fef69c81662ab03facf602e4696329ceff72bb3de381553cd8dd1bf0dc74a758

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/06/2026, 06:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fef69c81662ab03facf602e4696329ceff72bb3de381553cd8dd1bf0dc74a758.html
Size 80KB
Sample260628-graqpsfv9p
SHA256 fef69c81662ab03facf602e4696329ceff72bb3de381553cd8dd1bf0dc74a758
MD5 4a34b01d7b96171f28c14ba760cef61f
SHA1 d8c04d2e666c832b6413a4a0104d8c3a28726979
SHA512 c767ec54b216be03d6f050602910ee5ff9ace5608b7cb4d2ef86cd4cf881f198bf85a110abefcea6680d80ccb0d0f7ea1731877610cc2d5fb05a32cb39069123
SSDEEP 1536:z1oNEr+MGUIgxJ/H9tKiDTzJpRXYddaUwQWZhlP1e:Vrvl9tKezJhBe
TLSH
T1BF83F9B9F1A170325E23F970412F510FBA3B686BE44C0DA8F254D8F16EF69894463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3708	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271001136929889"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{0FF39576-FE0D-4491-8371-D0021B4E4266}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3500	msedge.exe
3500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 832 wrote to memory of 2728	832	msedge.exe	85
PID 832 wrote to memory of 3708	832	msedge.exe	86
PID 832 wrote to memory of 4716	832	msedge.exe	87
PID 832 wrote to memory of 4716	832	msedge.exe	87
PID 832 wrote to memory of 4716	832	msedge.exe	87
PID 832 wrote to memory of 3296	832	msedge.exe	89
PID 832 wrote to memory of 3296	832	msedge.exe	89
PID 832 wrote to memory of 3816	832	msedge.exe	90
PID 832 wrote to memory of 3816	832	msedge.exe	90
PID 832 wrote to memory of 3816	832	msedge.exe	90
PID 832 wrote to memory of 2780	832	msedge.exe	91
PID 832 wrote to memory of 2780	832	msedge.exe	91
PID 832 wrote to memory of 2780	832	msedge.exe	91
PID 832 wrote to memory of 2672	832	msedge.exe	93
PID 832 wrote to memory of 2672	832	msedge.exe	93
PID 832 wrote to memory of 5108	832	msedge.exe	92
PID 832 wrote to memory of 2672	832	msedge.exe	93
PID 832 wrote to memory of 5108	832	msedge.exe	92
PID 832 wrote to memory of 5108	832	msedge.exe	92
PID 832 wrote to memory of 1536	832	msedge.exe	98
PID 832 wrote to memory of 1536	832	msedge.exe	98
PID 832 wrote to memory of 2696	832	msedge.exe	97
PID 832 wrote to memory of 2696	832	msedge.exe	97
PID 832 wrote to memory of 4568	832	msedge.exe	100
PID 832 wrote to memory of 1324	832	msedge.exe	109
PID 832 wrote to memory of 1812	832	msedge.exe	110
PID 832 wrote to memory of 904	832	msedge.exe	111
PID 832 wrote to memory of 3440	832	msedge.exe	112
PID 832 wrote to memory of 3440	832	msedge.exe	112
PID 832 wrote to memory of 3500	832	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\fef69c81662ab03facf602e4696329ceff72bb3de381553cd8dd1bf0dc74a758.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffcf9edc188,0x7ffcf9edc194,0x7ffcf9edc1a0
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,11865348705970006893,6362316229787764253,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,16444024911522327724,14955417377718437617,262144 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,2010858326176259198,3913204855132615544,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,2049283860375780851,14036901631288917185,2097152 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,14310753539273969694,10463170410778947639,2097152 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,13864676547424739624,3690201556534461301,2097152 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,17609898772265365539,16327927755960372484,2097152 