408846b4a4690c6eeec0320c39f741930d7797fba8b970fa3c4a18e3eed661f5

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 13:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3123559b8bdfaa89918673069f0932a4.html
Size 270KB
Sample260929-q7rhtsts4p
SHA256 408846b4a4690c6eeec0320c39f741930d7797fba8b970fa3c4a18e3eed661f5
MD5 4edbf813876c7b09023748db6c8a0145
SHA1 48e35712f3cc700702833020173b00e47d10e4fc
SHA512 4c2d552ffad858eb3e5bf4404da0a8f7c07d90b7d98ec108fa1b80a8dc1748c962ea45bb47e096a2e007413f759a7be59856440bd75ea70cdb5ae8c3148fe4e1
SSDEEP 3072:GRyNTDmdUGnZc//YLIL2YTbt2C0343ljdkmwWwZ2qh9i8HRuEUv7k0MaH1yV:vRDMAL2Yg
TLSH
T13544D7B19CF8067A330708D4D2846D05F7A6844DB9DA2F69D7F847E25AB3D20EBBD064
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4724	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{1D5FDE08-BEC5-4E1C-A861-74B490666574}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
552	msedge.exe
552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe
3764	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3764 wrote to memory of 4820	3764	msedge.exe	86
PID 3764 wrote to memory of 4724	3764	msedge.exe	88
PID 3764 wrote to memory of 4780	3764	msedge.exe	89
PID 3764 wrote to memory of 4780	3764	msedge.exe	89
PID 3764 wrote to memory of 4780	3764	msedge.exe	89
PID 3764 wrote to memory of 4116	3764	msedge.exe	90
PID 3764 wrote to memory of 4116	3764	msedge.exe	90
PID 3764 wrote to memory of 3004	3764	msedge.exe	91
PID 3764 wrote to memory of 3004	3764	msedge.exe	91
PID 3764 wrote to memory of 3004	3764	msedge.exe	91
PID 3764 wrote to memory of 4848	3764	msedge.exe	92
PID 3764 wrote to memory of 4848	3764	msedge.exe	92
PID 3764 wrote to memory of 4848	3764	msedge.exe	92
PID 3764 wrote to memory of 3636	3764	msedge.exe	93
PID 3764 wrote to memory of 3636	3764	msedge.exe	93
PID 3764 wrote to memory of 2128	3764	msedge.exe	94
PID 3764 wrote to memory of 3636	3764	msedge.exe	93
PID 3764 wrote to memory of 2128	3764	msedge.exe	94
PID 3764 wrote to memory of 2128	3764	msedge.exe	94
PID 3764 wrote to memory of 3312	3764	msedge.exe	100
PID 3764 wrote to memory of 2084	3764	msedge.exe	101
PID 3764 wrote to memory of 3312	3764	msedge.exe	100
PID 3764 wrote to memory of 2084	3764	msedge.exe	101
PID 3764 wrote to memory of 4872	3764	msedge.exe	103
PID 3764 wrote to memory of 868	3764	msedge.exe	114
PID 3764 wrote to memory of 1712	3764	msedge.exe	115
PID 3764 wrote to memory of 4368	3764	msedge.exe	116
PID 3764 wrote to memory of 376	3764	msedge.exe	125
PID 3764 wrote to memory of 376	3764	msedge.exe	125
PID 3764 wrote to memory of 552	3764	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\3123559b8bdfaa89918673069f0932a4.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2dc,0x7ffbbcd7c188,0x7ffbbcd7c194,0x7ffbbcd7c1a0
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,834532526689297195,17920058898377794441,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,16781070126188625501,5914274901513354177,262144 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:2
