4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466

Analysis

max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_42f6d7d7-63f3-4d59-9ce6-1b77aa7e8bfd.html
Size 11KB
Sample260702-e5hx5aas3m
SHA256 4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466
MD5 a140c402079a345674827ba8030c93fc
SHA1 ccbd4f63e520d1efe873156f1887e2ea125d72ea
SHA512 1b79b5bf8d348036ac0bd577db7511f3a324f25d52ceb041da4ef642c283781b912bdd03cb340386e51a8ebc877a679ddd4d63021dfc374c3e1c9a762a225b73
SSDEEP 192:vRkNI7gF/I/yd2JkhBmZwZ5/0OcYAEhi+YR39GqtZ4MGLgj/3bf4t0UfPH9Hcnvx:vRkNI7gF/I/yd2JkhBmZwZ6xY/X8YLKr
TLSH
T1D432947394F2142B5162C1D51933B34EBBE2E453DA4A591073BE46CE0FC6DEBDA2720A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3164	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274402828966950"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{94E60075-D0B2-46E5-8E8E-C4C91FB576E4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe
724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 724 wrote to memory of 4940	724	msedge.exe	88
PID 724 wrote to memory of 3164	724	msedge.exe	89
PID 724 wrote to memory of 1744	724	msedge.exe	90
PID 724 wrote to memory of 1744	724	msedge.exe	90
PID 724 wrote to memory of 1744	724	msedge.exe	90
PID 724 wrote to memory of 548	724	msedge.exe	91
PID 724 wrote to memory of 548	724	msedge.exe	91
PID 724 wrote to memory of 1372	724	msedge.exe	93
PID 724 wrote to memory of 1372	724	msedge.exe	93
PID 724 wrote to memory of 1372	724	msedge.exe	93
PID 724 wrote to memory of 3328	724	msedge.exe	94
PID 724 wrote to memory of 3328	724	msedge.exe	94
PID 724 wrote to memory of 3328	724	msedge.exe	94
PID 724 wrote to memory of 3316	724	msedge.exe	95
PID 724 wrote to memory of 4400	724	msedge.exe	96
PID 724 wrote to memory of 3316	724	msedge.exe	95
PID 724 wrote to memory of 3316	724	msedge.exe	95
PID 724 wrote to memory of 4400	724	msedge.exe	96
PID 724 wrote to memory of 4400	724	msedge.exe	96
PID 724 wrote to memory of 4564	724	msedge.exe	99
PID 724 wrote to memory of 3144	724	msedge.exe	100
PID 724 wrote to memory of 4564	724	msedge.exe	99
PID 724 wrote to memory of 3144	724	msedge.exe	100
PID 724 wrote to memory of 2420	724	msedge.exe	102
PID 724 wrote to memory of 4948	724	msedge.exe	114
PID 724 wrote to memory of 4144	724	msedge.exe	115
PID 724 wrote to memory of 2380	724	msedge.exe	116
PID 724 wrote to memory of 1436	724	msedge.exe	118
PID 724 wrote to memory of 1436	724	msedge.exe	118
PID 724 wrote to memory of 4268	724	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_42f6d7d7-63f3-4d59-9ce6-1b77aa7e8bfd.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbf87ec188,0x7ffbf87ec194,0x7ffbf87ec1a0
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1920,i,6789196591599927195,4989266682272758609,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,2542236396338338320,10384185482542077347,262144 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,13800220966657771936,10072124217231202634,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16130233136233812708,6972493370871207135,2097152 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,15734575987043979563,18237064225024800395,2097152 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,14464064679448325491,17278434049408385470,2097152 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,15996055072668932361,18259427665139211749,2097152 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=1652 /prefetch:2
