dac8539b38c2220079a513bcb3c69d79ae79630435837d608e4934d7feefdbdf

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PD3.html
Size 3KB
Sample260620-wtppzagt8p
SHA256 dac8539b38c2220079a513bcb3c69d79ae79630435837d608e4934d7feefdbdf
MD5 db3773aba0cb8b65c8bf71f870e255e3
SHA1 fbf74d5efd0837fd29f81c01e4065d9643ef4a3f
SHA512 981beab6baec9cfdcf25de01993cf0354ac6649379d6879a38ee5a6e02d9c6d774204b3849b9980528f2bc3bbdc48ce35fc4b6a26094ec0ff8fa097687f08c6c
TLSH
T10B71B5057CF4B006517B22B57BEF159CB6A1810B7909CE24B89C83106FD4F9A4C67BAC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2520	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264528002818344"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{86A3C855-68EC-4121-B98B-77FE81CD4A66}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe
2248	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 1280	2248	msedge.exe	86
PID 2248 wrote to memory of 2520	2248	msedge.exe	87
PID 2248 wrote to memory of 3476	2248	msedge.exe	88
PID 2248 wrote to memory of 3476	2248	msedge.exe	88
PID 2248 wrote to memory of 3476	2248	msedge.exe	88
PID 2248 wrote to memory of 1496	2248	msedge.exe	89
PID 2248 wrote to memory of 1496	2248	msedge.exe	89
PID 2248 wrote to memory of 2592	2248	msedge.exe	91
PID 2248 wrote to memory of 2304	2248	msedge.exe	92
PID 2248 wrote to memory of 2592	2248	msedge.exe	91
PID 2248 wrote to memory of 2592	2248	msedge.exe	91
PID 2248 wrote to memory of 2304	2248	msedge.exe	92
PID 2248 wrote to memory of 2304	2248	msedge.exe	92
PID 2248 wrote to memory of 116	2248	msedge.exe	94
PID 2248 wrote to memory of 4416	2248	msedge.exe	95
PID 2248 wrote to memory of 116	2248	msedge.exe	94
PID 2248 wrote to memory of 116	2248	msedge.exe	94
PID 2248 wrote to memory of 4416	2248	msedge.exe	95
PID 2248 wrote to memory of 4416	2248	msedge.exe	95
PID 2248 wrote to memory of 4232	2248	msedge.exe	98
PID 2248 wrote to memory of 2004	2248	msedge.exe	99
PID 2248 wrote to memory of 4232	2248	msedge.exe	98
PID 2248 wrote to memory of 2004	2248	msedge.exe	99
PID 2248 wrote to memory of 4124	2248	msedge.exe	101
PID 2248 wrote to memory of 2428	2248	msedge.exe	105
PID 2248 wrote to memory of 4076	2248	msedge.exe	106
PID 2248 wrote to memory of 1096	2248	msedge.exe	107
PID 2248 wrote to memory of 4544	2248	msedge.exe	114
PID 2248 wrote to memory of 4544	2248	msedge.exe	114
PID 2248 wrote to memory of 2208	2248	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\PD3.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc0da6c188,0x7ffc0da6c194,0x7ffc0da6c1a0
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,2196336737594838725,5280439991364538974,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,11768551468488339621,10012737961388065037,262144 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1360,i,14402473764460325286,8788920412501910115,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,11650716142709991866,3086856619175795322,2097152 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,9933300372890917807,16380984383907464374,2097152 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,8735958101679583384,8808477915577379821,2097152 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,14569374441999613280,4641547187202416884,2097152 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,16142158501985678188,18420867116689357420,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,6583091495006492977,1709256268648686375,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15816101668544099117,11450055626351604369,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,15816101668544099117,11450055626351604369,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,14050291184429008675,7704491474350629185,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,16703787928658926623,9959185361124135657,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,6740509986710570980,4063416957123899548,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,17127693247223283975,10468760256015868597,524288 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6104,i,17792047357197533094,14702442150707235869,262144 --field-trial-handle=2292,i,5657601048594067412,14996493947695593487,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2208

