c065538606c866b0ac78510bcb1d4bbd7cf8c1aefeb4240a242edca1fd85698f

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 18:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 414KB
Sample260925-w1vjsstbrd
SHA256 c065538606c866b0ac78510bcb1d4bbd7cf8c1aefeb4240a242edca1fd85698f
MD5 cea10909717b273cf2b88dccef3666b7
SHA1 f1c7342ae4f3fdd667e190e6500fd4fb5823a4be
SHA512 6cfb2c76ab9e3854bc7fac58bbaa45db47aaa0843113b2c18363ddfd21f1062a09b6387f866f828b7b400dd8a1979f2865a7f5fb59337049a1e548d3b96d628a
SSDEEP 3072:LY1T9d9XrZKN5HaObnNCVqPXP0mg9XrZKN5HaObnNCVqPXP0mRN7otek2/5FwcJn:LY1T9XcN5bJPXPecN5bJPXP7NgekOl
TLSH
T168941AD5B2E23122917320B8A4BF9357B235C057A9098864F89C9CE4EF9CE845777F6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1228	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{CF1B0019-87F4-4C98-A9CE-78D70EB9F2CA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe
3192	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3192 wrote to memory of 4740	3192	msedge.exe	86
PID 3192 wrote to memory of 1228	3192	msedge.exe	88
PID 3192 wrote to memory of 2840	3192	msedge.exe	89
PID 3192 wrote to memory of 2840	3192	msedge.exe	89
PID 3192 wrote to memory of 2840	3192	msedge.exe	89
PID 3192 wrote to memory of 4792	3192	msedge.exe	90
PID 3192 wrote to memory of 4792	3192	msedge.exe	90
PID 3192 wrote to memory of 1748	3192	msedge.exe	91
PID 3192 wrote to memory of 776	3192	msedge.exe	92
PID 3192 wrote to memory of 1748	3192	msedge.exe	91
PID 3192 wrote to memory of 1748	3192	msedge.exe	91
PID 3192 wrote to memory of 776	3192	msedge.exe	92
PID 3192 wrote to memory of 776	3192	msedge.exe	92
PID 3192 wrote to memory of 592	3192	msedge.exe	93
PID 3192 wrote to memory of 592	3192	msedge.exe	93
PID 3192 wrote to memory of 592	3192	msedge.exe	93
PID 3192 wrote to memory of 908	3192	msedge.exe	94
PID 3192 wrote to memory of 908	3192	msedge.exe	94
PID 3192 wrote to memory of 908	3192	msedge.exe	94
PID 3192 wrote to memory of 4204	3192	msedge.exe	98
PID 3192 wrote to memory of 4204	3192	msedge.exe	98
PID 3192 wrote to memory of 4388	3192	msedge.exe	99
PID 3192 wrote to memory of 4388	3192	msedge.exe	99
PID 3192 wrote to memory of 1964	3192	msedge.exe	104
PID 3192 wrote to memory of 5596	3192	msedge.exe	117
PID 3192 wrote to memory of 5604	3192	msedge.exe	118
PID 3192 wrote to memory of 5612	3192	msedge.exe	119
PID 3192 wrote to memory of 3652	3192	msedge.exe	122
PID 3192 wrote to memory of 3652	3192	msedge.exe	122
PID 3192 wrote to memory of 3344	3192	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ffc878fc188,0x7ffc878fc194,0x7ffc878fc1a0
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,10928350438795746806,6341476996677469950,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,2835204525159412166,16203961773813513761,262144 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:2
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2400,i,13333921190076306278,352856118351887940,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,10270914277582958204,4883517627497351292,2097152 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,14931558142452069451,5832611775489002965,2097152 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,8863912132525487739,6911892257567547785,2097152 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,7257517866802481128,4773077854355364928,2097152 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,13326483661531538349,6355583861665705002,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,5145432815675692727,3771235740879099625,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,11426918293516856154,5289676689754987607,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,11426918293516856154,5289676689754987607,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,14402829847283905923,16838160882719338653,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,6899624164386112315,11952330729973429374,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,17661122499662460808,6678590449875994407,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,945054116591139587,15700661353400456671,524288 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6028,i,9058182917704740680,3954658579026860144,262144 --field-trial-handle=2892,i,9384927530641093172,9414749592673354221,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

