4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466

Analysis

max time kernel
148s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_fbd33b64-fe8a-40f3-874e-7ff948513a9c.html
Size 11KB
Sample260620-fdh99aet91
SHA256 4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466
MD5 a140c402079a345674827ba8030c93fc
SHA1 ccbd4f63e520d1efe873156f1887e2ea125d72ea
SHA512 1b79b5bf8d348036ac0bd577db7511f3a324f25d52ceb041da4ef642c283781b912bdd03cb340386e51a8ebc877a679ddd4d63021dfc374c3e1c9a762a225b73
SSDEEP 192:vRkNI7gF/I/yd2JkhBmZwZ5/0OcYAEhi+YR39GqtZ4MGLgj/3bf4t0UfPH9Hcnvx:vRkNI7gF/I/yd2JkhBmZwZ6xY/X8YLKr
TLSH
T1D432947394F2142B5162C1D51933B34EBBE2E453DA4A591073BE46CE0FC6DEBDA2720A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3392	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264043232585672"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{EC9706B4-7122-436B-89D0-4EA7E7074BCF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3312	msedge.exe
3312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe
4860	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4860 wrote to memory of 2328	4860	msedge.exe	85
PID 4860 wrote to memory of 3392	4860	msedge.exe	86
PID 4860 wrote to memory of 4172	4860	msedge.exe	87
PID 4860 wrote to memory of 4172	4860	msedge.exe	87
PID 4860 wrote to memory of 4172	4860	msedge.exe	87
PID 4860 wrote to memory of 3672	4860	msedge.exe	89
PID 4860 wrote to memory of 3672	4860	msedge.exe	89
PID 4860 wrote to memory of 3996	4860	msedge.exe	90
PID 4860 wrote to memory of 3996	4860	msedge.exe	90
PID 4860 wrote to memory of 3920	4860	msedge.exe	91
PID 4860 wrote to memory of 3996	4860	msedge.exe	90
PID 4860 wrote to memory of 3920	4860	msedge.exe	91
PID 4860 wrote to memory of 3920	4860	msedge.exe	91
PID 4860 wrote to memory of 5072	4860	msedge.exe	92
PID 4860 wrote to memory of 5072	4860	msedge.exe	92
PID 4860 wrote to memory of 5072	4860	msedge.exe	92
PID 4860 wrote to memory of 2368	4860	msedge.exe	93
PID 4860 wrote to memory of 2368	4860	msedge.exe	93
PID 4860 wrote to memory of 2368	4860	msedge.exe	93
PID 4860 wrote to memory of 3940	4860	msedge.exe	101
PID 4860 wrote to memory of 2896	4860	msedge.exe	102
PID 4860 wrote to memory of 3940	4860	msedge.exe	101
PID 4860 wrote to memory of 2896	4860	msedge.exe	102
PID 4860 wrote to memory of 5084	4860	msedge.exe	104
PID 4860 wrote to memory of 5596	4860	msedge.exe	116
PID 4860 wrote to memory of 5604	4860	msedge.exe	117
PID 4860 wrote to memory of 5612	4860	msedge.exe	118
PID 4860 wrote to memory of 6128	4860	msedge.exe	121
PID 4860 wrote to memory of 6128	4860	msedge.exe	121
PID 4860 wrote to memory of 3312	4860	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_fbd33b64-fe8a-40f3-874e-7ff948513a9c.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ff915fcc188,0x7ff915fcc194,0x7ff915fcc1a0
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,14633920865347736598,6980069199398798844,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,14270504444327581209,2999945866882723226,262144 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,10648028187233158362,17522081412411190665,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,10927086620150149011,10243590420926090087,2097152 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,5201575104474309618,231826971199258559,2097152 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,869967395899402197,5227274248066643821,2097152 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4324,i,7330010405553676893,11042163323104057128,2097152 