4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_22d37572-d641-40a4-8624-3ba07c1f9cd9.html
Size 11KB
Sample260701-etyt7sf14w
SHA256 4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466
MD5 a140c402079a345674827ba8030c93fc
SHA1 ccbd4f63e520d1efe873156f1887e2ea125d72ea
SHA512 1b79b5bf8d348036ac0bd577db7511f3a324f25d52ceb041da4ef642c283781b912bdd03cb340386e51a8ebc877a679ddd4d63021dfc374c3e1c9a762a225b73
SSDEEP 192:vRkNI7gF/I/yd2JkhBmZwZ5/0OcYAEhi+YR39GqtZ4MGLgj/3bf4t0UfPH9Hcnvx:vRkNI7gF/I/yd2JkhBmZwZ6xY/X8YLKr
TLSH
T1D432947394F2142B5162C1D51933B34EBBE2E453DA4A591073BE46CE0FC6DEBDA2720A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4800	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273528808990338"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{36B0E7E3-FE14-43EE-9301-728741D821F4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3808	msedge.exe
3808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 4344	4476	msedge.exe	85
PID 4476 wrote to memory of 4348	4476	msedge.exe	86
PID 4476 wrote to memory of 4800	4476	msedge.exe	87
PID 4476 wrote to memory of 4348	4476	msedge.exe	86
PID 4476 wrote to memory of 4348	4476	msedge.exe	86
PID 4476 wrote to memory of 2180	4476	msedge.exe	88
PID 4476 wrote to memory of 2180	4476	msedge.exe	88
PID 4476 wrote to memory of 3656	4476	msedge.exe	89
PID 4476 wrote to memory of 4616	4476	msedge.exe	90
PID 4476 wrote to memory of 3656	4476	msedge.exe	89
PID 4476 wrote to memory of 3656	4476	msedge.exe	89
PID 4476 wrote to memory of 4616	4476	msedge.exe	90
PID 4476 wrote to memory of 4616	4476	msedge.exe	90
PID 4476 wrote to memory of 4980	4476	msedge.exe	91
PID 4476 wrote to memory of 4980	4476	msedge.exe	91
PID 4476 wrote to memory of 4980	4476	msedge.exe	91
PID 4476 wrote to memory of 1528	4476	msedge.exe	92
PID 4476 wrote to memory of 1528	4476	msedge.exe	92
PID 4476 wrote to memory of 1528	4476	msedge.exe	92
PID 4476 wrote to memory of 2512	4476	msedge.exe	97
PID 4476 wrote to memory of 3788	4476	msedge.exe	98
PID 4476 wrote to memory of 2512	4476	msedge.exe	97
PID 4476 wrote to memory of 3788	4476	msedge.exe	98
PID 4476 wrote to memory of 3948	4476	msedge.exe	102
PID 4476 wrote to memory of 1268	4476	msedge.exe	109
PID 4476 wrote to memory of 3536	4476	msedge.exe	110
PID 4476 wrote to memory of 3224	4476	msedge.exe	111
PID 4476 wrote to memory of 2920	4476	msedge.exe	113
PID 4476 wrote to memory of 2920	4476	msedge.exe	113
PID 4476 wrote to memory of 3808	4476	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_22d37572-d641-40a4-8624-3ba07c1f9cd9.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe590ec188,0x7ffe590ec194,0x7ffe590ec1a0
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1824,i,3481894157146411910,6023107705859417629,262144 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:2
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,9325801201215674198,15594721649682225805,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=2960 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,7734698402408516314,3228393503661103903,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,3171839276537852746,2166804280796830289,2097152 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,10270448388760049239,10349461071408329130,2097152 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,16425539134495938494,17656537225533947901,2097152 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,9425966306923867307,3901281408605069567,2097152 