b3c7f3d4f282e00e2cdbca9cc5a12a4956eec8042662e967437ac88cbc64ed29

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 18:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 91KB
Sample260925-w5zz3stdqe
SHA256 b3c7f3d4f282e00e2cdbca9cc5a12a4956eec8042662e967437ac88cbc64ed29
MD5 3e6b2a4c147914a5bae4d1700d4ccf56
SHA1 576df946594298f91e9a2a1673a2e09513a1c931
SHA512 824df5937f791ae57889e55997ac6a00f0ef95002795ed7a3027d45c5ff5c3fdc99819c540dec4f07ff18fbda5388ba6ef7ce57bde283ae7ce1be409b8cfa2d0
SSDEEP 1536:CfSTzRnn8sKgW+Q31AEJOzxBFE4cRJnnmXS8ah/KTuxFK9fIvxtMXKVYlzcjSDP2:CfSTzRn8sKgW+Q31AEJOzxBFAlfhZF
TLSH
T18A933421418A669F13379BD5F810FF09BCD2622DCB1B5D027AFC169FABD5C10DB1A09A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1656	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-939655444-3071939294-1401108526-1000\{CBF54C65-04F7-4EB9-A8BB-A6B4E4FD5930}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 3780	1636	msedge.exe	87
PID 1636 wrote to memory of 1656	1636	msedge.exe	88
PID 1636 wrote to memory of 1456	1636	msedge.exe	90
PID 1636 wrote to memory of 2840	1636	msedge.exe	89
PID 1636 wrote to memory of 1456	1636	msedge.exe	90
PID 1636 wrote to memory of 2840	1636	msedge.exe	89
PID 1636 wrote to memory of 2840	1636	msedge.exe	89
PID 1636 wrote to memory of 1840	1636	msedge.exe	92
PID 1636 wrote to memory of 4448	1636	msedge.exe	93
PID 1636 wrote to memory of 1840	1636	msedge.exe	92
PID 1636 wrote to memory of 1840	1636	msedge.exe	92
PID 1636 wrote to memory of 4448	1636	msedge.exe	93
PID 1636 wrote to memory of 4448	1636	msedge.exe	93
PID 1636 wrote to memory of 2452	1636	msedge.exe	94
PID 1636 wrote to memory of 4532	1636	msedge.exe	95
PID 1636 wrote to memory of 2452	1636	msedge.exe	94
PID 1636 wrote to memory of 2452	1636	msedge.exe	94
PID 1636 wrote to memory of 4532	1636	msedge.exe	95
PID 1636 wrote to memory of 4532	1636	msedge.exe	95
PID 1636 wrote to memory of 3424	1636	msedge.exe	99
PID 1636 wrote to memory of 3836	1636	msedge.exe	100
PID 1636 wrote to memory of 3424	1636	msedge.exe	99
PID 1636 wrote to memory of 3836	1636	msedge.exe	100
PID 1636 wrote to memory of 3144	1636	msedge.exe	102
PID 1636 wrote to memory of 4260	1636	msedge.exe	115
PID 1636 wrote to memory of 4880	1636	msedge.exe	116
PID 1636 wrote to memory of 2908	1636	msedge.exe	117
PID 1636 wrote to memory of 5100	1636	msedge.exe	120
PID 1636 wrote to memory of 5100	1636	msedge.exe	120
PID 1636 wrote to memory of 4316	1636	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x21c,0x23c,0x240,0x220,0x260,0x7ff97824c188,0x7ff97824c194,0x7ff97824c1a0
