dac8539b38c2220079a513bcb3c69d79ae79630435837d608e4934d7feefdbdf

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1.html
Size 3KB
Sample260620-wtppzagt8p
SHA256 dac8539b38c2220079a513bcb3c69d79ae79630435837d608e4934d7feefdbdf
MD5 db3773aba0cb8b65c8bf71f870e255e3
SHA1 fbf74d5efd0837fd29f81c01e4065d9643ef4a3f
SHA512 981beab6baec9cfdcf25de01993cf0354ac6649379d6879a38ee5a6e02d9c6d774204b3849b9980528f2bc3bbdc48ce35fc4b6a26094ec0ff8fa097687f08c6c
TLSH
T10B71B5057CF4B006517B22B57BEF159CB6A1810B7909CE24B89C83106FD4F9A4C67BAC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2076	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264527974878834"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{3C3AC2B3-E1CB-4B0A-AB41-2BFFC58E7EAD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3264	msedge.exe
3264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3344 wrote to memory of 4372	3344	msedge.exe	87
PID 3344 wrote to memory of 2076	3344	msedge.exe	88
PID 3344 wrote to memory of 528	3344	msedge.exe	89
PID 3344 wrote to memory of 528	3344	msedge.exe	89
PID 3344 wrote to memory of 528	3344	msedge.exe	89
PID 3344 wrote to memory of 3704	3344	msedge.exe	90
PID 3344 wrote to memory of 3704	3344	msedge.exe	90
PID 3344 wrote to memory of 1340	3344	msedge.exe	91
PID 3344 wrote to memory of 1340	3344	msedge.exe	91
PID 3344 wrote to memory of 1340	3344	msedge.exe	91
PID 3344 wrote to memory of 3492	3344	msedge.exe	92
PID 3344 wrote to memory of 3492	3344	msedge.exe	92
PID 3344 wrote to memory of 3492	3344	msedge.exe	92
PID 3344 wrote to memory of 3932	3344	msedge.exe	94
PID 3344 wrote to memory of 3932	3344	msedge.exe	94
PID 3344 wrote to memory of 3932	3344	msedge.exe	94
PID 3344 wrote to memory of 1440	3344	msedge.exe	95
PID 3344 wrote to memory of 1440	3344	msedge.exe	95
PID 3344 wrote to memory of 1440	3344	msedge.exe	95
PID 3344 wrote to memory of 2452	3344	msedge.exe	98
PID 3344 wrote to memory of 2140	3344	msedge.exe	99
PID 3344 wrote to memory of 2452	3344	msedge.exe	98
PID 3344 wrote to memory of 2140	3344	msedge.exe	99
PID 3344 wrote to memory of 1032	3344	msedge.exe	101
PID 3344 wrote to memory of 4444	3344	msedge.exe	107
PID 3344 wrote to memory of 2536	3344	msedge.exe	108
PID 3344 wrote to memory of 1848	3344	msedge.exe	109
PID 3344 wrote to memory of 3120	3344	msedge.exe	117
PID 3344 wrote to memory of 3120	3344	msedge.exe	117
PID 3344 wrote to memory of 3264	3344	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\1.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffaa54fc188,0x7ffaa54fc194,0x7ffaa54fc1a0
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=1864,i,4736177667677677111,3231281996128843608,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,4262926874208067151,17447130439761372030,262144 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=2564,i,9127353454843897658,16841356890856069863,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,2725530865932778583,15405171692598935795,2097152 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,14016978522253331791,17334640511046810397,2097152 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --subproc-heap-profiling --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,6936846195503252500,4529091663844463937,2097152 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,15606564216070896225,12555664969963704932,2097152 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:2