24cb3d54-e906-49cf-9228-db9b2011ddec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24cb3d54-e906-49cf-9228-db9b2011ddec.tmp
Size 10KB
SHA256 79367072fcd249207aac583e684fea3ae2e3bc0faa67c57a564680026119dfb0
MD5 ef34f42786bf7b645e095774918aa5e4
SHA1 1740b7e734df71eb0786adf981ad4ab36b0889ef
SHA512 5c6b374eaa623782ee1f4697aa6782fe0990b0bf258babc51624cd188f09919f616c26680d8b3d4f1b8e673417d8079f0e7bdfc2946306e7054f8feb5d9e51b9
SSDEEP 192:sxZ0RjWb/f/sBAIdpHgHW6+WNGYrEEbIg5xJ:sxZ0sb/f/sBBAHbGS1
TLSH
T1CE22C85A6E28A97B8CCBD20DFB55BF53E6F9503291941E48A6FC871C05E7ACD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 34e92c7b4bed3653f999fd35caa9c61ad854ad9f9830a8ab1134998bd0824970
MD5 4fc634435c36af0313aacb58447b97ea
SHA1 b1243588a5095961dfc1413742e6c8cbd01dd883
SHA512 b02e8e98ddd2c3a115d1da59d5df3655bbe017f411a3d950e74029ab7a3ee3f9b0074fa8eb7e7407426bda241f795824ab308848dafe1ed5060105e7c2f02889
TLSH
T13261D68A89933CE9FBA411747BE109CB377619BC56B35F4A2BE4DD38B85EB184500C54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591989.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591989.TMP
Size 3KB
SHA256 f3ba50024ad4d628e40c6792161c07c14fa6c80a496285e862cd74472bb55168
MD5 6d93a9e2619497c629cc6222d8875c06
SHA1 7a971248f73b53f3981f11eb9afd1599d333e8a2
SHA512 b7c69ce23bb2e2bdc2ce5c42c0e972aef58084e8e74d970f2cbca260563fb14f3f9d6dadb0f833d3ad53d4f336ba4ddd75878b1543f42d7aae47ce9833a2d5de
TLSH
T17761E68A99833CE9F76011707BE109CB337619BC56B35F4A2BE8CD38B84EB084500C54
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 38b68ed2c2397e19b274f3910ee41675e6872541dff63d9f9c538867028560e6
MD5 cfd9104c41cc30ae3cab319707745cd6
SHA1 17a5aafb4636a208113999dc80a65d4c0efefd56
SHA512 71acff6d16adba4b92ed86a587727a4abdb355ffba9be347d57dff02306634523307e4d7021a5e60834a0eda8b975e38d34536b0385da37d098b9d1d2f98b334
TLSH
T145819BBB83D4837E881562F09B25BA2ACD2D051B42283C558DF9AF5F73E34B1D20169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 da85da2be00c78832e54049f164dbe29763e58229f118a14dbb5724b0947d49a
MD5 4077df001aabb545592b84f90de93dda
SHA1 517b9cbf3facd0bfcd827cce14e786ed3bc6c7ad
SHA512 67312dc5979a521fa7e6bbfcee2a75a53e8f7e39087d59aa73ca561937b0d053e8b2cbd986eeab6c32ea23a91d9c69ff963beac2a9f2fcc2460e26c0b58ea431
SSDEEP 192:sxZ0RjWb/f/suAIdpdgHW6+WNGYrbEbIgrJ:sxZ0sb/f/suBmHbGd9
TLSH
T1A312B8166E28A93B8CC7D20DBB55BF53E6F9503291D41E58EAFC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5dd2820e8c6a8804bce30321ef9028209446e891d3e2ac931785bedeb6235b8b
MD5 90c6df5b77b50c8f33f96d4233d1d6b5
SHA1 afca56ebffc27a40e6c3a1edd86c07df55ff142e
SHA512 d5a2143bec64729597bf0938bd671316627ba21401df490bc0ce391cb131c0143fb238b3df04a8695b40e880759146daf59ae1524918a69116c314c0f720f17a
SSDEEP 192:sxZ0RjWb/f/s7AIdpdgHW6+WNGYrbEbIg5jJ:sxZ0sb/f/s7BmHbGdD
TLSH
T1CA22B8166E28A97B8CCBD20DBB55BF53E6F9503291D41E48A6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 404c9d74be3dba083061e3b2590c74a19aaa1eee5fd1ef07eb503b8a169d6d05
MD5 101505460fcd31c7801840d23275d085
SHA1 3b2aa2ca5b41ce5240080952b45324f3afe7e7d3
SHA512 4d8c119fc028bb617d98c2a57cc221c0e5752842ae84ddbbe78946c316f457cd2ea5a625505a3bbf24073f4a39de283a8a52727dd9cf5c286e99aeb85f516240
SSDEEP 192:sxZ0RjWb/f/sBAIdpdgHW6+WNGYruEbIg5xJ:sxZ0sb/f/sBBmHbGQ1
TLSH
