4f5fe2ab9eaaac5359e1418f960dc10ebe5d6d35a3ef3e51b604c83e16463fd8

Analysis

max time kernel
148s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 18:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
about-us.html
Size 690B
Sample260730-w448eavena
SHA256 4f5fe2ab9eaaac5359e1418f960dc10ebe5d6d35a3ef3e51b604c83e16463fd8
MD5 bbf89adc7c88b9ab1ae52949da2fb1b0
SHA1 0dc1c2bd43d455ead78c8cb3a5c4a5755fb02a9d
SHA512 f43f29abbe0028ce4d131f5654ca0cf3fe06678b6455eccc6842e86a1c9373cf9fb53a87201e2292b3c523e5aa2ddcbf2817d4db4280cb9cca6c8dc028cea2f8
TLSH
T19C01FEDECE914A317122D57CCAAF7788AA3310DB8240E902C5510DDC43A435AD3E7B9B
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4176	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299097762676965"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{D0702EC4-6A30-4AC8-81D8-CE7AFB7A1BEB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
508	msedge.exe
508	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4736 wrote to memory of 4676	4736	msedge.exe	85
PID 4736 wrote to memory of 4176	4736	msedge.exe	86
PID 4736 wrote to memory of 1700	4736	msedge.exe	87
PID 4736 wrote to memory of 1700	4736	msedge.exe	87
PID 4736 wrote to memory of 1700	4736	msedge.exe	87
PID 4736 wrote to memory of 2764	4736	msedge.exe	88
PID 4736 wrote to memory of 2764	4736	msedge.exe	88
PID 4736 wrote to memory of 2000	4736	msedge.exe	90
PID 4736 wrote to memory of 2000	4736	msedge.exe	90
PID 4736 wrote to memory of 2000	4736	msedge.exe	90
PID 4736 wrote to memory of 2384	4736	msedge.exe	91
PID 4736 wrote to memory of 2384	4736	msedge.exe	91
PID 4736 wrote to memory of 2384	4736	msedge.exe	91
PID 4736 wrote to memory of 1644	4736	msedge.exe	92
PID 4736 wrote to memory of 3096	4736	msedge.exe	93
PID 4736 wrote to memory of 1644	4736	msedge.exe	92
PID 4736 wrote to memory of 1644	4736	msedge.exe	92
PID 4736 wrote to memory of 3096	4736	msedge.exe	93
PID 4736 wrote to memory of 3096	4736	msedge.exe	93
PID 4736 wrote to memory of 1116	4736	msedge.exe	97
PID 4736 wrote to memory of 1116	4736	msedge.exe	97
PID 4736 wrote to memory of 4272	4736	msedge.exe	98
PID 4736 wrote to memory of 4272	4736	msedge.exe	98
PID 4736 wrote to memory of 5048	4736	msedge.exe	101
PID 4736 wrote to memory of 1884	4736	msedge.exe	105
PID 4736 wrote to memory of 3344	4736	msedge.exe	106
PID 4736 wrote to memory of 1696	4736	msedge.exe	107
PID 4736 wrote to memory of 988	4736	msedge.exe	112
PID 4736 wrote to memory of 988	4736	msedge.exe	112
PID 4736 wrote to memory of 2188	4736	msedge.exe	116
PID 4736 wrote to memory of 2188	4736	msedge.exe	116
PID 4736 wrote to memory of 508	4736	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\about-us.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x290,0x7ffc32edc188,0x7ffc32edc194,0x7ffc32edc1a0
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,13114219527400388835,11834204601074730095,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,3112163825008191659,2732148458859882527,262144 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,7904589869093942539,6270145295564828180,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:8
