2a9a386d60bdab68b8facca3bae18cf6bc365b99cca2f12e7ad030067ff3b8c1

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2a9a386d60bdab68b8facca3bae18cf6bc365b99cca2f12e7ad030067ff3b8c1.html
Size 82KB
Sample260802-gqlftaea55
SHA256 2a9a386d60bdab68b8facca3bae18cf6bc365b99cca2f12e7ad030067ff3b8c1
MD5 c08676603b7a21723853fa3486597127
SHA1 6820b9b0ecf0f6d5b3cfcdb7e1ca0fe72d294811
SHA512 52e76b98bc84569879e113c2c6ad17c83c5242d5959deb5b00fdca65b7109c67e9e4b38d5ef2c34ad4c462a1673f83a0e4aab2cb624cab6996c67d73af83d9d3
SSDEEP 1536:lotdLl0q47N/MFIvXuRO79Jz7KZWGeA7HWV7qQOO3n2x:SxofvXuRO7e72VI
TLSH
T18F831ABAB1A174735E13F570802F900FB93B647BE84C0AA8E284DCE16DF65864467F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4252	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134301240880213342"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{1BA23C56-4FD3-4856-834B-DB380C0C655E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
768	msedge.exe
768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 3696 wrote to memory of 4536	3696	msedge.exe	86
PID 3696 wrote to memory of 4252	3696	msedge.exe	87
PID 3696 wrote to memory of 4388	3696	msedge.exe	88
PID 3696 wrote to memory of 4388	3696	msedge.exe	88
PID 3696 wrote to memory of 4388	3696	msedge.exe	88
PID 3696 wrote to memory of 4680	3696	msedge.exe	89
PID 3696 wrote to memory of 4680	3696	msedge.exe	89
PID 3696 wrote to memory of 4636	3696	msedge.exe	90
PID 3696 wrote to memory of 2196	3696	msedge.exe	91
PID 3696 wrote to memory of 4636	3696	msedge.exe	90
PID 3696 wrote to memory of 4636	3696	msedge.exe	90
PID 3696 wrote to memory of 2196	3696	msedge.exe	91
PID 3696 wrote to memory of 2196	3696	msedge.exe	91
PID 3696 wrote to memory of 3964	3696	msedge.exe	93
PID 3696 wrote to memory of 3964	3696	msedge.exe	93
PID 3696 wrote to memory of 3964	3696	msedge.exe	93
PID 3696 wrote to memory of 3404	3696	msedge.exe	94
PID 3696 wrote to memory of 3404	3696	msedge.exe	94
PID 3696 wrote to memory of 3404	3696	msedge.exe	94
PID 3696 wrote to memory of 1252	3696	msedge.exe	98
PID 3696 wrote to memory of 2120	3696	msedge.exe	99
PID 3696 wrote to memory of 1252	3696	msedge.exe	98
PID 3696 wrote to memory of 2120	3696	msedge.exe	99
PID 3696 wrote to memory of 4488	3696	msedge.exe	101
PID 3696 wrote to memory of 4696	3696	msedge.exe	105
PID 3696 wrote to memory of 464	3696	msedge.exe	106
PID 3696 wrote to memory of 4448	3696	msedge.exe	107
PID 3696 wrote to memory of 4788	3696	msedge.exe	115
PID 3696 wrote to memory of 4788	3696	msedge.exe	115
PID 3696 wrote to memory of 4272	3696	msedge.exe	117
PID 3696 wrote to memory of 4272	3696	msedge.exe	117
PID 3696 wrote to memory of 768	3696	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2a9a386d60bdab68b8facca3bae18cf6bc365b99cca2f12e7ad030067ff3b8c1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ffe0732c188,0x7ffe0732c194,0x7ffe0732c1a0
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,5013388588716268798,16797788872782316048,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,6497740874520428678,318286575357561567,262144 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,15446270075274008672,9883254467094504686,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,2785925511827162752,2683103217940354510,2097152 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,10099915792866303688,10201238375815349179,2097152 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,3709048284193246931,2168831617454364995,2097152 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,5740815685188202994,11152323882005238082,2097152 