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9e1a98f2a9bc6b1093d0c383f2adc098395cbf5c227b90728aa4221f8b9fb23d
MD5 2b79bd76f397ba8f1a603d351c48b979
SHA1 75c0183f040320d7d6719e09915626c601cdc2f8
SHA512 349b8301fdc9d0773304ca441ae9e05bbb21502b33a63bf24a93f1a56842312b855623a485e380faa56ae85209ac2b425aed18c7eb58c4d16ae0c91db9ce4866
TLSH
T143618219194E14B5F7611B31E4C10600F9B043B90EB72ED336F8D97EFA2EF23802555A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589fc5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589fc5.TMP
Size 3KB
SHA256 fe0b7c045cb8c57c6126c0464fc83a4656cc8d1590638d71bf653004d3175185
MD5 efc88aac209db6ec3089e133159d3281
SHA1 ff45bba5f03229af413a84354e6a358657c83c40
SHA512 ef90d18a88d7bf94408583c6a3c3f25a9d7210c2824c59d6330d753c85bdd5fc6c2ffb015640b6705fe3bd9da7e1da755b63ad09df86d07533af0235d9df3a31
TLSH
T1206181191A4E14B5F7611B31E8D10600F9B042B90EB72ED336F8D97EFA2EF23802555A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 78264f38827443e6a27cd3d27680e78fb3a21cae421a3c6c91ac0acb7b67143e
MD5 45d63d3b0aaf31caa416592807fffc6c
SHA1 f8b1d5abddb5f5b130eb07de9802a6ae1c2580f9
SHA512 8c71630eac066e2d28fd445996b4d0fb761b3b9b41accf13534141dfc88dbaa4bacffd66de5c070985a875ad8e4d74d8b656789cf020ad705cf77edccc16c675
TLSH
T18441ACFBC6D4877E891156F4AB257A2BCD1D051A422C3C5A89E4EF4FA3E28B0D10165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 347eebb0dda5e7e19feaca14707cffac463b78dcc6bae78cc622e3c704dd5192
MD5 77894a39fc772552afe54d1b3ca67dea
SHA1 455d5f39131b9206483595fe236f767acc0a0f63
SHA512 1ee90c536752178326fb3079a9812ff14d7f962fd46f5ed1c49ca347226f1203accd0b3c18eee5577b261d67a9d139c89a55602250eb78f920a30864a7e3dc84
SSDEEP 192:sxZFRRyM/jK1Ml8Mke/f5syqZnIdpdmHW6+WNGYLzEp2IgrJ:sxZF5Me/f5syqZosHbGi9
TLSH
T1B742E8126B346977CCDBD209BA55BB53D6F90572E2900D48A9FCDA0C04E6EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4da8e81039c8f7f8201fa4837d3f9eda2e74d76eaeeec1fcde90ee651fa1d723
MD5 94ff8b4fd3079254de309a1e0a93c5bd
SHA1 06b5ca4e9aa6d17a052ee86bc99f33a8dbf78e44
SHA512 d450655d49fb6e863e8fc832774cbedf6e98641f57c01e4ac27cfe2821d7a3986bac5d910c90d27cf182d284fa4b9910cd3bf934600f4377886946b393f0873b
SSDEEP 192:sxZFRRyM/jK1Ml8UQcke/f5saqxnIdpHmHW6+WNGYLkNaPS2Ig5mJ:sxZF7qne/f5saqxoGHbGzNkE
TLSH
T14C52E8126A345977CCDBD20DB955BF53D6F50572E2900E48A9FCCA0C04E6EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 af929c60d4956dd25c9a73a9359148354f4d99ae88f5ab6579caee3fe58a15da
MD5 603c63d15485d369983f47042172ce52
SHA1 2ecb59f2e00f671571aa9132f3fd596ac07627b7
SHA512 0ee1f94c65b90396efbc1af3ac5fe5755253b943829f8c68e555a201a697d245c3dc3c94b5a2fb514d9ce6b531d7216a074b024ae414c222c22f84424c042d43
SSDEEP 192:sxZFRRyM/jK1Ml8Mke/f5saqxnIdpdmHW6+WNGYLZa8p2Ig5mJ:sxZF7Me/f5saqxosHbG22E
TLSH
T14F52EA126A346977CCDBD209FA55BF53D6F50572E2900D48AAFCDA0C04E6EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 823050a251a691d8196d939b2e7ca9574952c52fad159fafc1e6cd4756b9cfc4
MD5 4b334157b180d757dce9ede364c67524
SHA1 704c839d99bc115a7792bc5b351f6cd109a9c7d4
SHA512 7d6f7ef4de30dc048f6e641b9588615e298865dc831793493e2a2bfa8b3d02cd9e26e5bc9acb8020d1a5c4c70b1fea2f7f291b897442867a52cbb6216c5e7a25
