8bf38e66b6b5da3b6ed964d1e05c27fa5163573e27f88ca642b3baf5fa418dc4

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/07/2026, 12:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 2KB
Sample260724-pkgvfaywhw
SHA256 8bf38e66b6b5da3b6ed964d1e05c27fa5163573e27f88ca642b3baf5fa418dc4
MD5 6c60e1ae466be667dd9436c4f6879457
SHA1 03103d8b0a07cb0202b1253bd3f0c130d9612523
SHA512 fdc23b2edde2ba43c8d72e070645d999459b503f3db17bb72debab09fea587b1d8b701a589b59196794ece5e54f2754f809cad6f0814fe589f44d2fb4f14efa8
TLSH
T15651CB64CA030C0AB23389591BA10B49E9A44003EB031B697FE5339B9FF167ED651F9C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2028	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293695728117825"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{37B0C7E3-CC6E-4487-BF3C-EC99A56023FE}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2044	msedge.exe
2044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 2776	4888	msedge.exe	85
PID 4888 wrote to memory of 2028	4888	msedge.exe	87
PID 4888 wrote to memory of 4824	4888	msedge.exe	88
PID 4888 wrote to memory of 4824	4888	msedge.exe	88
PID 4888 wrote to memory of 4824	4888	msedge.exe	88
PID 4888 wrote to memory of 4644	4888	msedge.exe	89
PID 4888 wrote to memory of 4644	4888	msedge.exe	89
PID 4888 wrote to memory of 2252	4888	msedge.exe	90
PID 4888 wrote to memory of 2252	4888	msedge.exe	90
PID 4888 wrote to memory of 2252	4888	msedge.exe	90
PID 4888 wrote to memory of 592	4888	msedge.exe	91
PID 4888 wrote to memory of 592	4888	msedge.exe	91
PID 4888 wrote to memory of 592	4888	msedge.exe	91
PID 4888 wrote to memory of 4224	4888	msedge.exe	92
PID 4888 wrote to memory of 2848	4888	msedge.exe	93
PID 4888 wrote to memory of 4224	4888	msedge.exe	92
PID 4888 wrote to memory of 4224	4888	msedge.exe	92
PID 4888 wrote to memory of 2848	4888	msedge.exe	93
PID 4888 wrote to memory of 2848	4888	msedge.exe	93
PID 4888 wrote to memory of 1952	4888	msedge.exe	97
PID 4888 wrote to memory of 820	4888	msedge.exe	98
PID 4888 wrote to memory of 1952	4888	msedge.exe	97
PID 4888 wrote to memory of 820	4888	msedge.exe	98
PID 4888 wrote to memory of 2712	4888	msedge.exe	101
PID 4888 wrote to memory of 3332	4888	msedge.exe	110
PID 4888 wrote to memory of 5080	4888	msedge.exe	111
PID 4888 wrote to memory of 5068	4888	msedge.exe	112
PID 4888 wrote to memory of 3928	4888	msedge.exe	113
PID 4888 wrote to memory of 3928	4888	msedge.exe	113
PID 4888 wrote to memory of 2044	4888	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fffd007c188,0x7fffd007c194,0x7fffd007c1a0
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,4155298666331514405,18139281850741336367,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,14577931705001410225,16341515617622762933,262144 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,735804225296185672,17401682140354874996,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,5604253410997587596,14947682462568932322,2097152 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,5199232167631572301,4858795891577728772,2097152 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,17888314631816838856,15014418953042983904,2097152 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,6499306424996813592,9288333635846275446,2097152 