8d4ff2478e0807cf1504795c532b06772be58c0ae55414f4d59cbd19e8dd6a7f

Analysis

user interaction
yes
max time kernel
149s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
project #2/index.html
Size 4KB
Sample260812-2etchawcrf
SHA256 8d4ff2478e0807cf1504795c532b06772be58c0ae55414f4d59cbd19e8dd6a7f
MD5 69dbfab4ade03bc4f22078778e8083d8
SHA1 b9162abbacd4ea729b1e88f1b6cb61a64c063b36
SHA512 07a38e3acfe80546c03c18f5e6a58278ad51bb0775c67149d3eadc009d8b8a9e51fa782072739912b4a6a776309e1a099d835bb62e9b5927986ee09c007f1e4b
SSDEEP 48:tNTavUVqLdViQIqHmadTUzaaAk3gbrkYKR8VBjQEQjkHUKI/sf:D0jHIqHmaOzaaAcurkYKR8VBjQE2kHyy
TLSH
T19C91CC7160C4AE2A81F381D6DAA18B97FFA68107C74A919436FD13DB2FF3C80C847A45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134310474219212253"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{4C321625-8644-4B77-B147-EA7596F7908A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe
740	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 740 wrote to memory of 5032	740	msedge.exe	88
PID 740 wrote to memory of 2064	740	msedge.exe	89
PID 740 wrote to memory of 4812	740	msedge.exe	90
PID 740 wrote to memory of 4812	740	msedge.exe	90
PID 740 wrote to memory of 4812	740	msedge.exe	90
PID 740 wrote to memory of 3976	740	msedge.exe	91
PID 740 wrote to memory of 3976	740	msedge.exe	91
PID 740 wrote to memory of 2044	740	msedge.exe	92
PID 740 wrote to memory of 3364	740	msedge.exe	93
PID 740 wrote to memory of 3364	740	msedge.exe	93
PID 740 wrote to memory of 3364	740	msedge.exe	93
PID 740 wrote to memory of 2044	740	msedge.exe	92
PID 740 wrote to memory of 2044	740	msedge.exe	92
PID 740 wrote to memory of 3936	740	msedge.exe	95
PID 740 wrote to memory of 3308	740	msedge.exe	96
PID 740 wrote to memory of 3936	740	msedge.exe	95
PID 740 wrote to memory of 3936	740	msedge.exe	95
PID 740 wrote to memory of 3308	740	msedge.exe	96
PID 740 wrote to memory of 3308	740	msedge.exe	96
PID 740 wrote to memory of 1156	740	msedge.exe	100
PID 740 wrote to memory of 3524	740	msedge.exe	101
PID 740 wrote to memory of 1156	740	msedge.exe	100
PID 740 wrote to memory of 3524	740	msedge.exe	101
PID 740 wrote to memory of 4500	740	msedge.exe	103
PID 740 wrote to memory of 4292	740	msedge.exe	111
PID 740 wrote to memory of 3492	740	msedge.exe	112
PID 740 wrote to memory of 1796	740	msedge.exe	113
PID 740 wrote to memory of 4012	740	msedge.exe	114
PID 740 wrote to memory of 4012	740	msedge.exe	114
PID 740 wrote to memory of 752	740	msedge.exe	115
PID 740 wrote to memory of 752	740	msedge.exe	115
PID 740 wrote to memory of 1156	740	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\project #2\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbf87ec188,0x7ffbf87ec194,0x7ffbf87ec1a0
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,6744819201007938974,13946075176420183453,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,79266678628944494,5752947540400531978,262144 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,11053897384480798653,17012005680553899719,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,8978932199430785742,7024404314005567216,2097152 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,17267771680281498859,3763372693775223345,2097152 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,1820879260217760312,13513270152283915020,2097152 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,4377364863455285334,301500235581315996,2097152 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,10600467375231726978,7839601641794793345,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,13384456866728525765,4467685569263667775,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,12477520301926615835,4427537116655015052,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,12477520301926615835,4427537116655015052,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,4452065823541493777,9401696745619566834,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,14987859195505056171,7402201062410552843,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,17129075458825201963,10355092383769415073,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,14298009546917644595,17097388251693315913,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,8703081372137464502,15327339334890237537,524288 