b53dbb7a5f45616a67e80fd34f9d3647c03c594dc0697c49bb773d5199caa496

Analysis

max time kernel
149s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b53dbb7a5f45616a67e80fd34f9d3647c03c594dc0697c49bb773d5199caa496.html
Size 80KB
Sample260705-gqechady4m
SHA256 b53dbb7a5f45616a67e80fd34f9d3647c03c594dc0697c49bb773d5199caa496
MD5 d13b47569f328472d862135212946538
SHA1 37606c6a53586bd714dee0c518b7f201df6c2144
SHA512 7ac5f42639157f1cbc586db87ec01712017f00b816472d79020c8ccc7c40f53800b33d9b288d4b2d6c5c094039f5a8da66488f4ca2ef6aedf0b32666d624edab
SSDEEP 1536:Huk4orTbXoP8BURJgXTtWiDTzJpRXYMt/SwQWZhca1q:rb1LTtWezJ7hq
TLSH
T100830AB9F1A170325E17F970412F500FB93B686BE44C0DA8F194D8F1AEF698A4463F69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2180	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134277048201410303"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{AFC56920-1DA3-47ED-BA33-3247F5BEB2CD}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2716	msedge.exe
2716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3336 wrote to memory of 1584	3336	msedge.exe	86
PID 3336 wrote to memory of 2180	3336	msedge.exe	88
PID 3336 wrote to memory of 328	3336	msedge.exe	89
PID 3336 wrote to memory of 1708	3336	msedge.exe	90
PID 3336 wrote to memory of 328	3336	msedge.exe	89
PID 3336 wrote to memory of 328	3336	msedge.exe	89
PID 3336 wrote to memory of 1708	3336	msedge.exe	90
PID 3336 wrote to memory of 440	3336	msedge.exe	91
PID 3336 wrote to memory of 440	3336	msedge.exe	91
PID 3336 wrote to memory of 440	3336	msedge.exe	91
PID 3336 wrote to memory of 3056	3336	msedge.exe	92
PID 3336 wrote to memory of 3056	3336	msedge.exe	92
PID 3336 wrote to memory of 3056	3336	msedge.exe	92
PID 3336 wrote to memory of 3396	3336	msedge.exe	93
PID 3336 wrote to memory of 1508	3336	msedge.exe	94
PID 3336 wrote to memory of 3396	3336	msedge.exe	93
PID 3336 wrote to memory of 3396	3336	msedge.exe	93
PID 3336 wrote to memory of 1508	3336	msedge.exe	94
PID 3336 wrote to memory of 1508	3336	msedge.exe	94
PID 3336 wrote to memory of 1600	3336	msedge.exe	98
PID 3336 wrote to memory of 1600	3336	msedge.exe	98
PID 3336 wrote to memory of 3656	3336	msedge.exe	99
PID 3336 wrote to memory of 3656	3336	msedge.exe	99
PID 3336 wrote to memory of 4244	3336	msedge.exe	103
PID 3336 wrote to memory of 4456	3336	msedge.exe	115
PID 3336 wrote to memory of 4732	3336	msedge.exe	116
PID 3336 wrote to memory of 1716	3336	msedge.exe	117
PID 3336 wrote to memory of 884	3336	msedge.exe	120
PID 3336 wrote to memory of 884	3336	msedge.exe	120
PID 3336 wrote to memory of 2716	3336	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\b53dbb7a5f45616a67e80fd34f9d3647c03c594dc0697c49bb773d5199caa496.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9cffac188,0x7ff9cffac194,0x7ff9cffac1a0
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,10414046606029858384,13150458386099652901,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,7166192515701861405,10348787494374903994,262144 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,13153202935855097199,18058352047138378695,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,17733678761104157098,7161415740568240239,2097152 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,1908859924237372801,6188717455909657495,2097152 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,14778246145353029494,12786016235753723313,2097152 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,14702058545339008482,2972616190570559473,2097152 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,5026145438785980032,2356900354785939474,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,8467167256629577652,7774749788679949785,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,16733513812817008403,15181110667798773376,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,16733513812817008403,15181110667798773376,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,4612291347498283791,9649115153499973224,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,15307400342276210715,3809319094599703523,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,2125418074253052731,7926064017326053877,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2168,i,3847931745969065142,14721229077253424609,524288 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6072,i,17523368320634168474,13920834514298359270,262144 --field-trial-handle=2360,i,13847502349893681965,10928099746780927906,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1980

