4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/07/2026, 04:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download_8494a6b7-301b-4507-8cfd-b916e3182fe5.html
Size 11KB
Sample260704-ev2bqaaz4t
SHA256 4b74a7d1d2299dbf4c1960b84ca8872d5031a7c91545cda6e89858402f67f466
MD5 a140c402079a345674827ba8030c93fc
SHA1 ccbd4f63e520d1efe873156f1887e2ea125d72ea
SHA512 1b79b5bf8d348036ac0bd577db7511f3a324f25d52ceb041da4ef642c283781b912bdd03cb340386e51a8ebc877a679ddd4d63021dfc374c3e1c9a762a225b73
SSDEEP 192:vRkNI7gF/I/yd2JkhBmZwZ5/0OcYAEhi+YR39GqtZ4MGLgj/3bf4t0UfPH9Hcnvx:vRkNI7gF/I/yd2JkhBmZwZ6xY/X8YLKr
TLSH
T1D432947394F2142B5162C1D51933B34EBBE2E453DA4A591073BE46CE0FC6DEBDA2720A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4580	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134276121936598215"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{6CB549AE-4F92-4DF2-9312-96CBD7872B83}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1944	msedge.exe
1944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4408 wrote to memory of 2356	4408	msedge.exe	84
PID 4408 wrote to memory of 4580	4408	msedge.exe	86
PID 4408 wrote to memory of 1220	4408	msedge.exe	87
PID 4408 wrote to memory of 1220	4408	msedge.exe	87
PID 4408 wrote to memory of 4100	4408	msedge.exe	88
PID 4408 wrote to memory of 1220	4408	msedge.exe	87
PID 4408 wrote to memory of 4100	4408	msedge.exe	88
PID 4408 wrote to memory of 4536	4408	msedge.exe	89
PID 4408 wrote to memory of 4536	4408	msedge.exe	89
PID 4408 wrote to memory of 4536	4408	msedge.exe	89
PID 4408 wrote to memory of 3996	4408	msedge.exe	90
PID 4408 wrote to memory of 3996	4408	msedge.exe	90
PID 4408 wrote to memory of 3996	4408	msedge.exe	90
PID 4408 wrote to memory of 468	4408	msedge.exe	91
PID 4408 wrote to memory of 468	4408	msedge.exe	91
PID 4408 wrote to memory of 468	4408	msedge.exe	91
PID 4408 wrote to memory of 3296	4408	msedge.exe	92
PID 4408 wrote to memory of 3296	4408	msedge.exe	92
PID 4408 wrote to memory of 3296	4408	msedge.exe	92
PID 4408 wrote to memory of 4048	4408	msedge.exe	96
PID 4408 wrote to memory of 1696	4408	msedge.exe	97
PID 4408 wrote to memory of 4048	4408	msedge.exe	96
PID 4408 wrote to memory of 1696	4408	msedge.exe	97
PID 4408 wrote to memory of 2112	4408	msedge.exe	99
PID 4408 wrote to memory of 436	4408	msedge.exe	108
PID 4408 wrote to memory of 2272	4408	msedge.exe	109
PID 4408 wrote to memory of 556	4408	msedge.exe	110
PID 4408 wrote to memory of 3380	4408	msedge.exe	112
PID 4408 wrote to memory of 3380	4408	msedge.exe	112
PID 4408 wrote to memory of 1944	4408	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download_8494a6b7-301b-4507-8cfd-b916e3182fe5.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff8ab63c188,0x7ff8ab63c194,0x7ff8ab63c1a0
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,11057280041478848103,6030519462715971861,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,1642044004539796504,3760894670608147088,262144 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=2964 /prefetch:2
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,14409620560807975164,16351177444248758366,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=3080 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,8477110945664764721,8762696548901789078,2097152 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1469750148565376142,3872278918430594224,2097152 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,9343026751842700014,8819421593147837278,2097152 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,15965479854148372293,15118046304486476479,2097152 