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1836,i,213632761797695118,15698839372786218562,262144 --field-trial-handle=2192,i,1236957153528471968,3795334061061077490,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1156

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f6bcdb1db61220ddf0f8a77e5fe55a16fa2aba55781da85ad842779878b62041
MD5 001b75d998b59d2bccaa0e8b83243a6b
SHA1 c3c9a0535dc4029f23f9e1b600cbd271c3b22ed6
SHA512 2efb2535254bce8ebdab7a9ecc2e3f91810dabd71b017abc1aa0edc86685cd12ba453dc2129df9d5a9e94545dde437610db0bf2252387fe96d6a4a786eb2fea8
TLSH
T16771D93D044E4469D3AA03F364F217167D71BBDBF5D32E957194AAF028053D68E4F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588e8f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588e8f.TMP
Size 3KB
SHA256 afd9f1f80b3dc6ba2c8041037a9b4300113e12a273499335cd4a302e47b8b57c
MD5 3cee2131c20e61486faf07522fe17e34
SHA1 60862de5536c1a813b0f4fba0aa737a87f52956d
SHA512 3f0b97b33e0db16d6619e6fdfefe3fd40c0fc34203c7686d80d6db67da74e0766d778b21f62f970e36d893181ceb9e6d0f79b8d5964729c9c5254630ba897b96
TLSH
T16D71D83D040E4469D3AA03F364F113167D71BBEBF5D32EA571949AF028013D68E0F1A8
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2c0fe19201b48487be7172b02efd5b245658af50767364724a52236aa57b97bf
MD5 d215b847a58c831a820e327236a1fddd
SHA1 993d184999612d373a8de6aae891461083151b9e
SHA512 7c91c66a720e72d82753625b9f94dfe91640911e26a86ac08dde6612c2119c3b067e71ab3d5566ef88ca1f4a3ea907ac352f3cf77b720c7923615c833237b2dd
TLSH
T144115BF3C3D5856E891157F05A24AE1BDE1D0606822C7C19C9D4EF2793E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 49fd1faab2f3d581cd848f4cd8b35c72150903f8fbb3ca2d96d7d009cb51abc0
MD5 6dbc9b51c7f2e54ccf8dd90a2d31dd71
SHA1 48c3bd34ae34242a47411c368a136348470df307
SHA512 f40d67e5ee11932c494da2b04a10186465c15e6d04c7ad75142fa6da55602d5ae3070bc49a293814668fdfe4f5df2e9711f096d2bbfc03f3b63af37436467a05
SSDEEP 192:sxZNRCko/fCsW1SLxhIdpdFHW6+WNGYzQDr+/IgrJ:sxZN/o/fCsW1g0PHbGjs9
TLSH
T12122B8526E28A43B8CC7E209BB557F53D7F95432A1D51E48EAFC951C05EBACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1e742b2e40a058bdbaf5800b6ee958f6961f041a188cb039f4f518ffdfdf90c6
MD5 ed05c0b7af8ee80bffb667187c691dd9
SHA1 74b6f9a96b0c5105b05f662016f33f03c716543f
SHA512 fce5893393d2dac09085678928bcadf3c2681c7345a24ec6091fbc109f88340dd942e384a14212cc9a1476c8c8102e182ac9f99e9da4400f2da02b75d0c5d08a
SSDEEP 192:sxZNRCko/fCso1SLxhIdpdFHW6+WNGYzQDr+/Ig5HJ:sxZN/o/fCso1g0PHbGjsT
TLSH
T16122B8526E28A43B8CC7E209BB55BF53D7F95432A1D51E48EAFC961C05EBACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f5ceed2437fbe024d514015ee574d749d526d7d11ab3ac2f10c6b0e16848306
MD5 2e46656d87b393c325546e8102c6511a
SHA1 e1af076eb78011cadc7bd2a5bee917fc3e2d6954
SHA512 3be458705f3ad57019895795428d946d1e7ec3554643249b93e5bd00f127db32af9dc46107f6dcb0cdcf73d5cf5933b1a506483acd5da734272f999743a748ca
SSDEEP 192:sxZNRCko/fCso1YLxhIdpdFHW6+WNGYzERr+/Ig5VJ:sxZN/o/fCso1W0PHbG5sF
TLSH
T11E22C8526E28A57B8CC7E209BB557F53E7F9543290951E48EAFC861C05EBACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 16eb03c8a0344d236843a17acae7270bf92fb8436226f758a225bf6c9a8f10c2
MD5 d6161ef54fa8d09d84f0c96918bf6603
SHA1 e7faee1befac17eb419412f0ef415c201ecf84be
SHA512 e28f718ad5752c27a895bfae68d9e60b2a8a370d0150b6dac7253a9509f8916354576ece3f33f5804b9f54b1a244a0d011810795f98958c05bcd09405f8591f3
SSDEEP 768:+SZk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBSCroyAYJq:+SZk7u70WvqiEau1jai5LA3BSZ+Jq
TLSH
