0ca8cc96bffe4606a05e85b1ac9f66e4fe061bea4fd06587e04f5b0c83b6b027

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
j/83097940198pwd=Zxa7bbEtlbuIgquGluyd/admin_sidebar.html
Size 4KB
Sample260708-wt77baev3j
SHA256 0ca8cc96bffe4606a05e85b1ac9f66e4fe061bea4fd06587e04f5b0c83b6b027
MD5 e5d90f1916059efd180cf95f787cd89b
SHA1 36b68c0c104dcaef3c8399855955b869d3fdb2f8
SHA512 c2d12fe1f041d09540a1c7b6bf06b1f64f1268852630a63a325d5d1ccdef19cb4eb73e290aed3177d02c6e8af150198d8aeace30076a2000e05407dce07549c8
SSDEEP 96:ARiT0F6Iznzlgg6c6mxYzsMr5Y6r7ZdOL/HhrIqhLKw:+qMznzWxc6mxYVr5Y63c2iLKw
TLSH
T1A5A1976A26D018394273822542E2B774FC3C84D7DB079229793C918F1FF1B48C857EDA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4660	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280080549618252"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{01C58110-4DE5-46DC-B9A5-7618D0148129}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3696 wrote to memory of 5104	3696	msedge.exe	86
PID 3696 wrote to memory of 4660	3696	msedge.exe	87
PID 3696 wrote to memory of 3308	3696	msedge.exe	88
PID 3696 wrote to memory of 3308	3696	msedge.exe	88
PID 3696 wrote to memory of 3308	3696	msedge.exe	88
PID 3696 wrote to memory of 5004	3696	msedge.exe	89
PID 3696 wrote to memory of 5004	3696	msedge.exe	89
PID 3696 wrote to memory of 3904	3696	msedge.exe	90
PID 3696 wrote to memory of 3904	3696	msedge.exe	90
PID 3696 wrote to memory of 3904	3696	msedge.exe	90
PID 3696 wrote to memory of 4308	3696	msedge.exe	91
PID 3696 wrote to memory of 4308	3696	msedge.exe	91
PID 3696 wrote to memory of 4308	3696	msedge.exe	91
PID 3696 wrote to memory of 3692	3696	msedge.exe	93
PID 3696 wrote to memory of 3420	3696	msedge.exe	94
PID 3696 wrote to memory of 3692	3696	msedge.exe	93
PID 3696 wrote to memory of 3692	3696	msedge.exe	93
PID 3696 wrote to memory of 3420	3696	msedge.exe	94
PID 3696 wrote to memory of 3420	3696	msedge.exe	94
PID 3696 wrote to memory of 864	3696	msedge.exe	99
PID 3696 wrote to memory of 964	3696	msedge.exe	100
PID 3696 wrote to memory of 864	3696	msedge.exe	99
PID 3696 wrote to memory of 964	3696	msedge.exe	100
PID 3696 wrote to memory of 5076	3696	msedge.exe	102
PID 3696 wrote to memory of 2748	3696	msedge.exe	106
PID 3696 wrote to memory of 3868	3696	msedge.exe	107
PID 3696 wrote to memory of 1680	3696	msedge.exe	108
PID 3696 wrote to memory of 3164	3696	msedge.exe	116
PID 3696 wrote to memory of 3164	3696	msedge.exe	116
PID 3696 wrote to memory of 4192	3696	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\j\83097940198pwd=Zxa7bbEtlbuIgquGluyd\admin_sidebar.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe0732c188,0x7ffe0732c194,0x7ffe0732c1a0
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,3971035529397620241,16676307778312760232,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,7083676202685818611,3052251506444088183,262144 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,13383906910350157421,5936458324386247248,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,8082736254409386259,13802383439818266432,2097152 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,16309403253959284933,17259261286967875266,2097152 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,798503188726330319,17692548221537850447,2097152 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,3117016711845527204,12390983925938791985,2097152 