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1433928297292402716,14771603718194461798,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,3543223428003323310,9363792171939677986,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,6793777075771099273,7293532246468102274,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,6793777075771099273,7293532246468102274,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,4530851727950739987,5128490813177980549,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,1898017695959673208,1368659241393832014,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,3632003288798797780,3128835249789559802,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14159996459706587119,5628329283869416889,524288 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,5657829288459626159,7823265770906589218,262144 --field-trial-handle=2968,i,9936979961329347363,11910382363282531007,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1944

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f78a4015c9fcfbc07edbc92249ac6e24fb42105f1a1e5a4101ac838ed20e5447
MD5 ea194b9e2736023b5ce9f51d2bf6ec0f
SHA1 bd21b5d5ea56ceb3a1c34a8b49c37100d252cbff
SHA512 6b0ea6d4e7b4c0214637094e16de8769bca52fbf96392e0afb1bd26d5816c0d7b6a5b2b6738a52e739242933dfa781e56ac120efdecafa0736626a56c363508d
TLSH
T12271301C222A7593F3131174DDD2E6DBB8B2809E49776F1D0088D7FEAA1A715816F50E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593f51.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe593f51.TMP
Size 3KB
SHA256 5ca69298c5fe50e99a351595bb1f552fd8ccdbb99ca28948897650db7ba94114
MD5 03e59f7b6342ce59691ebeb0bb3e0333
SHA1 ee9a4923e796094cb8e673ca1753a3203ef75193
SHA512 f0b08c45465a6c39c85d62d67aeb912bf0b88f16e8cb2dccdf8abb6052b151e90220294915016bc4da1dd34392cba624bff83bc6182959d7057df07b65966fde
TLSH
T157713E1C222A7593F3131134ECD1E6DFB8B2809E48776F1D0088D7FEAA1AB25816F40E
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8438c8dfc1d9b5998d9a50b4ec0ed6bdc24981d7b59b2f7f2ff7a3f14ba41cba
MD5 e3764a0ce321203c8946951bcf869e24
SHA1 cd635f4ac652c5f93ca0d44bb1d0e6c34b1e51cf
SHA512 86c3a0c5e2cf1f25e91a25dbb76c5f900276ebd3fee9f883bc5f1543914b1a1b22ab7ed22d83f2ebc101c0309532c607706691c2f47afa0ffc2dbce92dc0e29b
TLSH
T185218EF7C3D9866E890156F0AA28AE2BCE1D0906432C3C5AC9E4EF5B93F3475E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 91e76bf9ccbc5de07005f1bd786b58394a9fdc11012fbc807deb3f244d9ffa8a
MD5 4b994f69212176cf645425b0cb59bcc1
SHA1 28f76ada0e47385207c1f8eb4998e115881b2d60
SHA512 418e0ede213fd9820333b7016bc599149163f6f7b6c7fbdbaa3f011ccd33f464bf05649ef5b435208b889607e0551f58ca1855b212f4be3da26ff06355ff149d
SSDEEP 192:sxZkRoyM/jK1Ml8UQLkJ/fIsV6FESIdpHXHW6+WNGY4Dcu2Ig58J:sxZkaqgJ/fIsQ+b3HbGEm
TLSH
T1F152D512AA34597BCCDBD209BA457F53D6F54473A2901E48AAFCCA1C05E7AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 45fabf3e4ec073887a8e6dd76169eb260050a06c3321e184bf38dcb1db1c3bcc
MD5 9878e677db8c2028d3ad4fafd507da56
SHA1 641a323f27c602bd64f6fe1756c6b16e8b0253a9
SHA512 ddc1c4f26141f75f1973df34a5c9c09b8f3d5d35115035c71abf4e650665976cf69338efc0a99fba2ca5b5bfcbbd606971b0ca24ca12846461af5f552b876184
SSDEEP 192:sxZkRoyM/jK1Ml8MkJ/fIsD6FDSIdpdXHW6+WNGY4wL52IgrJ:sxZkaMJ/fIsmBbpHbGj9
TLSH
T1CC42D6126A34597B8CDBD209FA557F53D6F90473A2901E48AAFCCA1C05E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 691b6d36d16253a7136694fc3abfb2b7f76669ea9e30890ca56e844212e4f39d
MD5 84c9bd375aa25afc0c84a83ef2ca6131
SHA1 7e2e9dd690e58275b5f76acd6edebf6a49205ef3
SHA512 42d680c8fe19d964367546ff016329ee9e86e597e028fd41df95a412634f05600a472115e755baa48ba99ab0e5c1a0acfc85a90febc0598bf613d49ed1f4a42b