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16381954392224599755,12504196028857753248,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,11258085752057238400,13319204890180193486,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5545930127154117778,208342204119336364,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,5545930127154117778,208342204119336364,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,6510497651297380225,7123143709267869981,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,2840675545450580940,16581856326367968724,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,12286663513947167723,3590868224455512249,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,865959255259624996,8737852848042708560,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,14340447873259906524,8916170960198717646,524288 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5124,i,1829862829167138690,6038154675003380231,262144 --field-trial-handle=2324,i,14909904355629193181,12340828701341829024,262144 --variations-seed-version --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:768

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4120

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bf466b1b5c118c8eec3aca409e373de3fc25f13082b35379f16420df2a668963
MD5 f5321258552048044db441a556baff64
SHA1 d1d0282074708ee93e8f96693bb927a5b097318d
SHA512 05d9c2bbc55e7e7ce5a735ec0a6b31d1bddbabe8c9f431c505ebcd186625d98f86ec64e2f9b7d2ba83f0b1b75048d055a845fef95710aafe580ae3696ec67b74
TLSH
T1D761F8FD176208E1E7694071B0E2064074BC3EDAF53F7E8E535088FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58db19.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58db19.TMP
Size 3KB
SHA256 a5e6e8dfafca92b9b4589405c9e3243e5cde764add0d632e0e5f6fe86d7700a7
MD5 85e2d0f898d4326db4ac506ccc0d84dd
SHA1 71dc07ea14bf95440abff120af7a72d99ab2b8b7
SHA512 4290c456b30ee752f205d941b25d78f77751958f6f992de19d6639d1c48e6e2bc390ff311b3f5c3073201628ee51d68b08595a442bf03cdc326148d1144e1c2c
TLSH
T10461E7FD176208E1E7694071B0E20644747C3EEAF93F7E8E535048FA6616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b701fce192064a78ea975c32f72aa2ab3be9a4b9283718c5606a6da3ea778f50
MD5 b5c03c4643595f392e47314425557677
SHA1 95d69e1b28afb81e1f929c53e9870f65a06216e5
SHA512 052be6e361f7d7c65a4854b51ead3337c0191007c8e9c1cd2262a43836694a3ce6129960336a2e28b8c30e5166df927436de28751835d4c4085126d09cada446
TLSH
T1D531DFF7C3D8866E891152F09B24AE2FCE2D4A0A422C3C56C8E4EF5B63E2475D10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b2913c605500d18ab28b2734da5dc809012b0e73e13a1a93a66bc2c3cab726ef
MD5 33a77e0ce219ee1cf33eb34b10a44494
SHA1 d4c6c1b1ace207fcbe294c3fa7ebbbd448a19942
SHA512 e7c1aa8111cb903c5554374264dcce3c96b05359f0bbc6f8999c10b14ffd2db89dc4e0f8d0e2995af9b0b48050c6c4664d2bc05c5e7d704e38beaa71be55fa67
SSDEEP 192:sxZ1RhyM/jK1Ml8Mk+/f4sDYBpCAIdpd+HW6+WNGY9IKe7+RIgrJ:sxZ17M+/f4sDapG4HbGNS9
TLSH
T1E542F8116A38A977CCDBD209FA45BF53D6F5047292940E44AAFCDA1C04E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ed765fc732d7a2d718b9353188503ac35055edf5fa46774c5b77f43767850992
MD5 182e6665d020d1d200d0d33bf23f2cf3
SHA1 8075339ac79eb5b840438bc8b0a7ab2b4cac696a
SHA512 7d7a12bcbfcd1e83e026a68207a07d15a7aec29bb897b0d234c8d284f88eaab66c05bb1760104625dc3cfeac6f838246865ece75654d878282f0fa6f1f2784b6
SSDEEP 192:sxZ1RhyM/jK1Ml8UQsk+/f4suYBSCAIdpH+HW6+WNGY9ImV7+RIg59J:sxZ17q3+/f4suaSGeHbG0S5
TLSH
T14452E8166A386977CCDBD209FA417F53E6F5147292940E44AAFCDA1C00E7BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ca87102c666f5c0c1e32a84e36b404b6bc59b6a8a7c5f14714b0e562807a35e8
MD5 7d25c614071e9ee4759698453a4bd4c8
SHA1 824ceb9781c355ae7df4df75ba1449271c1807f8
SHA512 6f903f6230c4e12418cfab2d59fe98db70e6c62fe2debb17f494558b1ae2533c58b69e0fae9010e152b0c7a8785667b4a71002af18e13946b8f79a15acd585da
SSDEEP 768:+jcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNNrodg6t:+jcv21wWvu+Z+u1jaeFLeRNmd9