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,4300355128642658166,3352961300233442346,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,7784792397906478411,5557955177872038730,262144 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,8160271700910670813,15870525847183835500,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,15736542562473610565,14122212206168231486,2097152 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,17797544470685939559,4958099572673895611,2097152 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,6787467025692293291,16326502728695297239,2097152 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,17962830637675012179,17133515534936861356,2097152 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,9971217716901580568,10457653126034472702,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,15718663321190743328,1230936836295403958,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,10172111842216094230,11654218309407576752,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,10172111842216094230,11654218309407576752,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,4381573571549531019,15413950015882695271,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,9430266360341172471,1292255478214413736,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,4415010640779415877,15930228341913305477,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,2484088805555044999,7497992197481774289,524288 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,14710726040694824177,18095822473654516249,262144 --field-trial-handle=1772,i,2285955173203172353,5818515084964828688,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4316

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4012

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4913343f-7c99-49b3-b308-67dc88e32116.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4913343f-7c99-49b3-b308-67dc88e32116.tmp
Size 18KB
SHA256 dfcafc41e15209dbc8dc503e38f0f7fde2a910d539cb929d5dba8c5006e0f2f0
MD5 150664c76a96cee3a00c0f724aa6882d
SHA1 1022fa95a1ad0d5ac173d9d6044e719845ed8d7f
SHA512 61053608df0df79d99c5b6d80bbc3ebd69f88e4cb726c8a5e81af535f91f204d9f4ffa10e13335da921784dc6c6e52f7307e33ab406e006ea3053f8175e9f41a
SSDEEP 384:WZcIhsNkhE3j1KX0zIGmxR89MXmiwtgOIwZOy0o1:EhuTKumuEmiwXsBK
TLSH
T11E828E7B98B8AC7F6DF7A504F5862A139EB84427D6C99F40D5ED5B1D00EA298030BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
MD5 89669bdc21a8230bc30fb1b7dd97b74a
SHA1 2a5e6b394e76cb0c70b0bba2c18c74bbdd1a4cf6
SHA512 0c8eb5310ea11fffab4f6974f3ba27683ef8dd0cc87e73007e67d163fd017b83b6c0025e8e6b07401acc6ea67dcf75918453237e2f7dcf47044e2050973484b7
TLSH
T1C3D022F8FBE28020F0B23A3200BCC3C30008AB0820A803303C33200C2C880CAE22BE8C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
MD5 b36cb034fe7df72fefb0bfa9340c6a6f
SHA1 8471623779cc15452b8cb60924e40c193607fe42
SHA512 6f72e14e09c254a1a7d581eaf85757baf7b4cd74f1e1978ecd80b20d91bc8f87462f9d782c3b0604a3b7c22e084b46d1afb4dd162a82905a3464ca87d8223542
TLSH
T1C6D024F477D14010F4713531007CC3C300045704105443303C33100C0C440C5D117D4C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bd06a67d32dd911054478a019b98371e86ebd2ec9eba327286b0d337fbd017c8
MD5 368a9bfbc8358792cf9cbb59bca2df7c
SHA1 cc1016cfc4b7b082e14b8370b50fd66bff69f3a1
SHA512 4af992171fbc9cf68a95a949f11013b594d787a7290313d41d93f3600cb9ea2f191ddc4a885865d5ad300480b9dd90feaae3e49f674a9fb97d41fb5b6684d3f8
