4e71fbaa8187dff917d458e38f3de350c53c6bfc5515364c279ddf1c690181ac

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130274088.html
Size 38KB
Sample260825-gzmp8seq4t
SHA256 4e71fbaa8187dff917d458e38f3de350c53c6bfc5515364c279ddf1c690181ac
MD5 a1e110e9d60f3b21476a6143fbb2d888
SHA1 3d43eabf5e8e7965093b0694e70f4f36c13d1474
SHA512 a0d2c18950ddcc2e56baab0c5edb39bf2f547b33a260d88c660b1c5d76684a5465994d8dec3bf99bcd1ea58efc5d8e5a61521f317f0e908b9c079d77da6dd552
SSDEEP 768:c006reqSUcDHdfoHUJ+UgvdP3BxrTGyWqzM104winN435998Bg4ZmCDNF1wf4eIK:c0VqHUMHdwHUsUgv9PXBNHiY1VNmk
TLSH
T1D60321D076C2E41716CD5E73BF0EBDE9D02A9C6764C4B24782A4B68D28BD117C5A4CF8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3260	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321120861421523"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{EAD4020E-24FF-4FF1-BBC3-D2E52A2908AF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5060	msedge.exe
5060	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 408 wrote to memory of 4572	408	msedge.exe	86
PID 408 wrote to memory of 3260	408	msedge.exe	87
PID 408 wrote to memory of 2876	408	msedge.exe	88
PID 408 wrote to memory of 2876	408	msedge.exe	88
PID 408 wrote to memory of 2876	408	msedge.exe	88
PID 408 wrote to memory of 528	408	msedge.exe	90
PID 408 wrote to memory of 528	408	msedge.exe	90
PID 408 wrote to memory of 4308	408	msedge.exe	91
PID 408 wrote to memory of 4308	408	msedge.exe	91
PID 408 wrote to memory of 4308	408	msedge.exe	91
PID 408 wrote to memory of 892	408	msedge.exe	92
PID 408 wrote to memory of 892	408	msedge.exe	92
PID 408 wrote to memory of 892	408	msedge.exe	92
PID 408 wrote to memory of 5048	408	msedge.exe	93
PID 408 wrote to memory of 3420	408	msedge.exe	94
PID 408 wrote to memory of 5048	408	msedge.exe	93
PID 408 wrote to memory of 5048	408	msedge.exe	93
PID 408 wrote to memory of 3420	408	msedge.exe	94
PID 408 wrote to memory of 3420	408	msedge.exe	94
PID 408 wrote to memory of 3104	408	msedge.exe	97
PID 408 wrote to memory of 3104	408	msedge.exe	97
PID 408 wrote to memory of 2308	408	msedge.exe	98
PID 408 wrote to memory of 2308	408	msedge.exe	98
PID 408 wrote to memory of 1812	408	msedge.exe	100
PID 408 wrote to memory of 4448	408	msedge.exe	108
PID 408 wrote to memory of 4176	408	msedge.exe	109
PID 408 wrote to memory of 5052	408	msedge.exe	110
PID 408 wrote to memory of 2960	408	msedge.exe	115
PID 408 wrote to memory of 2960	408	msedge.exe	115
PID 408 wrote to memory of 740	408	msedge.exe	121
PID 408 wrote to memory of 740	408	msedge.exe	121
PID 408 wrote to memory of 5060	408	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130274088.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe07abc188,0x7ffe07abc194,0x7ffe07abc1a0
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1728,i,7513078037568220743,5364955436800574639,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,1597155617825218949,12692293178026921180,262144 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,1496516668656412323,14761365669133144855,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,10985772801227343043,10602814236890216960,2097152 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,13484476208225585752,9495575367021706043,2097152 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,6290314396125718643,11129211665993995694,2097152 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,14286225265131774260,2356061827707697103,2097152 