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,5957314250255958308,11718031327417395142,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,11290648436964959507,1551481237110018219,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,17934433409483950836,8485391296178542831,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,17934433409483950836,8485391296178542831,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,45926375800867646,16695835462998584446,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4728,i,17969987763708038561,859784070137578296,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,16490971479284269312,7105077634416832166,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,8655481075079040796,3996543572177867503,524288 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5236,i,9573605596673404207,8114719365961384876,262144 --field-trial-handle=2256,i,2452026824491382908,7520486482327791975,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 51314010cdd0f9677e938a8b03d6d2db96286b464dd8fbe6545507acf2149ebe
MD5 05f8f2245e73d8a2a09d4dd4c436f255
SHA1 d9169ac85344f69b71ff90982bbb7fcaf65860c2
SHA512 3010bd2aca091e2643cf0e4cb2483a96b9a2b4fb03f59bda5bfd6b3133e0662585c88b018c64d3a9489df8c66e0fd22a1af883cd41f3e38db318e0a920e40049
TLSH
T15B61F8FD176208E1E7698071B0E20640747C3EDAF53F7E8E535088FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58db86.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58db86.TMP
Size 3KB
SHA256 f170312117d569be6d46a3f45d5f5f519af2083acba36900c2b865e8056ea63c
MD5 95cd62c80283c278f8545beaa107fac7
SHA1 d6e0331a397a2d608b3dcc19e61c968d927ebe37
SHA512 2d84cc0bbef462702370a39e0976cc4cca8579b6cdc82e318bf12af85ea019df8c618ceacd62ba05a8166f964079db3ad512a4c2e2f987faa9de9b3d9608db07
TLSH
T16561F8FD176208E1E7694071B0E20644747C3EEAF53F7E8E535048FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dbe187f6807a9e844fbcef1e03d07e03f4fc949d5d0000ac7412faa61baca0ba
MD5 8ccc3eda4eee462a66192d4d65e19562
SHA1 a6cb5e6004d917df31d2f8e4c0c8652be6920c49
SHA512 6d546b19bbdf63f92ca11795ccd06e251c7e11764214cb6b5696b1ae2f6417cd60ca79815704beef9e4a0ecf762a422b4314e4a610afea52ac78d989c7cbc6e0
TLSH
T1B4216BF383D5856E8A1156F0AA28AE2BCE1D0505422C3C198AE4EF1793E2465E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5386b2afd5a00edb0b164c351f6c434d7636686b7d4ed4302a8260194070629b
MD5 ba403f483f70914c50013550dbac4049
SHA1 f7f23c41af0afee25653f5e9efcaced30ffef283
SHA512 b7e7701bd4c2759864cecc69faf8272081f3354cdf80509117b5fe63887aa6fffd702c401440c185a3c9d13c5927cd4ab051ab048b856009b4a6d8e25fc93090
SSDEEP 192:sxZ1RKyM/jK1Ml8UQwckX/fPsaG842VIdpHjHW6+WNGY9IZp+9Ig5RAJ:sxZ1IqcX/fPsaG/NDHbGmzk
TLSH
T1A652FA126A385977CCDBD20DFA517F53D6F9447292901E44AAFCCA0C05E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 bd58d16eab068bff74096de7d9d4d30f78dd373c74b51fd93e9fbe44757c9c4d
MD5 6f46a451e545961c8895608b05f18ee1
SHA1 fc9cddaae184353a6d726a314123006ca3ee4e08
SHA512 1cb066225aaaf0e7ac88d1bf56bf05d34ab88267ebc4b5e56100c3be722ed6abeb081b95986a1735a3310b0f1beb6a49574051c028eb23f2e1d85e7620875736
SSDEEP 192:sxZ1RKyM/jK1Ml8MkX/fPsjG8x2VIdpdjHW6+WNGY9IKq+9IgrJ:sxZ1IMX/fPsjGyNZHbG09
TLSH
T14642FA126A389977CCCBD209FA557F53D6F9447292941E44AAFCCA0C04E6AEC2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 748ad5d8d8134c2ee1e9f2f0f98c38887b29c4abc5a4cb7414c7ae80fb35c644
MD5 30dd13b106db9c8945ec1bdb386619db
SHA1 f616ba3d12370a258363f41b29bdf7785c5328c9
SHA512 f4094955e2b73fb01c40b411e049ba393f015b5ad8f83d5c47dfb62aa1be9fdb9ba67c32835168ab8827760c823f834899ecd05b80daa3748749c77b0b60c73e
SSDEEP 768:JKcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNiropg6U:JKcv21wWvu+Z+u1jaeFLeRN5pE
TLSH
T145D20A2B280CCB7E4F841E9CED2A6F8A6ED801CB57988D5447FA494C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 88b61ecf89c88559484f03b32c1b3902c0799c4b047eddb044d5bd1f885cecc3