SSDEEP 768:CM8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdtrojkDUnnj:CM8iJPNWvx76ru1jahALocdGwUj
TLSH
T17FD20B3B680CCB7E4F844E9CEC2A6F966DD801CB5B984D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 358e314691f13f7a022a6cac6fd6c355bfb7e6f5aa305f47bb0bc35961ddda2a
MD5 1fe4e9f5a1993be284a2c60a1d35dc1d
SHA1 015803e833e0024b77ff02e49cf9bd9b0e56f836
SHA512 358452e374746bfbb274055a9926718b42d151531b8081dae65a6d0768aaae84779e3dec45a846c0ab2c5702fa196e234800e99a022fb6db1ad0ac47333f02e4
SSDEEP 96:KMEQKV6uKcAKFGDFSr/VPTXWbAOgHXK42gZXc9lYrj8HoZs4q2P:izj6FSr/VPTmbAvHN2gZM9lYrj8HoZsQ
TLSH
T142917F16717B52012C3E28489A90972657C3B4733018E4AF7FB902B28E27E274EFD9DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59db24.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59db24.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f64f9f558fb2ab395211bc95a288cebc5abd736d66d8c2c22d55e4455848a394
MD5 675685069cb4980708b58d092287237d
SHA1 831942e901066ef2f21bf8b160f2b67357fdd226
SHA512 240270f6cf19276c00df399e2e3a25b2065e7a6f0d3a1e44291be0aebc33f7c08ddd92c128da1c872664d3f5035a36a1e7eb979c59ea7aee49f54dbf40ffb81d
SSDEEP 384:dtNn/s3n9SfsNqXZ6NnUkD8h/Xt06yVOObjI9G6w77x:dj+9Uac7yV29Mt
TLSH
T1DC928E32A8686D3B4DA39595F58B36279FF4812BE7C92F88D9EC5F0C05CB1AC4306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 0b17a1dcf808b966ac050e04f45c4adb1f7ceae7b4c0dc43dae701fbda620ee9
MD5 477644e3bea2f2a17ad35b38aa759ffb
SHA1 8f534aea211ed02ef1bbf014049007b67027c0f6
SHA512 924338ca89b432327c67ad50e0886ebd55d5add132874cc822e45a02b6d6dc7160289737f2f72ca5ba1d3b2376eef2aa8be71078b75b7193b836fc41b96d2e4c
SSDEEP 384:liF1tNn/s3n9S2zsNy8TUNTUlIlaZ6NnUkD8h/Xt06LVOObjI9G6w77x:sF1j+9d/wg3c7LV29Mt
TLSH
T132A26B3398A89D3B9EA38A95F58B32279EF4416BD6C56F94E6DC9F0C05CB0EC0306D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a1dcd01791b3427d24572d97fd56caefa95ad0c014f2034d053aee3f2b03f3ed
MD5 cdbe477925078a70f1e5df95f258a760
SHA1 cec5864216be3b94bc0a5bd2f7fa13dc15f9fbdf
SHA512 742cd3c36acd68f777f86121adb303a4fbb3a0b69fcddc612606aac62b3e80ae7a5eca0ea9863c037afabbab9919a9a766e114f0f9f5afbced752b0053109e27
SSDEEP 192:gONl6kDfQmiUyvPZ903ajzorhfQimlVVU6:gONl6ghqZ9D8hn8XU6
TLSH
T12402D73568782C6B9EA3AE49B48B37275FE5112BEAD52F84DAE81B1C00D764C1346C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 dd7f6ad7d787675595adec9f5c4ce16c4fbd8fe7f346247ca5f88f90cd130e4b
MD5 f4c63c376fc3d9965e2bc25b7719a6f2
SHA1 e3c8e5ac4fb27f59e2525dc49d69e936ef76c1f4
SHA512 2f346dfa9492ccb9ed28aa9ea58d1ecbd68dfbd1ae3c10bf4c17686ebeface447a62b82dc8c304b93e08e8d0c8012ef59201600aea70382ca24abaf27cdb5fc0
SSDEEP 384:QtNn/s3n9SfsNqaZ6NnUkD8h/Xt06yVOObjI9G6w77x:Qj+9UXc7yV29Mt
TLSH
T10C928E3268686D3B4DA3D595F58B36279FF4812BE7C92F88D9EC9F0C05CB1AC4306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8380579626a359b1e76e726840cf1edba6565776b194ef1d5794f8640a7ac123
MD5 07f8bda824b7a04312357f6413f61a7d
SHA1 5808d7acd5d1644ecbe2a6f37f27974579b23167
SHA512 ae6c1cb9f67f7fe7807b176c2b43b6e7dc48937e95cd5b273d2d0e7cc752db05505b427c588331cec53e3c5bf3a6072a748b1e89b813e72776359c501ffb90de
SSDEEP 192:cOND6k0QmiUy3P0903ajzorh/XHN06RcRbqeU6:cOND6Rk09D8h/Xt062VU6
TLSH
T11F121A36A8786C6F5EA3A985B48732235FA54117EBC92FD1D9EC1B1C05DB1AC130EC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fc9e76c8cd1637b437554f06a7d791887e48889202f8a10a2b6f6902edd892d0
MD5 a23625cbc8d6092bf30a47b2a3909cdf
SHA1 148b2e49623924dc55c67daa30f7f2891879f081
SHA512 6c2a509e17e7b4f7f2df8058cd9dade4ce71931221717fd51a86a5339b7c1bb0f48fe2c83b948a2ccf36487b50dcd0969463591d25f2812510929bf9644cf7cb
TLSH
T1C441F898B6E91148B3B76F5AAFF6A86E487AB9372F46D55E00110D4F0662A00C972733
MD5 SHA1 SHA512 TLSH

Submit Download