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11742967152044238466,14691545519465752671,2097152 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,11869718624554481577,17940368170532312121,2097152 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,4131305287620094329,6116225179348367502,2097152 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,3106751379555530441,6752661402854114778,2097152 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,2106888637633065099,3234066661512154845,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,8180847945956729692,15604023481032979099,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,3108393234974229247,9699413152504543543,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,3108393234974229247,9699413152504543543,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,2180832285132967306,398428016778145955,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,3921927274603570914,1521831770065728145,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,18360014720271691381,12129971679928837927,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,16723824174749792328,11856049253651301752,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,2566558138434066004,13914710340461444667,524288 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5340,i,1267129289939642933,14854756089042840106,262144 --field-trial-handle=2208,i,387155131411280425,7792734711308543812,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bfafb49f50aefdab8b6251c7c70ceca46742e79d1e5a239b0d6ee6cb7d220831
MD5 5b7e6a1cee7009f4bc50210158cb28e9
SHA1 d4f0446815d20c1a697afee9afc3addd7e456f74
SHA512 e2a271d5f26a1e01c1df363062aac86bc3b61dfaefa43b453d66642e6e8dfeb255d33e6008023593c3763bb06c0b047d56c8821e05ad19c8167a7762dcb57094
TLSH
T1BD71637427018054D7670872CFC912EB76368AEAFCAB3E8511F2BD74A121F328667B1D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58919c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58919c.TMP
Size 3KB
SHA256 45b1dcbb720d0906d43fde68a65192a50c80f1ed54c36b04570c59e75b4e0a0e
MD5 475b1bbbc5b77ea19ff13272c44f161c
SHA1 14c221fde253316a1e627c7041fdf72f14145b50
SHA512 0d898c85f328c91eccd30eb0ec72eb076e57ef8aa6bb34d9334c2557a3291ad0b3ff01ea092713cd24fe646f2884c5be4bed390d600baac07bffb401a425ed77
TLSH
T16A71527427018054D7670832CFC912EB76368AEAFCAB3E8511F2BD74A121F328667B1C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 0862af2ece8072055e5282157e086f3ae4ebd758bc4e4d7f5732bb7c4b722053
MD5 d6dc23651e69dff089b67676c1a774cc
SHA1 8869993dd4a87a96c850d3dc5ccc6ab28d059731
SHA512 80813e228005f2164d5e058588cfe80d81993360104036412b43d85a4e8fedfc95764a76bbacdb44f00f6f1853062ee5927ee81c50ef96db870b9f4a8f06e4bc
TLSH
T123115BB3C3D5856E891116F06A24AE2BCE2D0A05821C7C29C9D4EF27D3E3075E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e22fc6e0d3b64f8f27f3e4e914b4ec4afb94f00f2d7bd8bcf9cb1493ce21223d
MD5 2bca63e25e680c9ca9cc307b3647bfd2
SHA1 966bdfb8171c758303c784ebb22c6355caa466be
SHA512 8fbc40abe8947def5a66fecd44480af87dbb8fe76f11d88be0700b5007265ef527d5d3304e70e5793abe37b949fa494e520e6653dfd7f40520e97a8f72cb7644
SSDEEP 192:sxZNRZyM/jK1Ml8MkG/fesKyiV8IdpdPHW6+WNGYvrOjysIgrJ:sxZNnMG/fesKy4xHbGTD9
TLSH
T16042F8166A34997BCCDBD20DFA51BF53D6F51572A2900E44AAFCCA0C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9dcd23f6503361e27f9fbfb8cda6ad6f132dee193571e33e63910eec81860f21
MD5 e25c6c8014b9bd71d569a42a516f0173
SHA1 c8891b64db6b81869bdf63085b0753ceb483d05d
SHA512 fafc7822aa4b731a3a9d416f456e6523cd9d49e449998f063f7e5e9374b302d1ec8755735798dbc1c0a2f86ba14620a8f27636bff80f915f9c567f400b9493a0
SSDEEP 192:sxZNRZyM/jK1Ml8UQ7akG/fesHkAiV8IdpHPHW6+WNGYv1RjysIg5NJ:sxZNnq7pG/fesHD4vHbGGDV
TLSH
T19952E6166A34597BCCDBD20DFA41BF53D6F55472A2900E44AAFCCA0C01E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ed4387178de2d1c62534af1799b959916f07dfbe7da0f229a9e9f374e74e6ebd