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,2770458503576964766,8207534517207287355,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,9208783843459689764,7982388476547102629,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,10953252579527572761,15200571118558831875,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,10953252579527572761,15200571118558831875,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,12203694687378996116,12347673413429130637,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,17622310541456166320,11408656824445015306,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,14828315259687169056,8390109578850738284,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,1415334607678086762,5789657552738211539,524288 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6068,i,1784623711460827987,12522214112134998981,262144 --field-trial-handle=2120,i,10003989016965611442,6386508076004200728,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d35e9a285d60675f99bd987268cd0ca947837b1f1646f007f81a7b05763a3114
MD5 f94623cdc04306fe1b5a9ea9927e356b
SHA1 898ea57398a6b80d67b2a1368a4e7f33e45381ad
SHA512 69dcd95c8e79d41973370e4000ae5fa32eaec5ccab8300eb7f69cfe23d0f014797026dc5912a890e5907b09059d746bcb113fc8c7c65e5663e681a5e7f2c34a2
TLSH
T1A881823311F3C3A2D7D1423062D2607DF9B589EAFD3BEEA6525006766E38389A715B18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58916d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58916d.TMP
Size 3KB
SHA256 a03ae819051cd8d3bcd60c9f1c45a319bf2d06a46172a362598767906d088807
MD5 0a9af5b143476e3cd953d976475479b3
SHA1 42c3a2d49b1bcd48740498b039ea8cc43e9b4e00
SHA512 59d26e0d1a134a8d84154d8151bd2929ce9139c54c788198bf7fd7f646b2899bc2531bd4f1e199cb55f1bf2f72970a6389d7d50524723a1c8fde027d95a7be0a
TLSH
T1B381933311F3C3A2D7D1423062D2607DF9B58AEAFD3BDEA6515009766E38389A715B28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8f36604be2a2ffbf6f41de804a4850765e2680ead99efc7d9b635acca47e35f3
MD5 96202c99aed7ae37d6707f01c6049da8
SHA1 2947d5f46ec318d14425b965e025581d40e5cc39
SHA512 112bbd2f35f117975eb4dca94d1b3ebb38620bd86b973c71614273b78c314512c14f33760b87780edbd8f2fa76bb066af3745dc4420d69fc12d9df5b12b7953d
TLSH
T16131AFF7C3D5866EC91156F06A24AE1ACD2D0606832C3C16C9E4EF5B93F2475D10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9f8b28a5d1352f3cb95065fbbcd7c2c3d8377fcbbbf1bf871d26677a24229bd7
MD5 35fecd1813b866cacebfa2eab17c9910
SHA1 1e2549f333159b44dabcf81fa93a2f0973390bbc
SHA512 4e7ab2323d3055b1ee79e7d68290e887832dffb78277db930605803093aacd35eb2051ea7f231eabbc1fa557c79e384c8fb1e46cb9b118f34e041f93414b7816
SSDEEP 192:sxZ4RhyM/jK1Ml8MkA/fAsXFfIdpdmHW6+WNGYIkB2+eIgrJ:sxZ4TMA/fAsXFQwHbGRR9
TLSH
T18342D812AA346977CCCBD209F955BF53D6F95473A2900E44AAFCDA0C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f2ada8a73140259ccaafd0dfd4eba3679e53164e6a934749d2b6d244dfaf29e5
MD5 50a9924634b74356b45af0cd86624d2b
SHA1 65e44fb22426040933c12addc53bec98ac50f396
SHA512 ecee6e9b246d94ee54ca979ca0cad5786e8d3cc4e0473bd432db6e583f5b04fc8d351c4dea8666dc8cb4b4c460e66dcffe3e02323c9a6e42ed8cf233f6cfce9c
SSDEEP 192:sxZ4RhyM/jK1Ml8UQ9kA/fAsnYfIdpHmHW6+WNGYIFYs+eIg53J:sxZ4TqWA/fAsnYQGHbGdRz
TLSH
T1A252D616AA385977CCDBD209B945BF53D6F95473A2900E44AAFCCA0C05E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 812b9cda24cecfcf7466da07b55a50d17cc5a7a152e4626ba58954dbb4e430bf
MD5 7ef830672bc2cda263f17ef5de016f8b
SHA1 6ac03ec254d3792e79c68162bb546a6c9e050c83
SHA512 25fa038722c7c2f668acbaa13dd4637cee3ca38d15c927c91804d0ea457626e798f12e545a3b78f8b8018c063cb48287d191db5ecc73b87aaea96b847f0a3acf
SSDEEP 768:JBsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9FrooyZ:JBsqxXlWvJD6Tu1ja54LAs9+oW
TLSH