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,3269014630895049041,8316254249213706360,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,17849028740559439794,8109218233690708433,2097152 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,956620011548114503,7672155125936559904,2097152 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,3816979865646430961,11861602663223276383,2097152 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,395727835929174708,4073605036255981259,2097152 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:2
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,2265397924414240139,10414851037940532908,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,7990956438509563515,17410355700801724236,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,17327675913567108661,881848727787750032,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,17327675913567108661,881848727787750032,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,4233840480122741434,8329315256096416453,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,2723731330297496203,6483292654970337641,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,6638929532910808269,12816657962425784209,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,7473607377459823806,15257810783075142751,524288 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5408,i,3911259432239504415,3714229660310428597,262144 --field-trial-handle=2420,i,8287822390544322513,6708133505174133882,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3216

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 63b3e051645c9957f53c538586c3b5463f3ba4412c230d66eb66f06ad6052604
MD5 0070abe22a07fb36149648973e990688
SHA1 c8a203457b36afa6d0ce9b56d26cb7817d832d37
SHA512 cda9b7179f6f997dac4ee0624ff9f92ed77b7c27218584fb07f6b2ebc24d10fc25d45c3d2781b766d834f82054e29ee150712e7ab7d7a11465c468d0f8a31fd1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P79:fwUQC5VwBIiElEd2K57P79
TLSH
T175B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 84e3136358454d34ab3386991a1950061854f55f259b7cbdff75d48966052671
MD5 2effd7917ea83dda07727e9777bb00f6
SHA1 82fb210a1624a708ac21892c35b92ce518680230
SHA512 d6e18d1094adad7f30d0ac4fc5eabd4d5bd9c1f13ca14d03f62644476632c6497b69112ff76b58542c5e4d33e9980f0a34afadf9351ff54909e31585101c7fde
TLSH
T1095185C467D8A278F79485B086D921B371F885BB3D875F0B00E4F9795A0EB2A5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5927e1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5927e1.TMP
Size 2KB
SHA256 9e686098a6a85e9836e38051fdf3872490ae703c48cc79083c91c41d610d38c2
MD5 01b5d14131a8764bbe7d35cef2a37128
SHA1 751bf5bcc60ab892ed40fbcbbb4fbf9fa45469a8
SHA512 0a8a171133227b974c6ae51a2462a361b738d37ad05741e8614e557acb6d3661e9a79e2df987f9e102c263e0de54556b5bfe3b9b490e6c214b0945bab9d44cc8
TLSH
T1795196C467D8A678F79484B086D921B371F885BB3C875F0B04E8F9795A0EB2B5D07B60
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 08b9bf838942ac6f52dd753e5879d87269fc42dcd32415da2beedabc8644a8e6
MD5 bcd58d9ca1e0cce2049bf29fe7f4de11
SHA1 9e7f2c6bd4a69d4295828c03992b7ef3dfeb5eb2
SHA512 dc4800682bd31fb9cf442fce0e91f8c3658214732438996626fa05b740670f0aef173fa86edaa2e3d698f37f5d8bf0db5f2656acaa0025f9c6830b1221cd3626
TLSH