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,6410418633379114263,5372146018527263343,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,11422936814067943588,14656992967405430095,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,1832105971000186688,2438204307496720337,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,1832105971000186688,2438204307496720337,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,12283331224466122017,17032045302404822210,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,16171519789013534711,936392534283174169,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,15603734106923684561,11934208431735376881,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,4613512330489750774,18059021354208944865,524288 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5732,i,15425435826907199402,10425662356237899970,262144 --field-trial-handle=1988,i,11247637362425324116,13962670880873558974,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

26942cb5-3b15-4557-bc6e-3566c2166466.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26942cb5-3b15-4557-bc6e-3566c2166466.tmp
Size 30KB
SHA256 a715082b508e2b644f1c5b157d934077a6bbed5e2630374d9abe64b28e3dfbdc
MD5 d7f45096f7f73032bb89aac6cc31aba9
SHA1 e88519ef9c6a4419243f6016c2c5ecc83b234bdd
SHA512 19e151c5be4c42a7c598c1238b336bf357a0ea0fdad022d897441a2bb3927d03402e1b54683251e39237c968a143f7fb3884529c75bc849695d8b02a77792e60
SSDEEP 768:OgsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9prodoh:OgsqxXlWvJD6Tu1ja54LAs9Cdk
TLSH
T1BAD21B3B694CC77E4F840E5CEC26AFD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 988cff26c9e0030ddb896187d04a24e20cd62948dba3130bdcb51729f1a611d3
MD5 01f1f948e28cb8a0d4d54db59af18378
SHA1 5ae9ceb0af7e2ab6554399115a19192506a11ac5
SHA512 f709d63554c89a45cdc3181686f7fddc38aacf6afd09536f7d1ad2dee82e31f79cdf076a3b3ac501bc2c0a931c56f877de80ee966de9ad08081766498decc288
TLSH
T13871C634552A93DFF7E602B290C12355F6328DEAFE273E412F2379B45E01FA08169389
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5828d0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5828d0.TMP
Size 3KB
SHA256 b51f7549f85bec9e2d4f0f713f5839502c80d4e531cfed5c4d0abafa4d137eb1
MD5 0cdd515ebff03ab81bc8ba992a2015f3
SHA1 a58c87819626b9d0755d7f12b7c1b13d16a26775
SHA512 5338ad5cf88f9ceca38055b26a54e25d808c0710f3ab1172e332dcc2a128859f70bd549c40795e8dd8e7bd36af365b8e5823b28ad180487462a0f043c81efb13
TLSH
T1FA71B534551653DFF7E602B290C12359F6328DEAFE273E412F2379B55E01FA0816A388
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 74695b3ce989aaa0aea353c644a9ada4e57a7122c8a6051d25da29145ccc5ee2
MD5 f04f38328562ad2e0d1da2f2ac2ca930
SHA1 843dc0c92b48d52b432a3243cce544ab9c64b96e
SHA512 ad6a6aaed34a520f704d095bae2745fdaf3a21b5c9379de8cc4f59f481147dc5246113669dfd9f3067c5e10c4732760e1193b441be2be9f94bea54380b874461
TLSH
T102219DB3C3D485AED91156F0AB287E1BCE1D050653283D5AC9E4EF1B93E2474D00194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 fb9ce76bacbc2defa5ecdf86637de1bfab6a3c0f27ae72cab3cf682e14207929
MD5 7a18c42de1a29bedb7490016172e536e
SHA1 5d2f208c98a0289acea0d5eb167553f79df16e2c
SHA512 c276d42b4cf4b385eb8d9dd3ce80daa081127d32996e4787517f10963b1f64c4b852db1912ab4512f510be55b054419e90d4bbc894bc326b5d68099797c57841
SSDEEP 192:sxZNRCyM/jK1Ml8MkS/fBs8TJ0IdpdbHW6+WNGYIk1FCbIgrJ:sxZNwMS/fBs8ltxHbGH9
TLSH
T15D42F8126B346977CCDBD209FA45BF53D6F91572A2940E44A9FCCA0C05E6BEC221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 cba38d6bfc9b420f5a3e32860800a5d1a9e3829c12061078fa49f9adb4ea5d3c
MD5 455c10eb7ec28f291d8e6ae180f04577
SHA1 146e2c561d7b1229191df96b890098d6c035116b
SHA512 3ad1e232e4e66535d3492ab2bbc0a1d8c1a1f161f550d77d2cdc447bc11f2d669a8ac4a15917265a190d47ef378af304bd977633b4ff1f9db33d90a9bc1e96e6
SSDEEP 192:sxZNRCyM/jK1Ml8UQFkS/fBs9FJ0IdpHbHW6+WNGYIOE5CbIg5cJ:sxZNwqOS/fBs9vt7HbGiS