MD5 6d5e5ec985597cf1cd52245e1184cd2f
SHA1 8a22bc2c4f2986a7cf2a8543c9a2c8bb51a7bb07
SHA512 3e6c34307759aa5949d2eed7264800611ebeaab7cfd2fd2a3d8dfd6239d2a6a4422efec1c1c0d4b5f88631bc319c79ad38db73566a009c288c9acbd396db377a
SSDEEP 768:frseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppUroig:frseJ3xWvhfynu1jaVcL88p/J
TLSH
T1D7D20B2B280CCB7E4F844E6DEC266F966EE801CB67984D5487FA880C02C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b571d64f-08c8-4d9f-bc24-3faa98c6be83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b571d64f-08c8-4d9f-bc24-3faa98c6be83.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 135d223031843e9b283aecbe27cef11f0f946872129e3c0776bc90e91d9f49ed
MD5 f7b8acbfa0ab4b40ea47d334f5fa09b7
SHA1 a4087d3e951bdfcdb1cf77297ee0ce6ace8790f9
SHA512 230d4dacc3687d77119b96ccca2c2679dfdb3dde07b17eb511fd7b6287521aa10a7cadf80bccbf8c169df6eed994beb010db31d83b6422360d128c7c127c6758
SSDEEP 384:t5iFiZcITzsNm8TUNTUlIlhFz7D3AZkdeKS0llc4E:WFQ3zwgRzQmjc4E
TLSH
T12E825B735CA4893FADB7AB82F54A36078EF44177D6C4AA90F7DD9B0D009A19C0307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a64e53678325f18662e6a7929e01fca11c7a12243e461f092df102a2ee626275
MD5 58afc547cb5ee8c869f9c740c8c98db1
SHA1 4a7036163c8819c0325eeab08782cc9c866a10c0
SHA512 534f2a80ef6dbd706884fdf2c02914504bf30e1f182332900e6e21d47b08bc97b74cc3e5cb087ef8edde755783cbc0e7d7c6d01f49d6ad2553c25f94f7ed3b83
SSDEEP 192:lONQ6vMtPQmiUysXThTQj+FdLKKSh847/WU/u:lONQ6UtRjTbdeKSJ+U/u
TLSH
T1B5020836BC785C7B9AB3BE46F48A27171FE4216BE6D11B54EAE92F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 9c109e5ff2e2daaeaffe4d2459500eb959875a304a4a5debe9b5fa8e8dbe76d8
MD5 d8aa71b35da820c007fc7ed6a2d48392
SHA1 92934f2b83263fa74dc6de16f836a3e6231c127f
SHA512 fd44ad6e63da2f540c12f6a6e6edec94c75168b33ac337fb142b146b6c34e54348c45e700c6fd8e6400f3ff7eed9e300f4e4a1a68dc963ed4b5a5e9fb86d2baa
SSDEEP 192:uO0m+xasuheOwQxMGsNmhQ6RzSM7S4ZQmiU1De24MTQj+FdLKKSnGNl88z1qqUk4:BZcIhsNmhFz7D3AZkdeKS0l9c4E
TLSH
T1AD625C726C785D3BADA7F142F58A36074FF49127E7C86F50E5ED9B0D00D92680316D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ffbb6d3a145e8ad05eb78c4aec699d283991aeea7681e37c29107473958180bc
MD5 0bb1ca75ddc41ca83308e12fe99278e4
SHA1 cf2083546f48c21f489b7196effd6d4938a9c639
SHA512 ff1f5edaf16da54bf65d7f55ecb0ce1799a377f9a05cf0f615d6e69eefeab3b9cfd3c54a5cdf1984b140b1a8d82bbd1208b9c7e59181bdc326497f2e5e5aeaf2
SSDEEP 192:ux0m+xasuheOwQxMGsNmUQ6RzSM7S4ZQmiU1De24MTQj+FdLKKSnGNl88z1qqUk4:gZcIhsNmUFz7D3AZkdeKS0l9c4E
TLSH
T1A9625C736CB85C7BADA7F142F58A36074FF89127E7C86B50E5EDAB0D00D92680316D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 b301952f54039662c5b0425169416989b5374a862e3e328d8d11f1d4402808cb
MD5 7f7b809237c023a0209cb381c3223f2f
SHA1 7b622b964eda5b088829b205566122cadd94bd31
SHA512 0a8894c8b5ca85e507de9fb6f6f04d131837315a01e5ef090264410f9153e00e23404a5474fee329a703287c606a4d8e9fe1c695611771027f557dddfa883fb5
SSDEEP 192:zONv6vMGPQmiUyqXbhTQj+FdLKKSnGNlJ80IqqUU/u:zONv6UGRPbbdeKS0lecU/u
TLSH
T19B121C77ACB45C3B5E93B182F08A36071EE4926BEAC46B50FADD2F0C01EA65C1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b855f7d69ac5461929aee54526f6afd244e4b378bfb6ee7b02fe2af6be248e78
MD5 8ac951f0fce1f357bfe2d617a92a3926
SHA1 6703df4268c7ebefaac6f52b696a4d85c84e5b85
SHA512 bb8be16a10e88727b34ab298bfcfa112a4a53677c7a2a791cbf84a43dbb3fde05743792e51c7cd09ec303d51be6db0b875141ad722e980e46cd947f17ad3b85c
TLSH
T15F41FA58A6ED1159B3B76E5A9BF6686D587BB8732F06D89E10010E4F0B62F00CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download