MD5 23c0f4e06f5629e361202737fb95e307
SHA1 0a4a3bb757ae10efc860b348f60382fe88116d9e
SHA512 6a6746b2e6eed8e36a353d7b98ad8d291005222feb86e13f0c201028489a8096a533e184e79096cea89a459da2a85a20d8eaa6c36d94bffd9e7242fe33ffbd2c
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+W9KD3tHbPWDYGg/PK4eghPcF9wTrEHz8w:mTZ9KD3tHbuDY3/1eghEF9wTrEHz8zdm
TLSH
T100918111383B42812D7E680CA2F5A5775A9370E67418E53B7BB811E54F67E069EFC8CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3471752c-2c1a-4ac6-8ec0-9274a13c5abf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3471752c-2c1a-4ac6-8ec0-9274a13c5abf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e63096055b87ad7aa4e36e24071647c11547551da516ba2dce52c5ea5a1ec1a7
MD5 3ad9d0c58adaf11e37e4be10a06a3ba5
SHA1 8c123a5a01e4117892742ac1943a4466fe85e4ca
SHA512 8b3bc1a0a970884b3e40bf77f7e823a413e02b821b4a4f49233d78f32cbbd92c84917050ce19dbf0d92f0b7bed36ba4b98bd5b56c903a2f36c1bbe80db711b1d
SSDEEP 384:/tNn/s3n9SfsNCUvt6Yzi/WTe+CMdceCBS+2bPScjmwYy:/j+9UOt6k/yklCclbP1jh
TLSH
T18C927E366C295D679AD25155F80B3A13CFB891639AC22F94D9ECAF0D01DB6EC1302D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 bfa6fb50b3a83adb77e688b0d8f9e91daf20cc24c79760c8ddbac439164abd5e
MD5 b815b6b713885bd735a012b3a66ac267
SHA1 99596074f71dd3d09e086bc5b59dbe9675486aac
SHA512 0582cf7b00861ec4539c1204f386fcc820f1489e5624755c9387c2c3dbda8f44daf617b8f4e9863aa9ea5600cba448293bddde6ab1c0c8e0f1966726c54a3515
SSDEEP 384:6iF1tNn/s3n9S0zsNa8TUNTUlIlVvt6Yzi/WTe+CMdceCBS+2MPScjmwYy:xF1j+97nwgft6k/yklCclMP1jh
TLSH
T1B2A25C335C588D6BEEE65A85F90B3613CFB840A3C9826E91E6DC9E0D01DB5EC1347D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a989c38fa2cf9e8b122e62e240a9a8b4604b94f6098b95e2e72eaf9e5e0ce3cd
MD5 c7008c7d5c222c4fcaf078fac406492f
SHA1 9d6224ac79e04691c3a97679c012bd740b3ec874
SHA512 17f3b9db7c96f11ba0ea453f4de9081df308f7a87d7d3fa2653dd9eaef1b99c8531c5670b0a9dbeffdc7745bfb2690980b24fda1244f1031c24ac0e9b9571858
SSDEEP 192:JONU6v+YLNQmiUy1cZh+CGy+FdeL9oCXusofU6:JONU6vz/HZh+CMdceCDeU6
TLSH
T15102D9357D381C6B9FF2AE45F5873A235FA82177E9913F84D9E81B0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3274cede8a03b213252b99d14f51db215623604c02c4d21feda1767e9922e629
MD5 1d12f9fc0dbb86fc6782a57bef7ce2c1
SHA1 92b05540de3a99cabb4dacd888b85b0b04f43836
SHA512 bcc08d9ef9121245ecaf808c9241954c3ec15fc6efb2f34a106b9ddb7b4e004371a5a54effb189b8a2a0edfdab4bd45102321b5fc8c39da21042cc694da198f0
SSDEEP 384:2tNn/s3n9SfsNCVvt6Yzi/WTe+CMdceCBS+2bPScjmwYy:2j+9U3t6k/yklCclbP1jh
TLSH
T162927E376C295D679AD29195F9073A13CFB890639AC22F94D9ECAF0D01DB6EC1303D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6ecc37d9a29d6b9847dba07e7d2b9a40f9e70d720d776611e01bcca2945bba06
MD5 4738e6b811691d94b6d2a058d49f870f
SHA1 55b8f931ab2e5ced908fe3714513dd5c33176136
SHA512 48e8d615cb1d0d1bc8a91149e4cc66308389f83c97e3bdd9e14d30d4416527d2963419fd8dfbf9d76fc87ab5daff5cedaf4aa055832c939b0c7021569a7ea08e
SSDEEP 192:9ONr6v+YLcQmiUy+cBh+CGy+FdeL9oCd1FS+21CH7q4U6:9ONr6vzY+Bh+CMdceCBS+2CPU6
TLSH
T19B123C36AC385C2B9EE2A551F48736135EA85177EEC63F80D5EC6F0C02EF6AC1346816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 3bf03e78d03ad1e49ddb1c8bc116ed4b77a5cb807b821c216ba7a721c0d88f1c
MD5 76c82fc5cb7a13fe996c37bd270742fa
SHA1 9774e963bd0999f6f65f6993ad85c75789865f44
SHA512 190be71f031271133467bc8e54a8acad7c4399b60190b2e4c63c2f5d9b95add36c97f653c27fea710e4a6d0eae8f6be3e06aa569648a06503506260f8fbe99f5
TLSH
T17941FC9CB6ED1158B3B77E569BF6696E483BB9772E0AD49D10110E4E0A22F00CC61733
MD5 SHA1 SHA512 TLSH

Submit Download