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,4736191146777079069,13369708585316208798,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,2684536178491114969,3775045331321578570,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,5714645438740114056,10392547308674267332,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,5714645438740114056,10392547308674267332,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,852825093798779953,9068043682991952790,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5968,i,7525880312460798201,5273893785946908027,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,13127937981626152000,4277274250371751323,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,6786656999849153834,17678353371997825509,524288 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6264,i,14879579887810602285,6521737064903565755,262144 --field-trial-handle=2312,i,16106873679841411328,1359648288916838831,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0dd67ce18f790889421345abd00eb8bb63da30a19720a4eac4a6d8e03347ef2a
MD5 8fe5f9761432327cc7d931465b4ed5b0
SHA1 04d2cca64ef5419bdb1f1d17e7a9c1d34b17e763
SHA512 1673591d68a8f67bd266e7d7814430b27b2a07d13d64110b02d6bf34de3b5ed4cc4c0a30ac47d6f6d588ab98a7d8074439e38065e9d0285608632fc247e288c6
TLSH
T1D571F92D040E49A3E31C2732E0E3098EB274CD944FD74EA35034993C578EB56CBE546C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5880a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5880a5.TMP
Size 3KB
SHA256 3f0fe75c05b98338423b1f5551f10bec644798bf4087b9300c0905d6601c322b
MD5 dda70657e8b27895a275e9e3ae346202
SHA1 e371e20e0a9fb3f383eaee935224a02584f01e65
SHA512 645fbb4f56816587fde5a8d8b364557cc83fb1e8146b260cf7101f6bac9e4d11ebfb10d7c8bd1a855020914fa16bb2bd4ea4a53d8fd998663460d54a138cba3d
TLSH
T1FF71D82D084E49A3E31D2732E0E3098AB274CDD94FD74EA35438993D568EB56CBE546C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 a8c7d83a32e753ef5c65e5d69fc3132a4fbdcade697f5a20c319b6bc51f96fa2
MD5 29ced443a6b6588658bff4897bd8a113
SHA1 1a895a11bfa48e512cd0091cc4842e8ff2389752
SHA512 cac659e0d3ba760ac7b9a7aa39bda7ddf7b5392eb21f511ccd40fd95701bc090ee10d896210528930a57e996fcdd89b360f52a644f529b7666686905988dcd31
TLSH
T1A5119BB7C3E585AE890117F06A24EE1BCE2D0606821C3C1589D4EF1787E3466D10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d49b09cb6d97c9d2a5896b5c21682428eb8dc1847d02d4ce91b9165178b3068f
MD5 3a4ad5ee4a5befa3766d11ee74ee0cf0
SHA1 498c572fbc43c038e170cd906b21824fec283145
SHA512 7f9957599b5b7e20b8051213fa3d3a35fd2e8efd28c7c2c0ebcb658091f7dda748ac54f340603ccf93717fd6594d15783b799d5fbd615c7f37bcc55b86f4da8e
SSDEEP 192:sxZ/RZyM/jK1Ml8Mkk/fnsmtbIdpdYHW6+WNGYHjDH+DIgrJ:sxZ/zMk/fnsmtEGHbG4U9
TLSH
T11942C6166A34A977CCDBD209FA55BB53D6F51473E2900E44A9FC8A0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 978b7766dac3fd0c66eabb18f4b3e63fed5801fb7ade819900905abbf1d13f21
MD5 1760aa8f7834ea076c35a946ce10f291
SHA1 c2c534429177feff23ab6181361ee8f4e97f06c2
SHA512 0c0f322c6a1e40ecf461004eb18f032ceafed0bea652762d0ac95d059c492d9111b7d76d36457b94792f700eb0f88ed17ed361d8f8ea79d58c52cf1be63bb228
SSDEEP 192:sxZ/RZyM/jK1Ml8UQykk/fnsWYbIdpHYHW6+WNGYHnKo+DIg5qJ:sxZ/zqxk/fnsWYE4HbG0UI
TLSH
T15852C5166A349977CCDBD209FA45BB53D6F51473E2900E44A9FCCA0C05E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e6bfc017fd378b027d0dc44eb5281a77cef8d60782ffacc08e376dbd0a63d702
MD5 3be0894f84c498066543232a546d64de
SHA1 927e650be174f3608ef9d037096582e2772d4068
SHA512 58d9b18ab6e09c7c85f2acf51ba64ab72b50356468c1223d9fbd4fcbf76b7a996200a62bad8b8029e86a5d9d117f4ba14b5c04a3f54435e5da4d2598a4a70651