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,5066009986838661211,15246923696277016235,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,4686823989039895369,13421424382657824476,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,8892964669355910005,15046036750567171189,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,8892964669355910005,15046036750567171189,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,16770904137228486528,5283770999378889580,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,7778892287431572536,6346533795269809089,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,861547402584941114,13972567333155442034,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,1224683775254080052,5901244704380869599,524288 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1224,i,3494330576330994856,9422068217868838699,262144 --field-trial-handle=2900,i,18092113147205585804,6602199698104778726,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9c1b9b254f57fa558ef4c3ee6c1da36c8039951626604ef7c172c774e5713c5a
MD5 320d1c5d8e9c3ef057613261fa979754
SHA1 8aa6ec6be73f1f623e800994fcb28af55aaf903e
SHA512 61fb6330bcf887685dd46914e237e506fb5c6548c66c20142b3deeab2ecc9078995ce124d748d30724fef7d01a7fe75988b9c5850e955dd7aa776861c08bfe33
TLSH
T18C714B283298158EE3E1F0B2E3D20F4937B44C898E4B5F561364CC7DAA23B2FC52157A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a8ce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a8ce.TMP
Size 3KB
SHA256 98bf1481da5d4997d27a45f05d8576d75beea9c5e6106986978c676940e0d2cb
MD5 57d525bc349308f1502582993fe4cb26
SHA1 b7fcbff29a1999c96719005c39842488540148ed
SHA512 33d952406f88057106b14fb62702dcf9db08f1c4365a8c7ff295d3de81922eb2952b3ca24a85842c3341d0a99db94fff11fe27cb2c7c84937c3773e5c586c605
TLSH
T129714B283299158EE3E1F0B2E7D20F4937B44C894E4B5F1A1364CC7DAA13B2FC52157A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f366607cec26b41e75e4f8d0807bbfbac1c076d7bc50f5910ae32624c01d8689
MD5 a718a9034906670e27dcfda3a0e6bfd4
SHA1 78a657ec4bfd7d74003510985a6b619a828c9046
SHA512 f633542809658e18a84db5f74d899d17050c9eff65c86da2debcc3020c774f43c83b9ad3b6e2108d5dc038bfe20bfd51d58e4034aa061c51327e9810002e5fef
TLSH
T1302181F7C3D585AEC91156F06A28BE1BCE1D0506832C3D5689E4EF1B93E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3b50c5a8a0992d0ca9918f899a4b7ff94f06eb56af1c9a930624c77975ce4488
MD5 ab4a59ff3c512c2dab93016f5ec9abfe
SHA1 b8b0f7683d3c8d9da5d36850c14c246ca6e29811
SHA512 e47f04367b733addcf4f888a566fabbe0975d17ef2d70c0aa83dc7cc8b53d2efa9cf04e7b5a7b7609f1c72ec1c0c518c6f071f86ca17007633036b221c9bc5ee
SSDEEP 192:sxZVawRIHyM/jK1Ml8MkYjJ/f40sNBwmAV3SIIdpdVUHW6+WNGY4wVF83R3p1Ig9:sxZ5YMkJ/f9sNBqwoHbGL9
TLSH
T1F242E7126A389977CCDBD209FA55BF53D6F91472E2900E44A9FCCA0C05E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4415a693a29083fbab415548b80db72daf77ef5effae0f90486edd73c41449b2
MD5 8cd2fd7ce22b06f79bd297279d735414
SHA1 4fdbeef6feada2fcd23cc7e598d35ce886886a24
SHA512 f105b4be2cef379712c1e2e01649c6332b2c8b06ce96efa0987cc2a64d33aef5cedaccc17ac9be7e427829c8b293f7f4f440cfc753ce9d7b5730a385ed435fd0
SSDEEP 192:sxZVawRIHyM/jK1Ml8UQYEkYjJ/f40sYdBwIwAV3SIIdpHVUHW6+WNGY4OVq83Rc:sxZ5YqOkJ/f9sGBZwGHbGu4
TLSH
T1CF52D6526A385977CCDBD209FA41BF53D6F9547292900E44AAFCCA0C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5161908994daab62e43a4614acf6219110e5b3bdf5e57d48e0a0c56006085e97
MD5 93b8239933c3edb8c80c299cdfec8b4b
SHA1 b9f7d3e2f899ff5922a11e9ef064bec1a3b36964
SHA512 2b85317dd2bbfc1570858803a3feab4a1169223119bef93640b5487d9b369613b479304de781b49d7cbe37dc2bdcdf4978566dbfd8ef22a402d3c912f0989e64
SSDEEP 768:Ko8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdJro9kcUnAk:Ko8iJPNWvx76ru1jahALocditUH
TLSH
T159D20B3B680CCB7E4F844E9CEC266F966DD801CB5B948D5447FA880C03C76EE51265DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dc770a7e0bc8405f7bcb00187f779f931c716b121f34f74436928c9f5b3b3daa