TLSH
T134D20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a1effc916ee5e27286eba8c1dbfb234539fb21a71d3674887f9775e3295a8733
MD5 2ff8b816d55cdc7df1df1378634e46fa
SHA1 f34fd70dab44b83fdc7d9695a15fe02aa5e62075
SHA512 97cbbef94fb7139c444f45afcf11e7dd714743eb4e75ee95eb131cdb4e24e173ed61ad6dd5cda4caae62a5c05c8b2ea9a5a8ee9dcc4949f987e2401ab7c0b322
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+ZsAK9KeujqKYA5:mTVTlU
TLSH
T121913826317F02417D7F684C9399AA6B5A8130677428E42FBFA80061CE67E156DFECCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597584.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597584.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 da425ab4a95b5b4a411cf101238be290f0fee367823710b8fd3cebfe2fdbe14a
MD5 a45e6334f2a6d37a50971d99bb64263b
SHA1 0084bc8545e1e32fdacf50b753926136d248b997
SHA512 490db6b63a66d9bcb6f73e2e7cb73708210a514fc108dd71fa3bb01b1939e5d8eb0fb904e15b9ed13180ded3753e21cd406ceaa05f63275700957e485f24ab25
SSDEEP 384:7ZcIhsNdUT6SgOQziPquue+CMdceCBS+2XRnTKwBODNZOCoKDo:jhMROcbSklCclXRnewBKZO73
TLSH
T1B2928C316C385C779EE6A505F80335038EF89073F6D53BA4A6FDAB1C01EA6A8130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 d19bae3b2dbb8c8101cf91c83e77534568067c83556671b19f8f7298191629ef
MD5 43e4870fcc7668119ea0725f18176c90
SHA1 60aa86db085838a89f0d08d871d496bc670feb54
SHA512 17b6a8439b430e781e492501866ec52845cfaad6a19cbf1152f3dbc388d42d8f124675fd92addb2eda61944842f1479ff0e43350f851a8456bd961e33312f7e7
SSDEEP 384:viFiZcILUzsNO8TUNTUlIle6SgOQziPquue+CMdceCBS+2oRnTKwBODNZOCoKDo:6FQ8LwgBROcbSklCcloRnewBKZO73
TLSH
T100A26D725C688D7BAEE6AA45F90731038EF850B3E5D53AA4E7EDAE1C00EB1981307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6814adc1614a80a27fbb2ecea639c031cc01252a8227c5c95430d9b94fac5145
MD5 6c74f3848b1ad10244ae4c86304c922d
SHA1 61f669bbb4fccb122b07df00bb0969fbaa485bc5
SHA512 8e71f5a025b4c152a4768504ef084544691584e90cb8b59c706ad5ff1739c6cc8ff69b5739f417b77e87589190812f01581774a7f792d836d19a4033fc559965
SSDEEP 192:JONU6v+YLNQmiUye3Zh+CGy+FdeL9oCXusvfU6:JONU6vz/bZh+CMdceCD3U6
TLSH
T18802C8356D382C6B9FF2AE45F5873A235FA82177E9952F84D9E81B0C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 007638137b88130c3a307a59de872de711e1e8cba374c2fd72933a7095a3734e
MD5 c034a88170a16bcb66b8b63624aa8561
SHA1 3fc3f289c2138e2952f2f1698ef8dfcd9c72ef73
SHA512 332092ec56f7fc8698d4df500a68df5f2abced27c2a9e36b0c79c88dc988782066799794637fe3eea924501a5852a8bfadad74ab9e265810671948d6593e3387
SSDEEP 384:wZcIhsNdUe6SgOQziPquue+CMdceCBS+2XRnTKwBODNZOCoKDo:OhlROcbSklCclXRnewBKZO73
TLSH
T1A8928C716C385C679EE6A545F90335039EF89073F6D53BA4A6FDAB1C00EA6A8130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c82330df0e106f86bf44fb72cd8c876f20fb2857df06b0351f0990b391fc30b7
MD5 391a1366f48648c432010d4bd8821d9c
SHA1 fb523646baa3c62b02b89caf72834a847de2c17c
SHA512 80d729918997852d20f949470071343e55bc35c404459a872a3fbc2ecb3296820e8035514d9e856aa4c152ce791caa78859bdfe4387ab6abfc3aec0ad0d59192
SSDEEP 192:dONP6v+YLQQmiUyb3hh+CGy+FdeL9oCd1FS+2rCHUq3U6:dONP6vz00hh+CMdceCBS+24RU6
TLSH
T169122B35A8385C6B9EE2A545F48335135EA85167EECA3F90D5EC6F0C02EF6AC134B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71f76b1d-8a31-459c-8bf9-917c9e9e7c0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\71f76b1d-8a31-459c-8bf9-917c9e9e7c0c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0859136628f99d785fb7e59d058d05b8671acc9641d190c2c71b42e4c60e53ce
MD5 6df3ae6671c0bfbe809224af1afa49fe
SHA1 037d63b8f2ba2a3f58c44ffd9e557ff8ef2781a1
SHA512 c21b5af0ba910bcfe7d585cd7716f88694b104004babe3c276fa40b970d00186bc6692e22f2accf443b97a291ac036b0f4b2c8968efed42c0b37294428bdfa73
TLSH
T1A741D699A6E91148B3B77E56AFF6A9AD487EB8333F07D59D10110E4F0A22B40C971733
MD5 SHA1 SHA512 TLSH

Submit Download