SSDEEP 768:xxs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNjrosC:xxs6pD1WvxzWju1jahILIsNQsC
TLSH
T18BD2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 34837a361d11c084cf81a0b34754fcb66c2faca9802a65daa3b0e81711230495
MD5 39805a1435f83bcd85759e10d36e1e63
SHA1 b911e8945b57c871094142c79be7f344da35a98c
SHA512 3e1c3fccf7bfeeb458b026199cca5b4636814bce988984f7947cfc455997d44dbfcb79dd774b75e1a2661b9cfe2481602996b2fc99a9fe16fe7d924d4828cf14
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFzIVKwEfyI/Kva4bytLIxK8IML:KUAAKteP+zWKwEfysKva+OLeK8IU
TLSH
T103B1250271B713123D7E290CA299972A5B82B6A33814F52B77AD00B65DA7F340DFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ff9a8bfcb15b3357e4d0163254a43b943793fe766c4f98d00d5cc445b9fb8be8
MD5 cbcea48dbd3a754b35c4542da9448036
SHA1 f696bbc131e6837542a649c87d96de0d44387999
SHA512 0fc2b57b328acef867798ca7746e376d1a13497e9bc7cf343849d84abe075518b731632fa9df430ce391aba135ba6a8b56ce615420b68d1e92ec7aaba01e9f47
SSDEEP 384:ztNn/s3n9SfsNswi5aXbKcXa9sO7SBgCITGT0IIx9G:zj+9UfWqiO2eCi+0hvG
TLSH
T108929E326938AC675EE29186F54B321B0F7845B7E5C22E84E5EC6F4D00DB6AC134BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7e1c56d57675b168d036593853b14e4c4a3efdf217a1d02e9c0df32ee16f39e8
MD5 8af62189dc89a3abf8188476df19cf52
SHA1 bc6f9bba4ce96f33a215d24cabfd368dd99e8ec5
SHA512 555f73d432118b0bc331ee17c5ea1246ace48f726f01d2e5e1b398642fd0fe2f7f8ab959ffcbbc3d4c23accc63581cc4bf28ade388e09ed22bd0f9260c556e16
SSDEEP 384:gtNn/s3n9SfsNsfi5aXbKcXa9sO7SBgCITGT0IIx9G:gj+9U+WqiO2eCi+0hvG
TLSH
T1A4929E326938AC674EE29185F64B321B0F7441B7E5C62E84E5EC6F4D00DBAAC134BE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 ec2a98a318e429d4f675de3df59352268e1913f35a510d5ad7fd9a4295245c54
MD5 88f8bffb5e7279fa4a3b071617718af1
SHA1 fe8ba8606f352ac38deebae2b42cea36e7f5267d
SHA512 bcf1ee0d1f1de1ec09bbc49674399e898413240437d3393642941a66024ba99186fac646061651c77cdffa6e376b80c17565d370cd2b878b516c50d29d89820d
SSDEEP 384:X9tNn/s3n9S1zsNsfi5aXbKcXa9sO7SB5CITGT0IIx9G:tj+9u+WqiO2/Ci+0hvG
TLSH
T140928E326928ED674EE29185F64B321B0F7445B7E5C62E44E5EC6F0D00DBAAC134BE1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c0c574cb6b1a5fd58b48a2fae967479d5ad39ff760014b36d2b51f5882eb6604
MD5 6508377c2eafdca65bd129b6e13c2834
SHA1 09d1954a79f6969fc211b3d73fbfc995858fd942
SHA512 c3888956bfc28271dbdaa9cd0054e65e603cb40509e35ac76c7accffbe49383e4625fd29a841293bbb7dc8812fd215a49d620e62edca4a84e2f0653d7e63c9c8
SSDEEP 192:qONp6O7+3hQmiUyFnGttb0RO2osgGZfU6:qONp61mGt9sO7CxU6
TLSH
T16F020A39686C6CB78EF2AD45F68727175FA5113BE9962F40D5E81F0C00D7A9C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 65589898699e7609e7d2503270cea577927a6415c76faa7a6192dd32dd0da507
MD5 8e80cddc7ce90afff8c6990c0cab4c6d
SHA1 a65f34739270bf2199610aff938080913d818295
SHA512 7ab9a475ba780401d8814388095079adc4d97e80785309a7b5fb882789ba5bee7dc53fe409fd4f2828cde2acb3ddb613e72ad605dbf6791aa2f592e5ae2cda1c
SSDEEP 192:pONN6O7+39QmiUyeLnlttb0RO2oSBPcNuqkbU6:pONN65d7lt9sO7SBMCU6
TLSH
T139121836B86CAC779EE2A545F5C732174E754127EA8A6F80D5DC2E0C00DF9AC234AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52ed053e-c048-48b4-8927-912de872e588.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\52ed053e-c048-48b4-8927-912de872e588.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e65b0c2ffdfdcb006b7b7a67f4f68a9ada3470becafa36faef019faa4cfae77a
MD5 f474ad36068ecb27ced92d1b2149d6aa
SHA1 e96b954a09b7de8386732dc4c91736fe9491d973
SHA512 97b51096dd591f52a6f0a5a9ac19fe05454d31775f98203315e7a4aa2b6db7102a3fd807e5db220cabf905a71c64611f73d48fc6bd1902cae34ab777b80f2140
TLSH
T131412D59AAFA1158B3B76F56AFF3646D447BBC772E06E46E10010E4E0663A40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download