MD5 3a633c165aac998d96eb0e50fc8252c4
SHA1 e26d2bcd013f7a69d406ce389847175af2ebebc7
SHA512 b5bb20cb3ed4d6c2e6d0bb93096eead155b90995bcc4aad464eb7d4c321602cd96acdc2c5cff2e5115ebdf8509d1db6dfc80e54ccf108114847481e588d07a1b
SSDEEP 96:KUacKL6SqIKKwg9KD3tHbPWDYGg/PK4eghPcF9wTrEH3gFB31lpWRekgJpK4ggHj:q3Mg9KD3tHbuDY3/1eghEF9wTrEH3gFB
TLSH
T122912345317FC64238BE340CE660A6668A92F1533125A83B7FF902721E27E116DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5944ef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5944ef.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5bd14035d504521a83ba390a995ae45d34aabae6669ab3470cd257b41bf4b8a6
MD5 66401ea086dad04a4ffb8d4dc8429771
SHA1 1104d19358197c011d75b1dc85b213e07c1dead6
SHA512 7767477368ea43e57943730b04439147a1eef6ebc53135721a77825341aadc17ab01f117a1c893c31079569b665af9e930b854740669839a09f8f6533509f22e
SSDEEP 384:OtNn/s3n9SfsNASczNnQkWOpixX0IidKzva5uC:Oj+9URVax78Kzad
TLSH
T15D928C726C686D6A4D93A5D9F1073B279FB482B7E3852F90D5EC6B0C05CA3AC631B502
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 d6d2e0a426c70bfd9f7e0400111830a9c8379e1b61bda02d9f109622b4b1ebdd
MD5 37bc53af13f8ef221247030a373ad106
SHA1 b51c5ab4f8ed6c1c022b165673518e98487924c0
SHA512 1b63420a46bd68d474b686545dad3d6ecba2e668c07787111d19ffe059390d70e79f8d909516938029d3d6c448e11e4e8e04b0fa0e0e9b54e731bc2d6825e028
SSDEEP 384:HiF1tNn/s3n9SdzsNA8TUNTUlIl7czNnQkWOpxxX0IidKzva5uC:CF1j+96VwgiVpx78Kzad
TLSH
T1B8A27C735CA89D7E9DA79AC4F50637279FB542B7D785AF90E2DC5A0C01CB29C130B902
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5daf75cbe1a73cd00ac286401cc95e45dc6b49fcfb6489be71bc145c55070afd
MD5 d32a576a8b15eb83e07123557bb72038
SHA1 1912581928a4954da32e8305abf9b288931b9164
SHA512 bfa12843d5d2406a1659f9aa9fa144ed018c3b3ac4d29f8830f6c7a41737f5099a27e00561ba41f4fa14de190d7eb5697053b4df94516f3d914cf40d57c28c9b
SSDEEP 96:ZqONk7QsjpfmUTmDK5ih/cIPURHl8h4otop5V+5DVNBhPwivh50xy0SFYKDAxvYE:gONz6kDfQmiUyVoVTZ903/i+Qiiq6aU6
TLSH
T17402F835687C6CBB8EA3AE45F48777275FE9213BEAD12F84D9E81A1C00D725C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 c67cc893c17865f89ebcac118a7c447d25f30c697d4108154bfb9fe266befc9e
MD5 1ec58454e840d23e190a5d6599e1bff0
SHA1 77fc208e4dc79a33450b1a2d0634d12294b050e8
SHA512 ca2d08ef092b6b6004992346d0dd3d326796be4d075c26464016bb7471214bdd43cd4de5d22add80a5fc636005d8383c25a4474f1c6be1f3b70ada2650a9d0d2
SSDEEP 384:ZtNn/s3n9SfsNA7czNnQkWOpixX0IidKzva5uC:Zj+9UUVax78Kzad
TLSH
T183928D726C686D6A4DD3A5D9F1073B279FB482B7E3852F90D5EC6B0C05CA3AC631B502
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ff86fd7b7a35b25731bb05c551a589d815a5130acafaae973f7a28d860d1c193
MD5 c82b184f2344a09dc6773b3cc6d62a4e
SHA1 1b51a35e115988483d9aadf8c3abf23a3623f51f
SHA512 7c10550f23f430dd134263e2af460d4c4489e580fc52c8584f737e7e6cef75fc62c17c3d9ffbfcb82f6e6c4c317ab63fcbd2ed51e783b4cc2c6442ad619d1b0b
SSDEEP 192:f37ONr3V6k13yQmiUyViVTf3I903/irbN1cRiVq/U6:zON56ZXQ9WOpKxU6
TLSH
T15F124B32A8BC6C7B5DD3A591F08732235EA54167EBC96F80D5DC1B1C01DF2AC130B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10a113f1-577e-428b-a460-529541341e37.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\10a113f1-577e-428b-a460-529541341e37.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 03302f251588df8a71bed45b26f62a7c47a70d782baeda20fc655dea46c6a5d8
MD5 e1592783f6c20dcfa2ba65f7d88ad0ea
SHA1 c2cc1ffe9b0e22d4c522906f7e76a61f50ac3a79
SHA512 fc089f485bb8a2bcb821fd6c362aaec0c97cc373d48e5d2785dc146bd2c89dfee768e1407706b6b658b0b4fb894e46c6b37960b8b52fb29ea405b35e8ba4d047
TLSH
T170413958B6EA0158B3B77F1A9BF6685D847FB8732F07D45E00110D4F0663A00C9A2737
MD5 SHA1 SHA512 TLSH

Submit Download