T11522C95A6E28A97B8CCBD20DBB55BF53E6F9503251941E48A6FC871C05E7ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f8bf112b41aeab8e8838201b32118bf4b3eb7754895ed21ede77a7bdec45d782
MD5 d6295fc7be1e02071c697e360db4ce1e
SHA1 f852d2ffe5b05a506f7bde46254639e5110f1630
SHA512 e1b0c0736ab461d6ec8f19730169769cf258251f5a74ff9d7af6d916ce67a754a4e9598e7677286b41a7639baa891ec79bd92b0435e91f5dda2ecebdd375d582
SSDEEP 768:2by4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbnroRz8f:2by4J/DWvbtBhu1jajiLm0b058f
TLSH
T1BFC2FA3F644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2a1962bf04116c5fa4d7b302e8f19d3eecd7c9f8c31d5351feacdaee9704c157
MD5 1cc8ea0c6621f5deead02677f3cbcd1d
SHA1 23d6864c061fbf553195bdece9900816cdea845d
SHA512 9b2a12b612c28e0211d71cfcc5aa9bc2e1526693cff834da3aaaff080a5d9baa6855d04fe345a0d534b346532217c26755de576565b6bd132fb2566dbd0c9a56
SSDEEP 48:KIDI1Ks04jyLLuvL1t3BItKaoovyZAILKJy03:KIDCKs0+dByKaoyKAgKJys
TLSH
T1A091548531BB06803D7E694890F1965E13D23273305CEAAB7BBA40AD5E27F150EFC5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60120a56-54eb-42d3-825f-42f89195cd53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\60120a56-54eb-42d3-825f-42f89195cd53.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 07950c802c52bb02c029389bfc31b6fdf3dbaedd43f20a3b5cd0a1dde57a2721
MD5 76a64496c7bbdfc61e9e1c18548499bc
SHA1 3f50be1f23b942337646b1f9b6d428d324781cb3
SHA512 1f580ddb3a06691b0c6194d2cf975596c693a75a9596aa47fd6982e91e197bf90e93e1d8523c3930213660e026e0d3f14a63fb7473c4a2c35819250cf6412165
SSDEEP 384:UiFiZcITzsN78TUNTUlIlqQZBucHX58E9O/JXDJtgOIwZOyS3o9:vFQ3uwgvmCa6O/JzJXsr6
TLSH
T146A25B3799A89D7B6DFB9744F94A32038FB850ABD6C5AB90E2DC5B1D009A1DC030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0be315b6580a15ad7a5a104b91b7c44aa161229039950fa996a4890e276b2f85
MD5 b101cb0fd964f09a31e5a952e24c96cf
SHA1 22212866cca1a260622a187e9f96bb20df4e6445
SHA512 f3c2b861baae474baec8945bda61b35b508c45fed15e562563fac2826ce7513a19ff7ef2025ca35ae7fb8a9ee75e9b4b8e0fbdfe89166b5cc190eebb0fdaf502
SSDEEP 192:1ONr6wlDgQmiUyj1W4X58gZ9OK8tDlzXhU6:1ONr6kgmW4X58E9O/j1U6
TLSH
T1A102E938E9687C7B9EF6AE09F58727139FA4206BE6852F80C6E81B1D01D765C1307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c94e8e0edd733de2b6c5e0a2282b9fe05b1b5e4b9255a8fe5cd2a58a7b348bcb
MD5 3bacc99cf1d00ce57a379d46fd897d5b
SHA1 5e14ab0938e955a572f6c11f39144402045987bb
SHA512 d22ee0cc9785fb75cd4a678d7ade1c2ae1cbdaf07591315892374cdbebe6c541411ad2f6ac05b75b62af13d25689eb7370e9b128fad64cd790fe397d9ded439b
SSDEEP 384:AZcIhsNZnQZBucHX58E9O/JTJtgOIwZOyS3o9:+hJmCa6O/JTJXsr6
TLSH
T1D7828D3699B8AD761DFB9244F58732039FB8506BE2C86F90D1EC6B1D00DA5AD030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6f301ca858d9258fb144c4d15c39e777f1b1a3837e1352c06805367545ef7d44
MD5 dd74b2db1b965042edfddc64d07bf80a
SHA1 4433ef71a75cd2d02923216c48689d162a2b22e3
SHA512 b85580c48d0e0e8432b4569e8654d2227eecec0ab1d9b487b413216c303d3484ef7dde5009b9df12e856d8c104c685f5b1e02def8db254bebc03cd42dabf8857
SSDEEP 192:1ONc6wlDtQmiUyB1M4X58gZ9OK8JjveX/BU6:1ONc6kryM4X58E9O/JiJU6
TLSH
T125120835B9A8BC3B5EE2A544F48731039FA9512BE7897F90C6DC2A2C05DF66C130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6c1344a01ed9860937d57ef5445fe728c090f0655a515ca8f498b5c98f8b24e8
MD5 46f3b49c2109d5dbc6284125a824305d
SHA1 2b032e5fee38299cc836755773e2a24a1a6714b8
SHA512 e4a42b0c5eead55df274d0575e14784a8ba6f81aed333c7363aed313ca09d77adee9d49642fcc474b59789452126bc7ca64b3d8897090ef5bf11959a9bff51f5
SSDEEP 384:LZcIhsNZqQZBucHX58E9O/JTJtgOIwZOyS3o9:ThimCa6O/JTJXsr6
TLSH
T14F827D369978AD761DFBE244F58732039FB8506BE2C86F90D1EC6B1D04DA5AD030BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e995bda-3586-4d15-aec4-1e473cbfa421.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e995bda-3586-4d15-aec4-1e473cbfa421.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download