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,13542951234242209584,11805974156380681092,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,13972129814434920164,10650603438169114602,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,750846381040588472,8204995028735638933,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,750846381040588472,8204995028735638933,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5972,i,11513339942455566658,12105247493095143740,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,1471211058825080403,2754479946290565768,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,1085101029422745165,18442180305744434145,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,10916500387433528865,13665308799893654078,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,6734030419577055814,4419428183357164652,524288 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,14723393599273517876,8200474830017365562,262144 --field-trial-handle=2236,i,15020728718321094548,3445642406734290011,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5060

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6c9494dbeb303ccbc2b9b8fc95fd232963089bcfbdc8d93e1d9fa19338a544fb
MD5 cf9c3a7f12218c4a1e9d9eb9c6bafa80
SHA1 3aadaab0b2c921498d3011ac257b910d9bf6e807
SHA512 4856ccd03e1a5e09b333dac98be4bb4e565c6c13a53fa7f58951ec8f83f5ef4b3050abfbf24608df43ba692e74098f2535d950aa36bd1838de6992e53396e38c
TLSH
T15761E8FD176248E1E7694071B0E20640747C3EDAF53F7E8E536048F66616F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58dc22.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dc22.TMP
Size 3KB
SHA256 28a3d72a079df2f8192d76f557cb34be880cf750cd655507377a478e900ba328
MD5 3091e390ea4e19b733c5d97320c94bca
SHA1 04fadc210b04f7c2abc670a90d2e106a74edcc44
SHA512 b38432e11f660b5529cc27ed148f36086677d785fc7b03619eadc3f18ccac408a0238cb594a4c8059afab7192317bd90f8cde0a8a6a613f187a85efe06c70ca3
TLSH
T1496108FC176208E1E3694071B0E20644747C3EEAF63F7E8E535048FA6606F668F5928C
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 90c94e9d6e91261d165cfc82d62e3855d5f885d43431fc6224e8d9f7c3188e5b
MD5 79c092d1bc9fb556724a7293661cc275
SHA1 075990f75440295cc1c5320f2bf2090f2e3797d9
SHA512 34a260a1f0f9b0aa25d35ebb805219fd551b3c90367c3c277dcf497840a65cea3177bf0b76983c659d23eebcb9be4923c7c3821b0102f2b4922fe8e5a0f12951
TLSH
T15511BDF3C3D5856E890116F0AA28AE2BCE2D0602421C3C1989D4EF2B93E3075D00199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 59e1f2c659af02b49f1128c0a6140a66bbcceee78275a196241aac0fcf06eba9
MD5 e4c205b495b6d8eec060a0cf976ca561
SHA1 7456219dd1b106f108fdac2430da341a606377b8
SHA512 6eaf76d936b2cad0add3dca930f7e5bb8f2ba385c24e731168ba398fcaeba6983cb63e5c271626da253cb5adef9c52cf44b8679f0de4ad6d4b96a7f1d729b4b9
SSDEEP 192:sxZmRyyM/jK1Ml8MkO/f+sThUdQIdpdxHW6+WNGY9IKFN3IgrJ:sxZmEMO/f+sThU33HbGK9
TLSH
T13042F902AA34A97BCCDBD209FA55BF53D5F4057292900E54AAFCCA1C05E6FED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e197b4e563c5fbbddc82f7578f2bb6f9ce1f5012b6a01963af40e3bb4cc3753f
MD5 93d1ff494370e685645b88440fa9a456
SHA1 72122702f5a02d702e09696c329e8ef7e25027c0
SHA512 ecd80a5597d98229b6327584af559697dfb4272e36c7a81b8bd9e86ede308e799a2676ffe6fac2ed0ed7638cc925ad095841b94429b8b56cd6c463dedfb020bb
SSDEEP 192:sxZmRyyM/jK1Ml8MkO/f+s6h3dQIdpdxHW6+WNGY9IZTN3Ig5PJ:sxZm0MO/f+s6h333HbGLP
TLSH
T1A9520A12AA34697BCCDBD209FA41BF53D6F4057292500E54AAFCCA1C05E6FED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2b71a7c93b33cc645a12862ede0bf5109f25401b1f5509544066332d758a8493
MD5 fe6f52172068b5fd4affba3173240553
SHA1 d8b6c93eca4a836f48816f6b10674f7e3d5a6e40
SHA512 c892bd35f6be36ab7d063252cf620cd964f76c1fc4958b45f5300d9dd5f17da4127cf54f8572894afddaf21c10b796d54d8fffde6324b5312ed3ed1065c92c27
SSDEEP 192:sxZmRyyM/jK1Ml8UQJkO/f+s6h3dQIdpHxHW6+WNGY9IioN3Ig5PJ:sxZm0qKO/f+s6h33RHbGrP
TLSH
T12652FA12AA34A97BCCDBD209FA51BF53E5F4547292500E44AAFCCA1C05E6FED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d92edefccaa657c0db82eec85970aba256cbe23d66faca952c65e3da4d820f3a
MD5 270c270c008feffceac22f7449c2f88f
SHA1 50edeee60128179eb3df4874d23a3f89f8d3a56e