TLSH
T1F552E926AA346977CCDBD20DFA45BF53D6F41472A2940E44A9FCCA0C05E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9a76830e416e4c057b0cd2b1d299cf1a3f41358d2db481e21aac39069c1294c1
MD5 c61599e95b90acb5866567a0bf805bc4
SHA1 e6545a217510ca49d1b2fbd92dadf582daa756e5
SHA512 8cccec2d0e35bd6f2b13f58c99d511e937dc5c20578217ec0b70855a18aad7fb6f140292c247bf76fe3a79a2a27cc13c7512be190b2ddaa3318bb0e18bd61ea3
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTy3JMdIdKegIvyNHIFKMkoAz:KYbaKYIKvdCKegCeHuKMkvz
TLSH
T114912F1A357A1212387D3868B266993B4F413A63701CE46E3FB850A60FA7E114DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f4a6a2e-368a-45d3-867c-76c88028f438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6f4a6a2e-368a-45d3-867c-76c88028f438.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 9bb5e6987c806a8f6e532846af03d8fa40459ae6c2e24745fb3829ca64084f1b
MD5 93e5395a27a20b028e6643a693502d8a
SHA1 317206f5486ce3f7e69c05842cacba9ebb0b0e51
SHA512 8c7a447afe92fcd96c09bb01f2a7de2498940854b1c17053121cad6c812c688f77aa3c9e118753192481d95e5b7ad993503e3318d11ebaeefbb974ff6b0b7f73
SSDEEP 384:XiF1tNn/s3n9SjzsNM8TUNTUlIlGB2AbhB4VRNmd2OYoXXITGT0I2x9Y:SF1j+9w9wg0XuHmRvXi+0zvY
TLSH
T16DA27C3358649C6F9EA65A45FA0A32074FF441A7D9C97B90AADC9E0C01DB2EC134BD19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f8a6c0432611ab99c1e976b2e340b1340ca0d0aa4952785a67bf014256b26c61
MD5 22b72a831cd0a67356b383e75a3fdbc7
SHA1 917c99b0c622dc10950f84491cd91f247de29b08
SHA512 cbea8fd2c4629331d5c74f73a8a9e44eabe67d117a8f2f80252994975c0036ac6dbe2caf4e4e4dca6936665243b7ec6146f6b0a752bd07d4af3850fae8c4de8e
SSDEEP 384:UtNn/s3n9SfsNEhB2AbhB4VRNmd2OYoQXITGT0I2x9Y:Uj+9UFXuHmR4Xi+0zvY
TLSH
T1E2928E3258346C6B4EE66056F50B36071FF451ABAAC93F8499ECAF0D01DA3EC135BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a7c7fa3aa2beeee823fa12ccd04ed744377e0fea432812872331ecafbc9453dc
MD5 2c30f5ec78b7fe5af36fa4196a6de44f
SHA1 096a668f8deb03d6bcda43620b7447f3d93045c2
SHA512 be0758560c7872479b130bf7427aeddff91ae5618a6899e6f844436155af75e2f546e09fc8216e9ba22f3856adc3b2f924cb2b33013718646c282e9b20a6a708
SSDEEP 192:tON06JkRtQmiUyf1W+RN5+Fd107sh3iRHJU6:tON06UreW+RNmd282JU6
TLSH
T1C602B835AC382CAB8EF66D09B58737175FA4217BBA992B84D6E81F0C01D765C1347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1ccf59f5e0465a5cfdf68335df51dcbf6ee908ba9a75ab9029def1d046314281
MD5 1d2eab135c2efa448abb4c119c1fe654
SHA1 9d94b4b4230756bcca79c127ecf27107260f8d13
SHA512 0bc16956346f990afe7df6fec66130c397d1223288d640f57f7e4ec7aab85ebadeb2bd8db5373c4b131d9ffa30d8239e266b9c5886d827933a095699ddffc3ba
SSDEEP 192:mONt6JkRQQmiUyP1I+RN5+Fd107ptpefPwoU+Vc4qgWU6:mONt6UQ8I+RNmd2OYo4XU6
TLSH
T1AA120B356C686C6B9ED26845F48731135FA4512BEECE7F4095EC5F0C01EF6AC1346C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 120e3f3045c406b471404e6daf22f0e1801a2797e9987cacad4117057e6069c8
MD5 62c88ec1c0d5d337c7ece5dabe540f13
SHA1 495ca555eb1fe7d0c5e4a76ff0de60cd6a7d3efc
SHA512 c72ba172f15b4afccfb176d39f571eb13ff8bbfcbca7f75b96c3f09553a7b2162706def699124fdbff0ed4bd778368c66afa5581260492f7af98e7b02d06c98f
SSDEEP 384:htNn/s3n9SfsNEGB2AbhB4VRNmd2OYoQXITGT0I2x9Y:hj+9USXuHmR4Xi+0zvY
TLSH
T155929E3258346C6B4EE66056F50B36071FF451ABA6C93F8499EC9F0D01DA7EC131BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8df4ef57395859c47d1b5a30549ebe49a9eb5c6bd85a78e8bf04bc4668cd5967
MD5 e428e9e3fdaca9f93a49b617e130d26e
SHA1 f24dc00eba0dbc0a5fe75b5052d939b4d6448060
SHA512 163eb91a694a33e2c50a79c6fb9bdc95893fda3005f70cebf37c00b85eb6a7a29ca4e7b6391bb19822b379fd7c3e6a7b9dc45f296f0b0a471683e9001e22efff
TLSH
T15241F65CB6F91148B3B36E5A9BF7B86E487EB9732E06D45E10120E4E0662B40C872737
MD5 SHA1 SHA512 TLSH

Submit Download