T17A415BF783E487BE9A1196F09B256E2BCD5C0117426C7C6589E0BF1B63F24B0D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 737d8a6bfc04a13a5c8ecdb1d32418938d6ca66571620264d1a7c328960b84af
MD5 11930cdbe62ba1baef1b9faf8eb0ee5b
SHA1 8bafdda9b57fbd9d0348b7b6d5dc0c148ee720d9
SHA512 0f8932e87e010bd503d034d07550de50601b3166608021e14c8c8793f1ae41dd65416833c430d49e5e903a39f922f2a1b39e30ccb22173b1ff0ffd91b5091491
SSDEEP 192:sxZSyRwWI/f/sksxIdpdYHW6+WNGYgUl9IgrJ:sxZSy9I/f/sks6uHbGY9
TLSH
T1DE22A7516E28A97B8CC7D20DBB25BF03D6F9503251951E48FAFC962C04E7ADD620B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2e54f12a412fd8e0816d94170d5c08083c554549cd625942145ce301aee3f2e1
MD5 d646a0e68ae96e213347e5b2aba0a604
SHA1 2f172a20958832a1ab684cd4f084a84025b2fc77
SHA512 96faa08bb60c05ab83e4b2e4ee7211ad47b779e3a2739df2c3cd00fc88efc3ee05cd5443d0eca8eb9a05d46809bc5a0c56b5f1d400cc55f60d5731d82025e41c
SSDEEP 192:sxZSyRwWI/f/sAsRIdpdwHW6+WNGYgSl9Ig5C6J:sxZSy9I/f/sAsaiHbGKg2
TLSH
T16022B755AE28A97B9CC7D20DBB15BF03E6F9503251951E48BAFC861C05E7BCD620B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c486ffbe0f6a96f9e4e55e5db9bca4362b883608ce3ae2c9e14c8025dd887095
MD5 f0bf3315f0894b7df06dc5ccf7ca28e6
SHA1 fd21045a2a091259b7427d10a09e8a501739bcc9
SHA512 be1a26dad056ace5b8750557be5d2572f68a41ee8291a708660678e6ba08cff116008e258b1a6e595ffd9f674efccc556e71dedf0b06b905cfbca9be6935bffc
SSDEEP 192:sxZSyRwWI/f/sAsRIdpHwHW6+WNGYgdl9Ig5C6J:sxZSy9I/f/sAsaQHbGrg2
TLSH
T1D922C755AE28A97B9CC7D20DBB15BF03D6F9503251951E48BAFC861C04E7BCD620B40F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 6fe39df85cec14d2e8d7dad21f9e034089858bc6bc4e161e9abc3a572c942171
MD5 e524378dc44d540064d737e281009bf6
SHA1 47a514841743a2aa42131968fc383111c3ff36ce
SHA512 d03bc1f8d45611a407f40e4358e28d1cf5ca885c8dcf42562660760d9dd8ee85c4356559acbef0d26de8150151de92ac22223826556cef86ad1ffffd8b22b80a
SSDEEP 192:sxZSyRwWI/f/sGsRIdpdwHW6+WNGYgUl9Ig5E6J:sxZSy9I/f/sGsaiHbGYG2
TLSH
T1A0229555AE38A97B8CC7D20DBB15BF03D6F9503291951E48AAFC962C04E77DD620B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ddc6f8de0b347908baad951d4083aa6800d691b6e9f7c771bbe2f91cca927180
MD5 c02b38fb534e3846b2932ebb438d7ccc
SHA1 02415bdb12dacb63a922e6c8cbddf521bad9bcc2
SHA512 f39f4b818caca86a5e097a3dd82b45035ba5c1d45617fd2cb1b2f3eaccddbb5d179d64537fa8d2e8cd85ac4a33df1bde8ad1a622d8d0cb3005b730161b39d001
SSDEEP 768:CfichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzKroPea:CfichfPWvPZplu1jan+LKgzhGa
TLSH
T1ABC2EA7B640CCA7E4FC01A9DDD1A6FDB7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 05874e12c6609d09257a590e6b471e2252c0b8e5ecb5c5267e1aa1c5f435513e
MD5 c219c78ea7dd8480ae6bebb4de11f5ca
SHA1 b0410363ba8da693682efaee69d85fa9995b9ea4
SHA512 2ecbc9e1d4a76c51071113b65e6666fb5cbf48837f704541984dc1b257e794ab0bd64edadcdcc6ba13764e6a04a0ad96c9ccbe6e601666913e607e2689e773b4
SSDEEP 96:KjeX0QeEkxVwFsfIxKn4f+x7WO9IkS60wKVaKggKNSycb2Xd:ceX0QeEk7wF0Ia4f+tWO9IkSPy/cb2Xd
TLSH
T19D91711431BB0605387D6549C276972E124235F330A8E62B7FBC42E59E6FE041EFD9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