TLSH
T1FA616FB464D081B2F7698D70E2DD26873B736B8347839D8132BCF83B04BA305584B7A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c7c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c7c0.TMP
Size 3KB
SHA256 bd19a002b4a7a8dd35fb0de70b1cfa4ec07aaab890f854edf25678a7b032c16a
MD5 c5aec0657e56dfc9910fae608d11234f
SHA1 392633ab226544fb19262e5175aad09f1026ef93
SHA512 630d5d7135d18d5d49c5d1a829f93a4aaa1f03b7542a9a9d8feff20e866a68ee97fea45077f191681b72da9ca12ce6d78f926e84a46900dba5f547a7d5e1ed53
TLSH
T1D96161B465D081B2F7A98D70E2DD268B3B736B8347835D5132BCF87B08BA745584B7A0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d462be13f63b65bf4492fd6f73aac74c0863a939e2a9819f37d3ebaa81ec22e2
MD5 733a6eceb6499f8841fad65118b5c341
SHA1 e4457392d24b37985bc717617db6cde3d0c4e28e
SHA512 9b9a9ae0c8d418d606e8d3853dc246b7106eff065cf39906d47b3f404278419b9f9ba6f9b94e8a94ddc626fad1c60b38524f1f98b9680105855f42374a509579
TLSH
T141219EF783E4866E891156F0EA24AE2BDE1D0516422C7C25C9E4AF2B93F3475E00265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d5bf9f0eddd93c348671a9850c5469918a3214300eeb76c6e41aebc61b833f91
MD5 ac6b1558cc78a182b61d8733c9abaac8
SHA1 a0e84de922a852676eaf65cfeb091e00e43e6f65
SHA512 47664bb64d71b738a54e7f15b1545bdbc236a21ae8055dce0601ecad5958d5ecbab8936ac60f6a1e723bb10555ae1e7fd7229e884d03494028ae467434a1b6e8
SSDEEP 192:sxZMRqWp/fusUZRIdpdLHW6+WNGYapYxtPIgrJ:sxZMDp/fusUAtHbGg9
TLSH
T14922C8566E28A57B8CCBE21DBA65BF53D6F91032A1911E48F6FC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 49e24136d35c286c305d5f189d7c69346db4fc872e76eff9137405c86f03fdc0
MD5 114a4ec337eb620f7b8e4de9d02da964
SHA1 17ef3dae62faeb4fcd97547655f1ced1c92b7162
SHA512 32d3df5d7249811863ff4a2653b03e71a2f0ca3e4d310ab72582a8df9a49833571e93d6f59ed5310b14aede9c2f07c9b1b318981778545c4f748d43d8189b88e
SSDEEP 192:sxZMRqWp/fusPZRIdpHLHW6+WNGYap9xtPIg5CJ:sxZMDp/fusPArHbGnk
TLSH
T17822E85A6E28A97B8CCBE21DBA15BF53E6F9103250911E48F6FC861C05F77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 762c69e18c72fc13f5c198204f869296df80101621a93b419cfef2b977db1e47
MD5 2a1c76b7b7933eb341a013f814524113
SHA1 e58a27409463c3586eae909b1b4ea26a1adaeae7
SHA512 21024045e2d5616c4ffa15f0dc9b1407dd2efba5d3d560546c578672b2578dd5540eb9b9ef4de6dd999959964a9bf015b476c9da756e4e5f069154145c1e576d
SSDEEP 192:sxZMRqWp/fusPZRIdpdLHW6+WNGYaphxtPIg5CJ:sxZMDp/fusPAtHbG3k
TLSH
T15622D75A6E28A97B8CCBE21DBA15BF53E6F9103250911E48F6FC861C05F77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 6d872c3b42d48d2d903dc86d89ba501abe9368e555418aaeb8ffc28956bff726
MD5 b6869a553b09477f2e59691495551ffe
SHA1 22b598f190ea75bf0304f7e411ce968d3a41c32e
SHA512 63689b470e8a6c1660a3a4131a0b8f1cfe814fbb3f2e4e5be2366600a694feeca6fceaee43140daf169f4d439aa9a57d15447c333b3e3f7ee079fa6c37921146
SSDEEP 192:sxZMRqWp/fus3ZRIdpdLHW6+WNGYapYxtPIg5QJ:sxZMDp/fus3AtHbGgm
TLSH
T16122C75A6E28A57B8CCBE21DBA55BF53D6F91032A1911E48F6FC861C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fb091c0774e206856f02aeec93d2258d4c7b44c7ab30937dbee3cec4d16107a3