T177D20B3B694CCB7E4F840E6CEC266FD76ED801CB66988D5447FA880C03CB6EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 92cea796fd260669dae0262e2dabbb0fb66fb1fda9cf4349cb9424bc6b6e2e3c
MD5 ea9a5699678e7cec170b2b0500aeaf69
SHA1 04deef51dd40416928e3a96e0c13c751b4f21b78
SHA512 0cd254e6e8f2427c6f91ebdcb11da0b58ba4b55c9d5dc3783dfe80223d720e4e8a6ff7aad82419644dc6456731d847f793fe5463613291144b5498b47359009e
SSDEEP 96:KYbaKYIKOj+Kg8KmFyKecx9OKe4KuBuKK4S:ExJNRfxVj
TLSH
T108E1E501723F120139BD2A5CA2DAAA379E8175633418E4BE7BB950E24D56F214CFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2f76c21-e370-411b-a65f-a1fc7701477f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c2f76c21-e370-411b-a65f-a1fc7701477f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d99e9fe2313319713084f7bc704dece168d3e06da1430936444c7d45762ec0a2
MD5 afc63b3a84ed65f07ea4117ee6392dab
SHA1 3c0e7d59d354f02bc5890df6ad697435f5bb962b
SHA512 b65588024e81f01b104c85081daf65f41b9a96d88bad1b7126554895a5510e4f95bc69d32798e29127a7d56b61e3c21cfeb81e4e0c1262351d085fe7ad0cdabf
SSDEEP 384:dtNn/s3n9SfsNuUYH4b9EnVRNZO5s9NIXmn15wbAjEO8B:dj+9U5VHZOG9NIXmn12bfZB
TLSH
T1AE927D36AD381C375DE39889B54B36079FA4C0B7E6852E94D1DC9F0D02EB79C131AA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f0d299808b9852f0457773f5bdea3180d174f1df9f03e6715ee072446e9ac889
MD5 a61ce5d6e5dfeaf5bb3f9541ae52c608
SHA1 cd66b201d4a58e4b0d094b4db2eb990ad707aa44
SHA512 82350369ff005648c6430a232c6727ef5bd369c21da158047e5e930f9ce4e850dc37b5dbfd4142688bddb0395970808ef77fc1f482c685b168690c4d1090fb32
SSDEEP 384:RtNn/s3n9SfsNuUxH4b9EnVRNZO5s9NIXmn15wbAjEO8B:Rj+9UkVHZOG9NIXmn12bfZB
TLSH
T1B2927D36AD381C375DE39889B54B36079FB4C0B7E6852E94D1DC9F0D02EB79C131AA26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 da95cb375a763c60aeab1c782a8f639c82fd020c390f5b101a0d8d4413799a98
MD5 3d44dc43d600e6d71bddaad98fe6dbd4
SHA1 e503a176eb8c0c3c40d3131cef737c4f4528b0e4
SHA512 30ff8b282d9b2a2b0dd2afb522365f85bf1e9f58cb5b9323371dc40a6465be2d255974affcffbc75fa76683c15def6341c8e1e76a20a9b075ae4d63772a57e37
SSDEEP 384:4iF1tNn/s3n9StzsNz8TUNTUlIlxH4b9EnVRNZO5s9N7Xmn15wbAjEO8B:DF1j+96CwgvVHZOG9N7Xmn12bfZB
TLSH
T171A25C3399284D3BAEE79E85F54B32078EF480B7DA856A94D2DC9F0D01EB6DC130AD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 536d6383a9c41c03cc8f5ed934020b2da1257c34e5b3d9fdec43759726d3429d
MD5 f483660ef83bbe24c3a474d7260f27be
SHA1 eb5f3991201cf8a31b85f9f0df49b4b6aa357fbe
SHA512 de8c98ccca98767fa39f6572debf499522f04465dbcdd35bb53e1aa21ecb0366df15873ea01013d81f99aa224c75e7baa7ae4a19be9a26e0e673bf12ebed94fd
SSDEEP 96:mqONk0QsjpfHkRQ9865ih/cIPURHl8h4otop5cTD/BsPvvk40KQN0kjOmXdwz1qI:tONc6JkRtQmiUyuJW+RNZOmCMh3lRkU6
TLSH
T16902D835BD382C778EF2AD49B98B27175FA4206BB9552F84DAD81F0C01D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 79009e3df4cfa75e07dd46162825b883de43f544acbc8faf46a6a83eee22fd84
MD5 8e19671cf54825b5d397c290f3eba334
SHA1 95027528b4426271d948c507913857425d97d514
SHA512 f828db9858ee5b47142f9e8607d74b9ce053ac41bf863a08d7cc4c67561d49565cdb64938c9f97ebe1545575a97f52774f99b777a1df38852a91a01c021ec9f2
SSDEEP 192:jONk6JkRyQmiUy6JV+RNZOmCJO9+6HVcPqh6U6:jONk6UudV+RNZO5s9NWXU6
TLSH
T1D6120B32B9385C775EE2A845B48736135EA4916BEB497F80D5DC1F0C02EFA9C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a59281d4c81c18319af57245a3f3136f4d0c376bef7ffc8c10c3824ed060abd7
MD5 c35e23d0cba49bb7b25276a37c1db3b0
SHA1 b4c369cf3ba6cdff096ca2bbdbbace6bcab227b7
SHA512 160dffe59ff8229ba17e1ec96164ba3301e806d0966c865fb540f56607cc8559c975fc3144227d1299adbbfa8805c915b914966c27a22a9bf1238b62650ae42e
TLSH
T1AC41175CB7FA1148F3B76F5A9BF7A86D847BB8272E06D45D00110D4E0A22A40C871737
MD5 SHA1 SHA512 TLSH

Submit Download