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5060,i,9931841265379468566,4812804320224916883,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5112,i,2978625745924629976,15316322976285426475,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5852,i,2117097812188328706,7659234916210738422,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5852,i,2117097812188328706,7659234916210738422,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4836,i,8237370427074853797,10917509941741312254,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=4408,i,11633260554939287932,2902661596780996899,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5016,i,1953332398166785984,5210833055148448859,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --subproc-heap-profiling --always-read-main-dll --metrics-shmem-handle=5300,i,5708194294334261094,730303206181813126,524288 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --subproc-heap-profiling --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6012,i,17747305800883948283,1204832640347830061,262144 --field-trial-handle=2288,i,5971152895219290575,15606828063518749137,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 691852ab1eb117e6ce9c110b14a31a7b4b459176cc57e91f957dcc8446b48e3e
MD5 0848b3ef8ed76810662c5bd148c909b3
SHA1 0793d3ecf351a6c6d5dee2539badf0fc9462e6c4
SHA512 3ab34c639eca349d8432c4cb27ab3979fcfe40c33652733c87c9ad33f392f0696cbc6f180de06aafce4eab4501fca1451ca61f144fc5a9100cb9f60ab7a35136
TLSH
T121713C35E602D4A9D3B013317081236DF071A9C9FA6BDECD3E7358B79504F29721D916
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a68c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a68c.TMP
Size 3KB
SHA256 bfca8093ba019382458b55c8a350d83fae2542b66ee75b8bb7ebaaefb2920596
MD5 a744c89b33c94bd4e06656eecc3f0c4b
SHA1 544e0192993eb08e12ce910dc936c5f576847c0f
SHA512 44479fb05c8ad8e1559531f3999824ba4d7df8cefaa98e94f5bac0971b2890c2d32d1b3b407513612667e0988b0710a5345eec5186d2ab197bc043b2422c6b5e
TLSH
T18F713C35E602D4A9D3B013317081236DF071A9C8FA6BDEDD3E7358B78504F29721D916
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2180d080-8a04-498d-ab94-3cf17a32682a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2180d080-8a04-498d-ab94-3cf17a32682a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c3da214790dc422e4af74946a3ed34800c83ae8e40a7deaa6b7c241134466af1
MD5 1d25e3eb72e420f161c346a295717693
SHA1 e8a1a6cd8eb6ca2c278a2b02493c99902a73b358
SHA512 c0257d37a1d0643f64d3a7eac64dc26b953aa547bf4920d0d88072a5dd2818731c5a2eccbbad03b5068347eda1756ef530d6dfb496da3fd5b5792ee882eeb0e0
TLSH
T12C41AEBAC2D8836E886116F4AF25791ACD5D050A52283C5A8DE5EF5F63F14B0D24229F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5f1b722b7e7055a739581fd46419409fa72966c91a2855b0083e2ff147ff0250
MD5 610bca5580d89c6f4cf1254188f7f2a0
SHA1 520aac4d343250c2c8c89ec4f46ba2cba2b9f158
SHA512 3bfbff27e2494c79de3ba371a2b981e610a2a497e68c78e7f172cedd7e13bfd05b6b037ddf4cc6581cb79c50e12d07f823a1b980d93cdbf4e2558947412b1fd0
SSDEEP 192:sxZpRTyM/jK1Ml8MkG/fZs6OTIV8IdpdYHW6+WNGYvrjxck3IgrJ:sxZplMG/fZs6OTi2HbGYX9
TLSH
T14B42E8126A34697BCCDBD209FA51BF53D6F91572E2900E44A9FCCA0C04E6EED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5eac0f750daf70ef2c0c796c280c90890a37a46aaae2c36eb707252b5a48cddc
MD5 c79d01c0952ba2e93f81b55dfc8fc789
SHA1 2a2a6e867df68b18f65595b3720cef3f3d2d1134
SHA512 f6eed5931794aa6501592b566606ae3d4a2d08dbdf01792fd8bfb3949b94ee3923149259eeb5302d50762c7ecf57346d5995989629491bf52cf5f090f393ff0b
SSDEEP 192:sxZpRTyM/jK1Ml8UQbkG/fZsbUTIV8IdpHYHW6+WNGYvQAAiuock3Ig5aJ:sxZplqwG/fZsbUTi4HbGjAAAX4
TLSH
T1D952E7526A345977CCDBE20DFA91BF53D6F51572E2900E44A9FCCA0C04E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9db1915d0b306f737cb5a04153dcee5cf4cc54d5bc2b7a0dfd7b50dd022c0f85
MD5 c11dc589ea434e13626b7e095ddadf06
SHA1 de1583fed19607f56c43a985230aab2364fdb596
SHA512 fa5a148426331b808ff78ba4a3bcd639a6cfc520348b5fa051adc5ee32b2994660dcb71d58ded97b6b78a92cc417546ceb6f7b4e942db159d13601ff5468ccc0
SSDEEP 768:sWseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppbroZ33:sWseJ3xWvhfynu1jaVcL88poZH