MD5 63f5bc0928238d70aaf35aed4c8c6bff
SHA1 115d8a38183f30f6f560db6b910ba554c11dadfe
SHA512 81bb1e08fea29e8bd8ed90e240edd93d4c6a71f503c5949c94c4fe4fe15ad896edf45d78459dfad042e2541379ef1ed63e31cbd71669d15a408254c2c8b9eb98
SSDEEP 768:nlWPcLKWvKeEe8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjlLlACy7Yro4bfeimRP:nlWPcLKWvKeEeu1jaClLiF7j4bWimRP
TLSH
T1BBC2E92F640CCB7E5FC01A9DDC5A6FA76E9802C79A548D4047FE984C02C77EA912A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3b5d74a34b464d201cd3b6e8c3f4977dae832c5ebc7bdfc83e63b5c7ea609453
MD5 c85e209f2a2c9a12032c2ba10019708f
SHA1 927b9c6d080f354811d584002184cbbd49bba214
SHA512 57caa3cd04b1fb57dd9beff87a84840630ed2c18295c92242aca0cd8a0344f98c1b473d9098f61f940046b77ec4dd4b9c18caebfc1027502874d772c8b2535d3
SSDEEP 384:LiFiZcIczsNs8TUNTUlIlEE3j1KX0zIGmxR89MXxLiwtgOIwZOy0o1:mFQghwg9TKumuExLiwXsBK
TLSH
T1A1A26C7B88B8997FBEFB9A44F54A26138EB94067C5C5EB50E6DC5B1D00EB19C030BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 067f953076d11d67e8f5a2ca7207c71d97da44c14fcb338f0f5c307e759e49df
MD5 8748bf8684c7579664d6c4016be75c47
SHA1 26524f4059824e0f0199b6cb0352efeb06fa4b9d
SHA512 56cde03fe422edade8aa182de00d626fe4a851536fdcda4efda17db0ce72dad42b0f8b7656e2ab51241dffdd831930cbc3aa83a9c240c17fc3c68a4f24f113b3
SSDEEP 192:aON26IE7QmiUyIlTPuIGmx9jzorHRkC7skMU6:aON26Dt/PuIGmxR8HstU6
TLSH
T1BA02FA35EC78BC6B9EF3AE09B4872A239EA5103BD6951F54D6E81B1D00DB24C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4c9acd512b88d0b769044df4f0d4b94ff973d483d89ef2dafd2096bf33b5cafe
MD5 8204f2f1e0c90a833144127567bdbdfd
SHA1 c3d0bd871b7194947f19394b978ee9c6cd4ffe6f
SHA512 2e3d788cf54f02df5e415bb6039a418c22cc05e25515433bb67ccf479ccebdb7d2512e44c29532508e81d439718e3e479723ec9eeb9bee62991da2d1efd6dd46
SSDEEP 192:aONl6IEcQmiUyzlTUuIGmx9jzorHRPMX/eURv27He/PU6:aONl6DsAUuIGmxR89MXiHwU6
TLSH
T1FC121B3698B8BC2F5EA3B944B48739139EA5412BD6896F50E6DC1B1D00EF25C130B927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b686617e5f4214ee2b58569c85ce2648889942d1d03a758677dbd730080256b2
MD5 1baf589b15d58d8e0f43765da127df22
SHA1 f0031622f840decbe5f610644cff579b95cbb9ab
SHA512 7eb6ab79de49054c3d634f2af5b81e0006f897a81a8991285bcad514d78f8145caeb9006d50a3bbdf3e857a270df2ccdccd8f82243d783eab814c5c2ca173eab
SSDEEP 384:BZcIhsNkEE3j1KX0zIGmxR89MXmiwtgOIwZOy0o1:JhjTKumuEmiwXsBK
TLSH
T1E3828E7B98B8AC7F6DF7A504F5862A139FB8402BD2C99F50D5ED5B1D00EA298030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

520bc34c-eaff-4657-8313-ab75241a5359.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\520bc34c-eaff-4657-8313-ab75241a5359.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 29743ac43bfb31bca534fc6480839320cff2c4c5d6a6bd26114dd87e4ccd3a37
MD5 8d6f17eefbfa80cbbc78bb35272fc320
SHA1 118fc9cb91dfe52792144bd5b385cf8c130b2d6b
SHA512 44d89056ac97333bc117ed4bed1d28ec07953c60a153d0193c1e6452abb1d0b30975e8cd5fd010d9dc69c06dbd139ef4d25d95890a72c5ca66d43c4bcf139ec4
TLSH
T1D241275CAAFA1158B3B76F169BF6A96D487FB8372E06D05D10110E4F0626B40CDB1B33
MD5 SHA1 SHA512 TLSH

Submit Download