b56625e9b492ddb
SHA1 596ae5c4f942d919b5e30103bfba980545835110
SHA512 2a9afe2e8c59fb3bbc4504584de7c2b88d4c39814555c82434ca2629412c7e88fd89b1799342a857bfd24d70fbb7f5ad3251f6b622f3bf289ec7cdc11ce2cf57
TLSH
T1C75166C751524C60F796C3BBA3F689E7BA34CAC75D9F2E520484ECFA884AFD4C18014A
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 8c6d956623144adff88956364adb44c78015d574996ed170b1897d0cc11f0846
MD5 6d8b72643d2e535f64f35dd346398535
SHA1 037d6fe9cf138360c3113940cbd96a113f65a72f
SHA512 061bfd0e6510ee40378886e572c97d00a1d8b94b508917783d64c54795b8cf056d92864d01fdd689ec255a35d56d783c962c19e6d81a382129f0d028c89bafec
TLSH
T14E019CB7C3E495BE8A0156F06A18AF1BCE2D0946831C7C5AC5D4AF2B93E3475D11189F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 4bf4cd1febd6be3338634304b60a6fb06c922fbf541dbb70c196f9dbf14b46cc
MD5 63e19f496b0716e444da6286471e9642
SHA1 8d369ff22fa15a4e051e1f015653c512d0833c14
SHA512 4419912238fb58d6c5892533ed4b9022e3316fe5de8e995d0ed314b742d389bb80a7d7ee5941659607c091bba6205c83e0141eaaad026f1071a81feaa045e9c6
SSDEEP 192:sxZVRNWl/fdsd6IdpdbHW6+WNGY36alFUYzIgrJ:sxZVul/fdsdTJHbGXYUYL9
TLSH
T1B912B6166E28A97B8CCBE20DBA25BF53E6F9503251D41E58BAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8aba9e1d6e6dbbd3d5406ed2d144d3c934fa81b4bac3ea57f32e23b44dc4a4f5
MD5 e4f8a745d6a8b693646f7d706388df73
SHA1 b69f90202006e552568e6bdd60d76939f722c8bf
SHA512 c72366722c39498f287043616ab4d53ce5cf4d93b65fa685ad8fb466fd4abc983c67071bcf6cff6839a9e98aa15f11216b2568e852b922f6254bc42a28be07ab
SSDEEP 192:sxZVRNWl/fdsc6IdpHbHW6+WNGY36ulFUYzIg5dJ:sxZVul/fdscT7HbGX8UYLZ
TLSH
T1A422C8566E28A97B8CCBE20DBA25BF53E6F9503251D41E58B6FCC61C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 10846291bfae7efdb731f7aaf8ff0f3528b36f4c01689535f9cd7959d02776dd
MD5 c176fa3d80fe4b5145be4746e84ce826
SHA1 f7475ea0ed59d53fe7f3a8c2e17c8b18dea18717
SHA512 30fe7fad6a4bbd01690b9ea5e7cb8000881fc4e1d4ac7b36071178a34df89faa2a45c99a6c965af0b0211e1f73528f6a7fb19e66ca3b1b2d54a174d4ee372ade
SSDEEP 192:sxZVRNWl/fdsc6IdpdbHW6+WNGY363lFUYzIg5dJ:sxZVul/fdscTJHbGX3UYLZ
TLSH
T12622C7156E28A97B8CCBE20DBA25BF53E6F9503251D51E58B6FCC61C05E76CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a3ad2157272fad253d05a9b7b7f42eba947c063c2aac87c0b2382a53310c2f49
MD5 851b4aea31e8fccf525a01ddabab96bb
SHA1 fcbdabcfe0a0c2597fa9315d86e2a88440ebbce8
SHA512 a7f1a466ee03e8bae3314fab5f6d0679ce680009a8f2783e5a593ad98d8ddd79a6b83c256113663617d501df999d0a590ad5b988f7de942c63968ce94cb40b10
SSDEEP 192:sxZVRNWl/fdsk6IdpdbHW6+WNGY36alFUYzIg5/J:sxZVul/fdskTJHbGXYUYLn
TLSH
T1B222B6166E28A97B8CCBD20DBA25BF53E6F9503291D41E58BAFC861C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 6e6af2ce4006f4d8944542ca8a7372e1aa8edb7dbb7607e4c1cd002f0241080d
MD5 9ffd00b71bc39ea9358f6430d1b841a5
SHA1 494d8b2dd7ac822a1503978861f66c6d83ed783e
SHA512 d40191159f8d25e472fb040088b65868e593c5aefad531782974e139a99ca5b725b05344e626bba0e6892ad4616fed882603c8b4a468a4118b7f56cb2c93752f
SSDEEP 768:dRKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/mroD9:dRKlm7QWvUYe0u1ja8/L/E/dD9
TLSH
