5579a55fec8f6e5c189d1bd2597a7fc247ac60df3212816f4428258988a46121

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 11KB
Sample260907-wzt7msshkd
SHA256 5579a55fec8f6e5c189d1bd2597a7fc247ac60df3212816f4428258988a46121
MD5 88d9c023971f6e242ac0e0a5549d95ea
SHA1 d0055853d6eed964fabb06454e93eb10d4cb16ec
SHA512 ee30677cccc8b4cbeeb1efa5c245389c1eef19826a11037a2589d066b874ba95da86f0426e7d6c7f85a1795dd747df671ff86839f4b6ede76ba317cf17b24143
SSDEEP 192:eippPhvsc6ZOureAPgcX6uSFFuSFhFIuSFiJFY+hC3rmLKiUVWn9pTYo5M9Ta0T2:egvsxZOureAItuSFFuSFhFIuSFQK74Ky
TLSH
T17E32956A58F304475297B0663BEBA30A32309003950ADD1D3F9C8694DFDBAC69D77B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5040	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332789276645726"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{A0429719-E00E-490B-8E42-F80FF0E51014}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe
3548	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3548 wrote to memory of 1856	3548	msedge.exe	86
PID 3548 wrote to memory of 5040	3548	msedge.exe	87
PID 3548 wrote to memory of 2308	3548	msedge.exe	88
PID 3548 wrote to memory of 2308	3548	msedge.exe	88
PID 3548 wrote to memory of 2308	3548	msedge.exe	88
PID 3548 wrote to memory of 2304	3548	msedge.exe	89
PID 3548 wrote to memory of 2304	3548	msedge.exe	89
PID 3548 wrote to memory of 3792	3548	msedge.exe	91
PID 3548 wrote to memory of 3792	3548	msedge.exe	91
PID 3548 wrote to memory of 3792	3548	msedge.exe	91
PID 3548 wrote to memory of 4988	3548	msedge.exe	92
PID 3548 wrote to memory of 4988	3548	msedge.exe	92
PID 3548 wrote to memory of 4988	3548	msedge.exe	92
PID 3548 wrote to memory of 2428	3548	msedge.exe	93
PID 3548 wrote to memory of 5068	3548	msedge.exe	94
PID 3548 wrote to memory of 2428	3548	msedge.exe	93
PID 3548 wrote to memory of 2428	3548	msedge.exe	93
PID 3548 wrote to memory of 5068	3548	msedge.exe	94
PID 3548 wrote to memory of 5068	3548	msedge.exe	94
PID 3548 wrote to memory of 4176	3548	msedge.exe	99
PID 3548 wrote to memory of 4176	3548	msedge.exe	99
PID 3548 wrote to memory of 4956	3548	msedge.exe	98
PID 3548 wrote to memory of 4956	3548	msedge.exe	98
PID 3548 wrote to memory of 3936	3548	msedge.exe	101
PID 3548 wrote to memory of 4536	3548	msedge.exe	106
PID 3548 wrote to memory of 2328	3548	msedge.exe	107
PID 3548 wrote to memory of 560	3548	msedge.exe	108
PID 3548 wrote to memory of 344	3548	msedge.exe	112
PID 3548 wrote to memory of 344	3548	msedge.exe	112
PID 3548 wrote to memory of 4120	3548	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa3985c188,0x7ffa3985c194,0x7ffa3985c1a0
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,8269688347491828626,1948150510641830136,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1912,i,367162051322821894,13304714008837445016,262144 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,14875394949969044441,15940664368429596844,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,13154876687094906545,8155314681375841727,2097152 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,6592815444777851496,10083846076644172172,2097152 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,17346058891916156573,9594879051824392706,2097152 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,7842590561077258985,9473394776568335230,2097152 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,15842631755432689550,17016272343313036812,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3916,i,12041623250858824322,6446918492194565889,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,8172862753501234734,3937479555186776668,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,8172862753501234734,3937479555186776668,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,3484629409590398257,10727551525528610087,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,7233166277044506039,13923071573154815020,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,11520815124127827015,4456465862464368180,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,2016573765405251201,16999507259482860672,524288 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6124,i,11798093817655625242,8917624986819584492,262144 --field-trial-handle=2304,i,2775149606629687890,5655808395689724901,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4120