SSDEEP 768:PCUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R+roVT0t5:PCUZYTMWvg0Pou1ja7eLZmRVWH
TLSH
T17FD20A3F280CCB7E4F844E5DEC266F963ED801CB5A584D544BEA894C02CB6EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 6712589b1a9d306bdf74669dcc18f35b056f05b497beffcc3b7b04abf3359f69
MD5 6e2b22cf9d743fa672b93d4fe6a80644
SHA1 3a02839db498af1d82c0d11f68d27c9332f5a9c3
SHA512 cd3208261ea8bab55ae18481f4b99d49a0013a4989a02434aaa87b568a2edb027902fbd80a0bc6eeb9c016dadfe744f2e38f8c3a702ff66831ccbfe671547282
SSDEEP 96:KA1eK2AMaMKXqOCOkKHqUdOKmkS2LWKEgo:EurfyVl5
TLSH
T18AD1E20276BB02033D3D2918A39987764F85F5A33418A42B7FA880B55E67E345DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d9075553144eb9e1ff0e4cbedea53e5d430b31f96bdce8a20ffcb9b04ffa6157
MD5 75e6a3342a94464e47df4f696f975a3e
SHA1 cecbe0be1902929ec50b8d5267e87b2563589a60
SHA512 f60510c7abaff33f99718df580bb835a9c79e436bb809809f4cb64f99ad0fa0bb58c582da3f52f89551283032468d661f344f973623b225cde062bfd1e512e68
SSDEEP 384:oZcIhsNVUyKePnJzX5od+d8y0VuXRmRWOObjI9G6w7xp:WhpyxO7+RmQ29M3
TLSH
T16E928E36A8389D765EE7E155F48A35138FF491BBDB982B84D1FCAB0C05A64BC031AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9110944fb9ad9c605b9e103f5598b76fdc724160de3f93d1895e182152aa243d
MD5 9f650942ea8d584d3ac765a505fd543f
SHA1 52392a91ceef7b56776d42f63ab077ac3d3c8828
SHA512 e670bedb993715668a77714a9a8a6f76f2c66ca58e7b1e0bfff70765330abfe26eb8c22bdef35320f805ce5978edbd4deac1efbf7bb8c4dbacc25ae1a7438985
SSDEEP 384:GqZcIJzsNVUxKePnJzX5od+d8y0VuXR0RWOObjI9G6w7xp:xpKyxO7+R0Q29M3
TLSH
T195928E36A8389D775EE7A555F48A31139FF491BBD7886B84D1FC9B0C04E64AC1306C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 614789e5df5bd248a53cca579df06faa50226cfd089f22f669f5258d5631bcd2
MD5 8266deba1b924de52fa17163256c2678
SHA1 d375129f93ef0a8a04caee39b47c9a322ec59dae
SHA512 e09109ef211e228f8a69dad6849d9a9d1da0d425cfeae72c495441654506fbecc120fc39e72bbf4a33a46a5ba9c44eed85396e01d527aea28cae891d49335df5
SSDEEP 192:yONR61VWQmiUy0tgGX5Obd+j1jzory0aoX/a+31IU6:yONR6WrgGX5od+d8y0VCAIU6
TLSH
T1A302D935A9286CBB8EE2BE4AB48737135FD51067EA952F84D6F81B1C00D769C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 62eb522cfd21eef5e427eb35f36f68cb91f496858750077c545840a818a026ef
MD5 6744378620da7757f0c21363daa61e93
SHA1 531c7687e5b014189bb81cded1a0b044372543ed
SHA512 193b723d196a2ca8c38ba16fada2d59d6b654c092af8a1e2681b8ca436c8cd0ba9434a7beda1d3db483db30241cf57b505de4c860c3cdda4738d7d079968a5c2
SSDEEP 192:ZONn61kWQmiUydtrGX5Obd+j1jzory0aouX6ECjJIq/WU6:ZONn6NsrGX5od+d8y0VuXReRWU6
TLSH
T18E120936A438AC675ED3B595F48B31139EA55167EB847F80D6FC2B1C01EB5AC130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a4b93fffae6dddefffdfd0f852e562132f268b738ccbad3ac3d8b9bed49bbdfe
MD5 f8a72852f01ec25128143d6702d882f0
SHA1 b9ffb2619a8063fa3b78d4426aff41c4d2e952bf
SHA512 8a9c3a4ad594c0c3665b453093a6be0efc536d65b9b488c14ca0a1a203715aa4d8a64ff8a752f7b939dc338fc74acadd94f49f44e0fc38ca903ab410c222770d
SSDEEP 384:iZcIhsNVUxKePnJzX5od+d8y0VuXRmRWOObjI9G6w7xp:QhKyxO7+RmQ29M3
TLSH
T113929E36A8389D765EE7E155F48A35139FF491BBDBD82B84D1FC9B0C01A64BC031AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bc950f3-fa0c-409a-8541-8fa068e18fca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3bc950f3-fa0c-409a-8541-8fa068e18fca.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download