T128C2FA3B640CCB7E4FC05A9DDC5A6F976EE802C796588D4047FA984C02C77EA912A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b193870-a192-4ab2-947a-65e1f6a3d4b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1b193870-a192-4ab2-947a-65e1f6a3d4b3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 06aa2248f4ff253adef579a8a148644c5705b39f062a34ee3abcd28dd6203913
MD5 b4d1ee7d87328fe0ff721a0d66fed067
SHA1 c6c3ba9b9b8095541c256ffa4902bf22da0ead64
SHA512 b634ada78dd21ca4905f1d78699e84bfcdbca8881a4bec72ca880d55bcaa85b26fe4597370993139bccfd1fcb61f347cbc56f075ee3d0fa1e67efcf1d6e4984a
SSDEEP 384:tZcIhsNo3es8bk3Th//iDkEYoUatgOIwZOygBo3:1heY1/aDpMaXsfc
TLSH
T141828D3568789CB66CEB9144F18773038F788467DBC55F90D9EDAB2D02EA1A80307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7fc021e7580430151337bcd7f452a4386c4f5f8397a7a8d0ab95c709c200a683
MD5 71d164e6125f8aa86265c88c3124e4fc
SHA1 c65c0865e4c06c3255ca8defed1c1b11362e0127
SHA512 55487e34e1640c42973f2d2dd3a05948d0e45c3931acab3751308198ddce2093cafa4d46280a90c5b809c3670771ac243c1da0c3cfaa5776033fe5b2887e4143
SSDEEP 384:qiFiZcIKzsNY8TUNTUlIlmes8bk3Th//iDkEYosatgOIwZOygBo3:hFQCpwghY1/aDpkaXsfc
TLSH
T1C0A26D7758A4DD7BADFB9A84F54632038FB440A7CAD1AE90E6D99B1D02EA0D80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b52d59805073a45475f96379cadde3e6c43aed4f97455e16e9486f9b2ff6e311
MD5 16d10ad6c5b8eea72b31600c5fef5579
SHA1 3a59aa6190bd5a0d0149dea31e8b92bb7ff8343f
SHA512 4f05007b2c89f81f40c951bb6e9209b0fe6e87699edb314b5bdedce662ca9eacb41cd7176038d2fab33ae09d861ed24a0ce34475467e3d4fe6fd03a7673eea67
SSDEEP 96:KqONkNQsjpfbUmjH5ih/cIPURHl8h4otop5BaDxBKP4v+Y1xf//ojdMxMY+XhBjj:BONl6JUm0QmiUy6Hso//ihBjU5BCYGU6
TLSH
T18802D738BC68ACBB9EB39E45F44777239FA4107B9A911F84DAD92E1D01D715C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c6da239fad714b7d9d13df598976020b0ff00d5c87e349868494e046a5e0f9bb
MD5 c76993ed61f9b4cd33c8e4aa9e6cc8b9
SHA1 23b6a640d1483a6ed61e00b4a617547f14df2048
SHA512 f1598c2a3f8abed97979978f3270b4687042f224bb90845f875a3b46ca7968d3a7a5034528beb268df24fd80bf494e9a04213468e132f4f9c5c6cd340299de56
SSDEEP 192:BONp6JU/QmiUyBHBo//ihBjkGnPwosDHNxt/wU6:BONp6+BmBo//iDkEYo0aU6
TLSH
T1D8122835B878AC7B5DA39991F08376139E644067DB856F90DADC2F2C02EF1AC5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fdfa20572a403e00014bfb7ffbb49737742b58dc087c8a0574358c92b403384b
MD5 d99bd0adb8ed951d88b94e347eee3271
SHA1 60ebd93105a122174f9580392a6469a93066b6b6
SHA512 af38604596d99805536638777dd0ec476232c09b679508b1a86454f077dc3729bcffe7e417d7f1131c201212936d2810ff8139fc79fd69d6559364f77aa9e52d
SSDEEP 384:dZcIhsNomes8bk3Th//iDkEYoUatgOIwZOygBo3:Fh3Y1/aDpMaXsfc
TLSH
T1B7828D7568789CB66CEBD144F18772038F788467DBC45F90D9EDAB2D02EA1A80307D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f6e24c4-8d3f-40bc-ad5b-1d0d1f7919b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4f6e24c4-8d3f-40bc-ad5b-1d0d1f7919b7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d04375eb7379c6b0b6f83a889f91a8273c34aaa0d659ba3a14538ca77d13dc29
MD5 e20e455c0b0f5163eec050524eed19b0
SHA1 54d6f842a8c0433ad56d71c62e125c38acd28bb3
SHA512 aaddb67ced2a782936e738647aac94e31282c5744a7dd7e8f81de891fc94f91fbf73668a21e4d3fed5340ca30193017da3d83fe36baa25d846167544d79b92a9
TLSH
T17D41E858B7EE1108B3B76E5A6BF7682D487E79332F0AD45D50110E4F4762A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download