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,12902495506209092256,12101760278039251681,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,3182576506682846016,11897167225386222956,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,5472405490711055092,14333304373036717567,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,5472405490711055092,14333304373036717567,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,17026502263279344355,14135437927958175826,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,15069192759613568571,12082454412659664295,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,12317020084445439217,11082381197404961379,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4428,i,14469852548396153788,14529180352262109006,524288 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,11069336019544430165,1169221484328850336,262144 --field-trial-handle=2220,i,15140869762163500295,15576583707697969687,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4268

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2bd7186f-bec8-4b99-a806-85513ac14a55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2bd7186f-bec8-4b99-a806-85513ac14a55.tmp
Size 19KB
SHA256 d45c9b2c7144e3d290afda7e534c2940b842e630e4d66796140d56edef2354d6
MD5 3a66002eb7a4963591cc425547533ce7
SHA1 f21a6ac62460d42f5a155ce1120980bd71b6c0c5
SHA512 d34c29844b368d1f56fd93763c236b72e7e54f592a0e193e7ffce2becf8c4efd61742f67d3af844e9bb18d48e09130c15e9fed424d49d9db313a04f96bfcc8bb
SSDEEP 384:ttNn/s3n9SfsNGU6bljvVbfBLQd0mEMLaKl8BhBTPLBliSwI:tj+9URTVdckMLaKl8BvTPaSwI
TLSH
T16D928E725C751D2B4EA3A689F4473A074EF8417BA6C42F94E6EC7B1C01DA39C6307D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e1c18a41602c932d062513a337c3a258569b18d89ce0e0472cadf01c5209025e
MD5 0a4df146df8b0e8e67cbfa0ad6b43c35
SHA1 cdf3e966119f620988843a2acbc91c94635ea8e1
SHA512 39f10b5eb6f62456e7e4bd5557fad038cdea26b7691b7f984c2f98e49a37ddb73e209ed71fd73492f721f1a9f38bbf4904533e039dba0fdd612e599af25fa2fc
TLSH
T18571C83D044E4469D3AA03F364F217167D71BBEBF5D32E957194AAF028053D68E4F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588db4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588db4.TMP
Size 3KB
SHA256 1fff070a45fb45585e0ed9113062879599f39a5ac353ac9637e90cd9362db897
MD5 70e800e3f690040c0a41b97844e9d96b
SHA1 647a19f251f3bda70dd69e686305603a3ea8b047
SHA512 96f50bd93b74b5d55abf2c83487fe62c836fd25ace2968f76dc87b82114f6be2939211bea06f475241065448daf65e05e698aa54659e00f78115d64c0152cfec
TLSH
T13971C83D044E4469D3AA03F364F117167D71BBDBF5D32E9571949AF028053D68E4F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e179763cb853d58f36bf92566496ee679b20a2b80caac1ee598877e197f1d238
MD5 cf4cb517ef90928b1a48fcd98754a5e0
SHA1 69f5ff3ef13dd5eea900f2bd64e1747403481944
SHA512 8f5c4fcaf9847ef4cabd41c6b42484bc8cafb4e644057a665bf64006fdfac326f164cc5031dd035d9db7e165a56b1833290aa98c4793903b5e2fcdc210bc8817
TLSH
T13D218AF7C3E5856EC91156F0AA287E2BCE2D0506422C3C5A89E4EF1BA3E2475E50295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f18998cc8f11b8d5608d91092eeabd05fd519601b2485ed2933bd97acaf17365
MD5 b729ffc4fd38a004a33e00bac0619588
SHA1 a292fc548e361f0396e80accbc1c88ebf490e320
SHA512 d88917ccb5f50123fd3f4d2177f61abc24f7304e038db40fb6823b5ab3f90fc1e5901bf3b096c3479195fe9eba24051a3ace8be1b53b784cc2f287878f683db4
SSDEEP 192:sxZNR8yM/jK1Ml8MkP/fqsk/9EyIdpdBHW6+WNGYzQ+y+wIgrJ:sxZNOMP/fqsklE/HbGPb9
TLSH
T1F342E8126A38597BCCDBD209FA557B53D6F9047292940D48AAFCCA0C05E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a7ee25908461a7898acc9e4c9e61de5be60161781959347147ee72c1b8ec44b0
MD5 ff81c1f7dfce2a5a28f88915ff8a7199
SHA1 b36a126c5a72959836210e452aab1b775d10d635
SHA512 2f97e496489cf6642f4669444de48460b70785c6ec9e58b5db7c3b91d56ed9862812d2fa912e94a7344b5a43f741be198ba3be3e524206e5bbf23916d804b961
SSDEEP 192:sxZNR8yM/jK1Ml8UQfkP/fqsc/LjEyIdpHBHW6+WNGYzEly+wIg5jJ:sxZNOqMP/fqscTjEhHbG4bX
TLSH