SHA512 6a8c9842dcff6ba9896bb6acaf946effe229c82aadc24b46b4829cf14938db3f7ffdfe745c538b3a8bd0b276495dad17fdd5b3a83dd8a6459276ed50bfcf1385
SSDEEP 768:4Zcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNJroKg65:4Zcv21wWvu+Z+u1jaeFLeRNiKp
TLSH
T11FD21B2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6abc0f68a4c4fa065fa71933878f800e6d7b94a5732df9eef60714335ef6adba
MD5 77fc694beebc79eee8a27746f2485b38
SHA1 b9aae720a6d7786a21da875cd2dfafb68bb5e681
SHA512 a4ffe2bc2a25dddd60025d88b483aadfd394c5b7ca8b82f81d615f6d2a21c6d89d3f4cc474b98989938e938bc5588131ada179f65beb04511c295f94356d8b89
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+t7GKIECCO4K3q+:mTfVPV
TLSH
T1B091912131BB52523CBF690C96D595A62E8270A37428E57F7BB800E14F67E241EFD9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5979f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5979f9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8b29483b6288d3e227177073f538982b07e6408dafe6fae1fc5e051db6611d25
MD5 32eb659a4e118aa7978bdfbd808a2c4a
SHA1 f425e683ce67147cd62ce6af9f7fe44645fbf830
SHA512 3175b92a1101cc4eff896e377f4daaa12e75dd5ea9ece08e53c3c95b6ebf96a2571aec4dc9f60808554a1f131a057cbf9031dbde72b6a8dab4727b17323233a9
SSDEEP 384:RZcIhsNpiK/ziL7be+CMdceCBS+2xaivd+arot:5hmmqklCclxaillr6
TLSH
T107829D319C381C7A59E6E141F94735176FB890639AC93F9094EDEF1C02EE6E91307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 8486c63c98c5f05cb98d194e29bb021c5c0a1a26257bcdeb2923351d23f1cb2e
MD5 4f66f97e583219ec3fcac8c8b7cd9550
SHA1 bc43e71d00dc687b82d7a131b0591fc33858270a
SHA512 47d24d41fe1dec5af7c9130e5900ab6e54f77c0038f6d29c5c0e9d225be501a07242e87a43e65ad05a8ce6994354a85df4a0130c4d1da16e4351b463c59a07bb
SSDEEP 384:aiFiZcI5sNL8TUNTUlIlTK/ziL7be+CMdceCBS+2oaivd+arot:RFQ5ewgwmqklCcloaillr6
TLSH
T1EDA27D329C64987B6EE6D640FA4A35179FB45063CAC97A90E6DDDF1C02AB2DC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1dbed0b0562a47d00fffdc72fc6e851f68a307f0550af21175642b1f1ecca46b
MD5 d727b12e61c3dd9d14b0c7e7a9175f74
SHA1 063647c998416ac044f99e083656c58ebe596a4d
SHA512 da630afca557bbcf2a058651e4231f5e4a4570cd4c18e68feddbe415b9a2b0f725ebc5ade3af4637d3dc0689fad8bac71c55593799f23ff1ffcdd4559f702004
SSDEEP 384:5ZcIhsNpTK/ziL7be+CMdceCBS+2xaivd+arot:RhJmqklCclxaillr6
TLSH
T151829D319C381C3659E6E101F94735176FB890639ACD3F9094EDEF1C02EE6D91307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 977aa3a9200e7f7da675381a00e430e9f39debdcfb38567029215cff68e32822
MD5 8b30f474a504b2ddb9c5fabb33544357
SHA1 3dd760aa46466dbf4017cabb7df98e055427e8d3
SHA512 9a2dcda1296871eb300e51bc8d7ffb4264e6e2bdba5eeaacb8df88629ced264d1f2f7e1cdde15e58d264d285b43da5600c8aebc08c6ef02c55c4c17aa7148ac8
SSDEEP 192:JONU6v+YLNQmiUyKxZh+CGy+FdeL9oCXuskfU6:JONU6vz/ZZh+CMdceCDKU6
TLSH
T1D102E9356D382C7B9FF2AE45F5873A275FA82177E9912F84D9E81F0C01D769C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6fb0431341676b963473c6d1e50393fdfcd8148303c397a82524f9b495ef9a13
MD5 8c8cd6a46823af67e564454c2e8bfb71
SHA1 f28e27dad8504cdaeced635e45efb9e5b4b5e56c
SHA512 9e803ecd0cdc58096f97f57d3448ea6633dfa9d1da7f0ca777110a85d875822ffcc621cf2fea6ff1069aaf1c769415d5fe98517c8c69c276603f2bb96dbb0578
SSDEEP 192:1ON86v+YLQQmiUyMx5h+CGy+FdeL9oCd1FS+26CH/q9U6:1ON86vzkl5h+CMdceCBS+2jaU6
TLSH
T163122D35A8346C7B5EE26545F48335135FA49167EECA3F90D5EC6F0C02EF6AC234A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 422eadcc77b145b85151f8f87b16ef825ef0de70df290aa5ff287d767eb893d7
MD5 d61cb0d205cffa833d43f627c0a0bc6e
SHA1 be70ffa1e123b66e472eeb99eff3504d2981c009
SHA512 0b5280c0dbb5371b416f0efa7c115d0421f51bfb0963bd5e7f7df6ece40e1ca9e64579541faddf99909d6fabd64f26cbdefe18f24ee80c545d252a74d7d67c55
TLSH
T107411458B6E91148B7B73E5AAFF3A86E487EB8732F06C45D10110E4E0A67B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download