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

2d7b3536-2159-45d9-a80f-104ff2e3c17a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d7b3536-2159-45d9-a80f-104ff2e3c17a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c94594e023ebe782daf682edaa2449ec661f5f9c0e3c1815632277c471cd6c3d
MD5 795700106271276404519fc02c55736b
SHA1 68511c0356a66e36c2a08b94104090ee8bb445ec
SHA512 5b9bfa11545a8827619943132ebc5dea0af3e222816a3ec53c579a90892d5efd090dd1a369921a512ce4bc976fc553e53a9e350156bddffb7061e48fc0353dc0
TLSH
T13B714E3701C940D2D792013A64F26284F8BE82EAF53FDF5510F7AA7E4B93711815A17B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b31e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b31e.TMP
Size 3KB
SHA256 45b912a4f8974c79e4d3d9e9bb3afeb5a8f216cfd54e71a8d301fc05c3fb0302
MD5 aa416187db9d02940d7dd49992ee6be5
SHA1 a5394f6e893426236a539f06b385d5052367bda2
SHA512 d91915cd98e5b63344264e3ff295916e5701a1810ee17556970c4ba1e72e253a9c621a1c72d9d73b847b684cefd3a0b2ce94616701d193a542fc86a9b3780175
TLSH
T18D714D3701C940C2D786013A94F26284F8BD82EAF53FDF5110F76A7E4B93711815A17B
MD5 SHA1 SHA512 TLSH

Submit Download

2e692e51-2163-4f50-a091-a99f54c45a20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2e692e51-2163-4f50-a091-a99f54c45a20.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 98498d66d888ee758296492253a619270c152eb5c1e2e3bf08a87d0514c6d9e5
MD5 1988a9cf41ccddd0ffe09be676cf4c51
SHA1 8990a1b01b29d58f0da9156db7175cf85bc45712
SHA512 94bf8d3261ef5e1b7a7ad805fe11a1fbb8ffc35f22dde144615aa9290dbe0c7ce08c68c7adbb60af47c983a7a625eb3d91cf005283950713b72320117af4109b
TLSH
T12731A1B7C3D486AEC90156F05A24BE1BDD1D051642283D16C9E4EF5FA3F2475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 545aedaecca15b7789c3349aa2e25ceceee55a6ee1eeda57b53156cb640a04b7
MD5 df8276230c8b7be7a18be4475dce7fc3
SHA1 657904402b066df1bc088ceaab3743c864f1ce5d
SHA512 99c3dbd9d58ca317469ce331232ccc6c274b81d5d0588fcbf5c6ceda3525ae497b5cef48b813a94336648e56ca7e2f8d64cbd2b9a10cf69d92c1e691c381ef9a
SSDEEP 192:sxZhRFyM/jK1Ml8MkS/fUsaACRIdpdsHW6+WNGYzQIU9IgrJ:sxZhXMS/fUsaALCHbGh9
TLSH
T18D42E711AA34A9BBCCDBD209BA457F53D6F5047292900E44A9FCCA1C05E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f354fdb5dd21508d8e363d24d47957661c5952e7f7d403c2f5eff52bca466526
MD5 424877b3361b611712a932fd3c34eff1
SHA1 355f972ced4a084dd0de0146ae5b9564da16df67
SHA512 4d6908fbabdc6c0e0e4f24b34ade59a31158705716a47d7019e3863368b75f6c0b8d4f94dae855f99135ae4e984a7bd7e88229d6cfda98d2f7a4b7afe8eff9e1
SSDEEP 192:sxZhRFyM/jK1Ml8UQukS/fUsUVCRIdpHsHW6+WNGYzFzU9Ig52J:sxZhXqFS/fUsUVLMHbGDE
TLSH
T11852E851AA3499B7CCDBD209FA457F53D6F5547292900E48A9FCCA1C01E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5ad25863f29bf6ffe7b5b9ff9e60afa32c4acff8a6817561095bc6d264b1fbbe
MD5 e96dc24258fc0d84c7cc1e4cc22dff00
SHA1 56f27c7fd9b80434a25ee7150717e2ee61f95718
SHA512 42ae27b2f37f3c390041d9e57f9cd4ce91e2bf21e734c52cd72f99b460b063d8d839fb180654616e7e253d84a11cf8ca92f59734aeeae0eafa6c896b7f996e0c
SSDEEP 768:WdW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSj5roI3iUYx:WdW7kf0Wvqidau1jaa5LA3jyxx
TLSH
T156D20B3B684CCB7E4F840E5CEC266F976ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 c5be9f3a5eb57c26b0fc6022b02b669a24574ded20b10b111c0581c1208197d0
MD5 6d4811c736fbb24d1f4fd02600a819f9
SHA1 6d8eea2623b9dee17d98e95ad8304549ca76d96d
SHA512 43aced9a75ab613ed13888be840fc72b5842b18c01c3bd2c56b64c3724379229ef7ee88d1fa00e4388a53e14fa72ce5cbbe68691c69eec18c8fb12f3ffb45528
TLSH
T1702130C0F2E910E8AE89B941C10D590B60B13F59230DD9F6735E4CF80F49C1A1E6ED29
MD5 SHA1 SHA512 TLSH