18fbffe9-bc3b-43a1-a746-93517a9e45cc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\18fbffe9-bc3b-43a1-a746-93517a9e45cc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c30ea7d0aaa4fd9a1f55cc1e638c83e79e486d3b202fbfb4618f5254bcb4c41e
MD5 e9fe7f393e671b6870d94581dacf89c4
SHA1 0887d4efef28cf9d4dbfbe086ab07511585c3ab2
SHA512 17c3d644bc103b34540cf745eb73e25dda52d510d3340d5bd7bba81f0ab8cb3ca0d7094ff2f858e6ff64cdc5430a4b49b84122f83da078b9673ffdd7216bfbce
SSDEEP 384:vZcIhsNxEv09B5L8rBGYX5EOv8bOXmEtgOIwZOym2o2:nhpOeFGYuO2emEXsWN
TLSH
T128827D3298B8AC7B6CE7A145F54A32035FB89027D7C96F54E5ED1B2C01EA594130FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 51085e2b8bbc3e52eec40822086c86e24ecd7108f08720fe081eaeae534f5505
MD5 790e5f146603afe343fd6a097981a9f8
SHA1 72342663eda9091b4bb3435065230e342e9ff70c
SHA512 1d28e656d076989945c83ebfb72e5128fd6f4252b3c0d25ebbd4dd3bdf4e55718580e7d4d1aa05d61a6bd44b2019da491093f5c4e27c22c970eef723a4eaccdb
SSDEEP 384:jiFiZcIczsND8TUNTUlIlZv09B5L8rBGYX5EOv8bOXiEtgOIwZOym2o2:OFQgewgrOeFGYuO2eiEXsWN
TLSH
T158A26C7388B4DC7F7DEB9645F54A32039FB44027DAC5AB94E6DD5A2C00AB1D8130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e156c00b70cb08a4b9213b4e8ac9bc048ef783103deca03eac520e2b7e91bf5a
MD5 1dafec28b7c85a676bddba172905e928
SHA1 a7b23aa83942cc6a53af7c5f385dbb30fe56fd5b
SHA512 1a2fe0606b0a1f6dd22598a93c8dd5879066254b6cb3fb47dd4cf1b1473e32a893139c7246a5b95f234c26c9afa548007215a09d000e70d6d908710d44af54eb
SSDEEP 192:LJONS6DphmqQmiUyVkq8wGYX59ezXCHjzor4Rukk7qgU6:lONS619RRwGYX5EOv8RrU6
TLSH
T1A702D835E8787CBB5EE3AE45B54B27139FD4102BAA956F44D6EC1E1C00D764C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 284664a0ac5c896c2ef66b6938e331656c6452174edd6eb07afa215270e25156
MD5 03c2266ed957e03fae4c744f088b4210
SHA1 28863a6a682d5060c3f7499d985d17482e04d58e
SHA512 889826636b354eb198bdd8d30ccba564d3f9d4d275bd57e720855e900476ba4a609ff00451f3831e2f09593960edd1ef39de769e3a21082629cd14548a978609
SSDEEP 192:LJON86DphdqQmiUyvkpwGYX59ezXCHjzor4RyOX+erkII9rq5DU6:lON861i9pwGYX5EOv8bOX2EU6
TLSH
T15912F936A8B8BC6B1DD3A550B44B36135FE4512BDB896F50E6EC1E2C01EF59C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a0862fbbee11a65ea1c0ae388a094bb5e82f91b9457c9bde0eb73437d8353414
MD5 a4197d6027cc95a23fb4b2a19e3812bf
SHA1 53739625147d602351a0a6904e198246bf062384
SHA512 9b53e0b8f00c7d17d9f4e4bd781aec968f930eb86bfa9bb109d4d76bd610865f9f1ac09fdd5d8cd83a8c549161477100e6f60e8fe8a810ccd779e16cb3e91aab
SSDEEP 384:KZcIhsNxZv09B5L8rBGYX5EOv8bOXmEtgOIwZOym2o2:ohwOeFGYuO2emEXsWN
TLSH
T1C5828E3298B4AC7B6CE7A145F54A32035FB8902BD7C96F54D5ED1B2C01EA594130FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79e04a96-a95d-47d0-af0f-1ff78e68c552.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\79e04a96-a95d-47d0-af0f-1ff78e68c552.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4c5028ec450615be213e249217fca6e478663bc93f921b65f9d1f981f2ef6189
MD5 3154716fcb2b86266860569dce3ffa8b
SHA1 9b870177cd5077c7bb6a230e8fd76544f27af104
SHA512 7d03e87526aea3993e780917ab5a17dbdfc88fe0960a809c9b09cbd0ed1d59c6ba5a7665d2405cb8a59ea43e7f14941372c4ae7a1fcc2941197fe139405a2d06
TLSH
T13E412A58A6ED1148B3B37F4A9BF6B86E487ABD772E07D45D50100E5E0A66A40C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download