T1F5C2E93B740CCB7E4F801E9DAC566F977E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0e5bc4673eaceaea2cbc38578d06e545ce9d4df4d5b370ad911854f1e72589fe
MD5 0abcdf1c9b97a2c9c36005f2c858ef6e
SHA1 c73845cf450e4c5f388c486cbba9f6559b900569
SHA512 e019d047ed510bf6112e6ff9198e008a5c8dc8c02b646d7a21321f01174ccc0c561150fccacd97839aaa5eb00c05b71a2302e1e71b543b58aff4d8eac2837a28
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTfTINKIsgPydzIRKQQ0TyNXINKe:KIbCKcfTWKIsSmzKKQQyeXqKe
TLSH
T1D1917206757A0A513D7F785C92A9863B8F4231633428AC6F7FE810614EAAE500DFD8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dba6934f-e476-4de1-bf59-e0c6f1a50fdd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dba6934f-e476-4de1-bf59-e0c6f1a50fdd.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592a62.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592a62.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a990e077a5858bff451374336102928d650df63987ced10fea0eed5175a51db5
MD5 fac070d1b650f37f14377666a2d14e42
SHA1 2b5cad7eed1057c0c9d38c59c07a6a69be2d42a1
SHA512 373aec145a4b8995dd91039eae68a28a380e1240fad5d6483488467808f2ce88244c2e490a379628b7f9243b4bcba6b071f486ee992ba44a1add9a9526da6f61
SSDEEP 384:rZcIhsN/UbTuO83bPcPQd0mEM+ZMsRnlY2n:zhTwookM+Zhn22n
TLSH
T165927E329C742D275DE7B143F4C63B035FF8942BA6C96F44AAEDA71C01DE6A8131AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f90946c3f91ecf8a20a481383ac512f8f99e8f0b5e0eebdf964c4b5d930d1397
MD5 d5f395a6229d8e79041059ea271267d6
SHA1 e614ccf68986b5b30b5f2e914b00d6d96f2f1128
SHA512 a8c6d85e5afd20df2c47efc4c7f64be85ee21e69d7cb617fba5ba552ee8c54823d679674de311d9a16f0e2b95c65225771b59bc7dcd6241d6d03309347a422ae
SSDEEP 192:MONf64BAQmiUyH16W5GBPKcl+FdGuom1baDl5U6:MONf6eA8wWzd0mSzU6
TLSH
T17D02EA34AC796C7B9EB2BE45F5863B175FD8112BA6D45F44EAE81B1C00E724C234682A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4a958b0000625c60f79ba7edf4737c16c1bca307f3ac87291ae32cefa22a9938
MD5 2aee727c8344a5927e805b5254ed396c
SHA1 2dee00132fdd8d449f71687644c4162e5af98e68
SHA512 1070de6828cb771d0a6e43852fa0839f4a65ab6c5176bd409f12620072c44455e90329b388ae246c9e7fdab6e1c325fff5aefe26230297492d5250ec1e7ef339
SSDEEP 384:oZcIhsN/UOTuO83bPcPQd0mEM+ZMsRnlY2n:WhGwookM+Zhn22n
TLSH
T15F928E329C742D275DE7B143F4C63B035FF8942BA6C96F44AAEDA71C01DE6A8130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 c3babfbb6401e03442d88869e65c2107311b3b3f971dfe74fc89c3d3449c64a5
MD5 88a13954f76d8629319c2e2000cd99d8
SHA1 ec33fb3df60d93c3fa4a112592da2d2599701c97
SHA512 13ef249a0bce0170eeadbf77f44aab00209dee82b35fa8105549b92c838bc8e64537af8c46e797dbaa61c1f2ea4ece9a553ab60c64a242dad7a8996468fcbe00
SSDEEP 384:YiFiZcIosN08TUNTUlIlOTuO83bPcPQd0mEM9ZMsRnlY2n:jFQo1wgMwookM9Zhn22n
TLSH
T1BBA26C738CB4993B6DB7AA42F58A37039FF4806BD5C5AE94F7DCAA1C019B1D8130AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 16665b4cf82695986f41f06eb6b26e4ce48587785171093c984c551e2f03678c
MD5 ab051bcb0d412dd55b741f934eed72ee
SHA1 598e8c20c6fa7e220572cf5117e12be21988693c
SHA512 4c6112f29e4793cee4fe1e9b512121892bfcbaf76812cf3aa4edbdd8b9492bacb7d15461b005c7b44ee2332d63661e6750806f5198bd8787453583e107374e23
SSDEEP 192:wONF64BOQmiUy16N5GBPKcl+FdGuom1YKEM6WwXqaU6:wONF6eKBNzd0mEM4ZU6
TLSH
T10C120A316C74AC6B5E92B545F4C73B035FE8412BEA896F44E7DC2B1C05EF69C230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b8c5ae1-3eae-451b-b949-0e48ab83db6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9b8c5ae1-3eae-451b-b949-0e48ab83db6e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dfe2c35b4b7986707b7f0b9652ab656258b068a4b6224ddba44d54abc9b953a7
MD5 4017480bfeb616463ff4030a63ec3fad
SHA1 5f03276b7a6e15d8dd1578c161c5cac61cf7cff7
SHA512 fdfc0d7f93c3ae15c8f5fc005663a098d7bf78c72c2db11ac129c733d92ac11e998bc6b0381d3431047d39034763e71fef2004ef36182600a4e59ee7fff88fa0
TLSH
T1AF411A58AAEA1104F3F76E5A9BF6A86D487FB9372E06D55E00010E4F0663B40CC71B37
MD5 SHA1 SHA512 TLSH

Submit Download