Submit Download

e8bfeb2e-788d-43d2-a4a9-9d3a3ce9eaa2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e8bfeb2e-788d-43d2-a4a9-9d3a3ce9eaa2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 37d7f30b745f2fdd103d7dfa6d8be914d8b4eeca8b0955de00f84a3a6e562731
MD5 0ad9a577f812053c23c7404c5ff0891f
SHA1 8e233c0c9e97a16b81fcfda3f1b39833ae74085a
SHA512 9b2c1b4246b5b6361db1a42714ee8748ba92425eb7a24e73ae843a287f798eb8da444f5ebcb5978ea585decd9e6ae3341ae805b22e853d1b79fff25d483aaf04
SSDEEP 384:ibiFiZcI0sN/8TUNTUlIlDpFbeterbM2ctsa+VYQleon:i2FQ0OwgDFOe3zcthgAc
TLSH
T1E4A26C735CA8CDBF9DB69781F94A33038EF441A796C4AA54A3DCAB1D019B2DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 10385a8f23b692e9ddb4bb42502a6fec7cadc29e1eb246e867687cb4cb036db0
MD5 fbc829dfbba4b9b4e29ca85b23156382
SHA1 16d7bba839451151e3f9daa06e66bc76ba5de138
SHA512 c51dbb6ddbb4dce879d185a5a15426e310df689291e7563de1bad8bb5c71eadd565d91928a1735c410fdce04cfc21d6d5aa847759a0b8c2fb790ffdc3b95097a
SSDEEP 192:uYDm+xasuheOwQxMGsNliQcL1dvBbfKQmiU1rXeU4aGBPK7hCI9jlE/dNRq4qva2:/gZcIhsNlipFbeterbM2/tsa+VYQleon
TLSH
T1C5828E722CB49DBB5DB3E281F88737034FF49167A2C86E5496ED6B1D05DA29C130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 636553c4215d5338aecedc28045408f326c397c1af2dd537f8fd2a19ccf43110
MD5 7206339613a9648ed4914473ff2a3d58
SHA1 50369c5e14cf0bbdcb477692d43d7d7658bfd2e7
SHA512 aa98add42046fa978733ca182cafe4b43dcbf421351e1220e1208c803329b16c66c97f944e5911b0e68af5259f2f3394c84daa5c305dadc4adc66ae626a7c655
SSDEEP 192:MONo64BAQmiUye1hW5GBPK7hCI9waDdXU6:MONo6eAVfWQM5dU6
TLSH
T1880209356CB96C7B9EB2AE44F48637176FE8116BE6945B40E6E82B1C00D764C234392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 52c29074d6a582426cc1c143d84b9f3adea113017cba0dfc3cf10ed9488edfbf
MD5 0c43b8e804a7e9ca52f0e76aaf0d72fe
SHA1 be25fe7d4860f6de38747d26f123eee01b6c7b97
SHA512 1fd3b434115c7765048968d2f2f20e04755da69cee4b34ef48de11f5353f4a986d947e1b92c2ab74e7fb26e08d3fb4079472580b4cbd3eb076978dbe475680af
SSDEEP 192:u1Dm+xasuheOwQxMGsNlDQcL1dvBbfKQmiU1rXeU4aGBPK7hCI9jlE/dNRq4qva2:KgZcIhsNlDpFbeterbM2/tsa+VYQleon
TLSH
T16C828E722CB49D7B5DB3E281F88737035FF49167A2C86E5496ECAB1D05DA29C130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9e9f0e65ef81b6f71daf6c68dfe39c7397ff9baf85eb3bf6bf2269df9675fb45
MD5 3c7eadf878c1a5773e4ced6e79f600d4
SHA1 ee00fce9505dfbe6afb74fa7556357b34ad957ce
SHA512 d5ee4b630799ed6820dc91cfe02b348e9e41dbb7e0f23a83148da82d14b291d2d5367b7e17d1fbc90c21c028df5d6d3817af606da5ae4bc51df72a735d11e1b7
SSDEEP 192:AONY64BrQmiUyghep5GBPK7hCI9jlEsWwRq4U6:AONY6edXepQM2CtU6
TLSH
T132122A766CB8AC7B5EA2B591F48737135FA5412BE6846F40E6EC3B1C06EB25C230B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f618f75-e530-4040-98c2-d610e26aa92a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4f618f75-e530-4040-98c2-d610e26aa92a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0e4f97637ebe15e4bb346d19347518cef7d2a70584605b1ca42207e660e7b4a2
MD5 b5484aa7d3a839ed8453d2f386140095
SHA1 a8f2a6d2a38f7d89bb2104fcba4e50530165ef66
SHA512 692b1f8dd5fa2f7eef1549895aff28b77a84c01a17639834ec936b5691ec5b3f1735c7ce0c7af1594106e0bf5bee5bd7e13ab050b9cbd0b367f4bb76024d1534
TLSH
T1DD411558A7E92118B3B76F56ABF6A86D483FB8772F06D49D10010E4E4A32B40C861737
MD5 SHA1 SHA512 TLSH

Submit Download