T1E952F816AA385977CCDBD209FA557F53D6F5047292940E48AAFCCA0C01E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e3d61ab6a5e844261decd8761ef8ba95efcc1172c2cd85dccc788bcf51b2a811
MD5 019dd8edb059d32d7782a6aa18d3721a
SHA1 31d131aaa7cd8322ee540030f1303b8fab1f1230
SHA512 5d51444797a999495e6268bef34bf40302ca4d580c8c95e0e5beb1297f7c7cd8c28917eef567b5d036d2b9f8783c07944a7506b52e499e9428cd1d67c7820eb8
SSDEEP 768:DGW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjoroIEiZYu:DGW7kf0Wvqidau1jaa5LA3jTRu
TLSH
T108D2FA3B680CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fed14ac8e3133be7670ef973df6d9b59d5d43a21c489532e595ce04b9be80ae3
MD5 0073c8825e5ff228ff929562ffce38cd
SHA1 f9d60bf0e3bfc624499ad1be37042f16879f0a30
SHA512 d2962c6f259549cbc1a864be40c1948eca1e565595643d7086ac0b81d6b2ee000312b4f53ae3f7930577dff808926e98664e11282f70022783f45cb3048db22f
SSDEEP 96:KIbCKcfTWKIsSHfItpfd9xWJmsgRxK44g/xcnvOR9SHLURlTp5FWtC4gNFK4i:si1HfItpfd9cJmtR74g/envOR9SHLURi
TLSH
T194918D15713A0E10387D394CA2D999274F8372663128F57F7FB824A24E6AE125DFE8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5929a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5929a6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aa86b3b2ed4a87d306d1daa0da914dc97d6b4f6f76b9549636d7cef115d08110
MD5 2eb5dc76ac476dbcb5a68f673b366e69
SHA1 592510e49c512a152e340a31dbbbb8d29d82220a
SHA512 61e9c474eba1e81c47bee6ca7aaf7258bb4a633491639aa1b2d3edd2984cd852713250f9bfc21fa2d42358d3981190f0d68750767cf8ed9ca5e9229726c19ab5
SSDEEP 192:MONf64BAQmiUy41nW5GBPKcl+FdGuom1baDT5U6:MONf6eArJWzd0mSlU6
TLSH
T13502FA35AC756C7B9EB2BE45F4863B175FD4113BA6D45B44EAE81B1C00D734C234682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 66c17c057733cff555d692ef7f46636ead72a96963c9645e7fd7753b6f415628
MD5 c37d30deeff749d2bfbe6f8d5bff0fca
SHA1 148323a7b6264be93e13c6a5b155adfb4b8662d4
SHA512 3843f1fcb526209a386514a1e16aa868d37882014967cbabecff8bd1b0c0f3ebe52873a1bc4486206f34d9256961fcca4229439e12c61efbba59b618c288ee94
SSDEEP 384:qiF1tNn/s3n9S6zsNL8TUNTUlIlPbljvVbfBLQd0mEMkaKl8BhBTPLBliSwI:hF1j+9h+wg/TVdckMkaKl8BvTPaSwI
TLSH
T151A26B735C648D3F9EA2AB88F54A36078EF441BBDA806E94E7DC6B1C019B2DC5307D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 91433de9ccba6eeac5849438b1d262f7c516554acbb09c7bd605aa809d10270e
MD5 9ea102d049e01bbb4d95a09f581489b6
SHA1 e1dcdeb4fc53464b5878251842504937e3f39832
SHA512 78689909b7fc39ae674e073bd1a283075314d49ab26744b61bb5faea38955a692f11edbce8bb00406080b6c49baa0e44bb0e0d3c167ea944a55f8d9584114923
SSDEEP 384:TtNn/s3n9SfsNGUPbljvVbfBLQd0mEMLaKl8BhBTPLBliSwI:Tj+9UWTVdckMLaKl8BvTPaSwI
TLSH
T10F928E715C751D2B4EA3A689F4473A074EF4417BA6C42F94E6EC7B1C01DA39C6307E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 993256d32fbfe75bc61e7c6f04d573b04a3a02740c797e75873e10142a64498f
MD5 7c459c555e63a1402ae943ede8225c04
SHA1 f62b6e5333afe81d861caad8cd6dda3f71e3061f
SHA512 091df0ccb5c7ec7dcd6b5e2293e13cf9646f1fe1b4f5e737b27e4ed19a78b9c779fabf75177b206ba7fe0c76de9933967c2da629a0c237bd0d26e8138ad495d3
SSDEEP 192:fONM64BoQmiUylnJ5GBPKcl+FdGuom1YKEMmWwhqLU6:fONM6eIQJzd0mEMEaU6
TLSH
T1D8121A316C79AC2B5E92B541F48737135EE5412BEAC86F94E6EC2B1C05EF39C230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e931ffce-efac-4d65-9139-af40b0239437.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e931ffce-efac-4d65-9139-af40b0239437.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f397e3eb21787d873692c51b1e14caf2c766fa03a26ef47534e8fac9ad50643c
MD5 115e9c652a52355dadbac7ba97992fb6
SHA1 fa20412c7d6f6c3be3094932090ec41d64af7b64
SHA512 498309433b8897190e083b7abe0336ae95c4bf59b392d199718ebf06babb612db0985a2fe6e525475918317cde530a78d496e0402d5c839f24b305df65fde0c3
TLSH
T16E411499A7F91148B3776E1AAFF7A46D487F7D672F06D55E00010D4E0622A40CDA2737
MD5 SHA1 SHA512 TLSH

Submit Download