TLSH
T1E3D20B2B280CCB7E4F844E6DEC266F966EE801CB57944D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 e14ce49c4cdf55eff4f536eb79fe4b9f09be57c584c54c3466dbf42643b7bc2e
MD5 5d7273e044501db1f00a5b892100f007
SHA1 5c200fe1ed251b93024b6463817948560cd9c12b
SHA512 5a11e88ca8c6d8ff8dcaa77d7d269a0d3cff9dd46d94f2b0abc970a4b1a1e28cd36f39656bb3ec2b99ea550c2ee34b0f0387667ac7e9481009a3733de4d76049
SSDEEP 96:KYH+Kggm6qUK7iqW9yKecyObOEOFOhObOVO1Oxz:49nHxlObOEOFOhObOVO1Ol
TLSH
T185916912363B02023C7D1558B2A9957B4F4135A37468A86FBFB800B55E6BD112FFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594174.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594174.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 85a24b5bece96c146b99a4a9c6fdb19191cacb74281a1a4fb1bbfafa3d6506aa
MD5 80a3034041e899be8875f68e76b81215
SHA1 8bd62a4c3e83d75833161bb29ee4992135b9523c
SHA512 76601ba4cf268f5b67e4e4249a52dabc6b8369ef5c6403bccebb3c82aca87eb1943af593d3f948f0ac4d8f3c0fdc54693471c4db70d192cd9fd204a80a4936b6
SSDEEP 384:rtNn/s3n9SfsNEjmurfj7PQACgvxd9tqFjsU:rj+9UX7j7J/tUjsU
TLSH
T122625D335C34AD6BA9E7A589F08B36175EF4916BA6C03E94F5DC3F0D00DA69C130792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 ee9a51210e4d3806e57e20c970ccb931222f3333e73236947322ee79fadac6ab
MD5 e93ef9516d94410bf76d41bb27b7b7b6
SHA1 2467b1171f99a7ddd703bc6cdf86e94fcb448e8c
SHA512 ff3f66ba6dc9aa42934c20192fcae1f10e5764b23dd14cb2a31a0cf0f4c47c952755263c32ef7edb2d49a026924f2bb9d896ce90f173dab62d362c08de3fd8ab
SSDEEP 384:NiF1tNn/s3n9SwzsNM8TUNTUlIlymurfj7PQACgvxd9tq7jsU:EF1j+9vtwgm7j7J/tMjsU
TLSH
T1658239335C64DD7FEDA6AA85F18A32174EF481ABD5C06AA4F6DC6F0C00DA6DC1306D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 4dc4f6f31faffd7c2b2a09bb3461c607ac6f197126e2b2d5aa8c605f2b8774c8
MD5 4150fff52bd9a7576f0c5bb6ee680e91
SHA1 dcab6a32a0e784b7e406174eae4ce97f1d7db0f9
SHA512 bda1d132781819117d3d600ac923cdede01e7401a958fd384bf0bc5e5022cf56615b42f4b6cee6aa7e1e49b006fbd78493b652b6cf8146f1b17c2dd9fc2439ae
SSDEEP 384:FtNn/s3n9SfsNEymurfj7PQACgvxd9tqFjsU:Fj+9UQ7j7J/tUjsU
TLSH
T1AA625C735C34AD6BA9E7E5C5F08A36175EF4916BA6C02F94F5EC2F0D00CA69C130792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e7a92b06ccda314ae428bb533db6b5eeeb1d2fa77b9ff4c91fce919afbb52c85
MD5 6f5459ea20a0a14187c2d5a008089b0a
SHA1 732d85cf2c49eaf0fae081319386be7349736c90
SHA512 89d84e5ad2d8d2ab1a9fd3abe7596ce6e059c8a97c670a3eb161d5d111e82debdf384798b29f1eed7b5a43ec8ba3c15bfd744e61929213099b53a1fbbd4c49c3
SSDEEP 192:lON46vMtPQmiUyYIThTRV+FdLJ67847TOU/u:lON46UtRUTad9IyU/u
TLSH
T14D020B36AC785C7BE9B3AE49F48A27171FE461BFA5D01B54EAE92F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 4aa49f13c9a800191731770b5dbbf85a7181f733c36693a0ceaccff514bcb81e
MD5 2d4311fd5ac288f5995316637f3a5464
SHA1 49c2ef2d58875ada430e04406d523319caa44522
SHA512 ab502c1601399a812ffe0135c6004afe9dcbcd5b1e6e48ee7dc1478114e8d1c4760512dc76a5fc19baf89acc53ce23c3a9d86b71b9081fbc6b9f406e0be30613
SSDEEP 192:6ON16vMMPQmiUyiOIthTRV+FdLJ65rSfyM80IjqsU/u:6ON16UMR5Btad9tqxjU/u
TLSH
T121121B32AC649C6BAD93F585F08A32135EB4926BEAC46B54FADD3F1C01DE69C1306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

781e740f-6b46-4bce-8d0a-259da3387d6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\781e740f-6b46-4bce-8d0a-259da3387d6f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ebebabffd57957c3bc742c9482b68d059947ffe573c52527cae2328972db8612
MD5 a420a7415556bc8a211f61784a248a95
SHA1 3c5133a4e29cdc9bac7ce862e8b9e881eb72e515
SHA512 b64bcf35776ec85220f5c959a12388ec4effc6123fc40d0b7ea63cc71b89ef9b7f170aa7c9d4ee66ab87b3fbef6164519698e6646045ec7b5614b20a6506a42a
TLSH
T10F410958B6FD1105B3B76E5A9BF6686E587F79732E07946E10120D4F0A22A00CD72B37
MD5 SHA1 SHA512 TLSH

Submit Download