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 731aedf1c7f08527416bccf46b1f72fb2878ad14bbdaedf700dd2dcab5bfb251
MD5 3c828090e1f739fa3d6dd67dfcf64d58
SHA1 6569ea2a8cb2529d9711655a05519308e23406b7
SHA512 fdf7ca5c399218d00864f990a7aadd921ae2c9fd6db59b3d4d19fd91b9445e4d8e28d17f36df3672706beb75f4e27372a2135fcfc02d98b3ad8e61eb19c9eddf
TLSH
T13D71F92B06C31859D7604632E4D102027A7EDC9CCF63BD66537C44BEFA0A7E28CD64C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e039.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e039.TMP
Size 3KB
SHA256 fa06b7bce639d31983d62499b0a89200cce261781de40510ff55844620ce7b4c
MD5 11067840940a86fd4ab1efa758154a54
SHA1 7c7377e328391d9812050ea7718669e6afd01eb0
SHA512 72e02b6947c58c72f64f533d5f1784a36efcde0e6dbf0c901b28e499df73ec3c08e4e434041706a76803a1d051c681b7423949ed3ddc284656edf5ffd1c063e9
TLSH
T15B71E92B0AC31859D7605632E4D14206797EDC9DCF63BD66537C447EFA0ABE28CD64C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b6169ca97810137316b0f349e990d5e6be7124d32697e757aab662fe08697aba
MD5 7d918c9b8b219bea218fc9d1023e1bbb
SHA1 79e1df977bc0f3db3d08d975e1f6bc5896f848c9
SHA512 d673d9e107071f613bafd11031e1f0b259ebceeaf9e6596a6ae2ef9874d4b2b9d0729fabcc4e64472fb29a5c6537170bd0cc8b76fc94c1a7ff74e5f889f827d0
TLSH
T18631ADF3C3D486AEC91196F0AB286E2BCE2D0646422C3C5689E4EF1BA3E2575D10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 80696c94354e4e191b08e6a071f2d6f2f7af82a9216663e7fa7d2cfcba1d3d32
MD5 69434949e0c6bb72874fd09dd7bd829d
SHA1 da86c66bf3c947026bc795682bf6e90c4b0dcddb
SHA512 ee759cc21298b7dbcdfadc9fc64eaa7dcb2cbabf7fc83ee769ff8a78098caf6e0bf60eb7729fbd7b89bd2250a178cd56942ddeae88691343bab2ed2aa2becc69
SSDEEP 192:sxZIR3yM/jK1Ml8UQTkJ/f3s0FonIdpHYHW6+WNGYws5Xv9Ig5mJ:sxZI1q4J/f3s0So4HbGAh8
TLSH
T1DC52E9126A38597BCCDBD209FA51BF53D6F5547292900E84AAFCCA0C05E7BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 30ef651485b3a4b06a3b553bb8e67112bbb6ecb9e4038f8580606a9a9c9d8e07
MD5 5f54a37d4a24fa89aaf86689a3b0535c
SHA1 718446e253c56b1065f52f039d3706e66d076577
SHA512 ed782b0e316731b0d2bad8c31a78f6894d4cc45594ea4f958234028fd2501b7aa5c347b5272ffbfb1ebcb4e188be3d3797cafa3b5f1cc38acf1e22a7abdb0240
SSDEEP 192:sxZIR3yM/jK1Ml8MkJ/f3sGFfnIdpdYHW6+WNGYwK4Xv9IgrJ:sxZI1MJ/f3sGNoCHbG1h9
TLSH
T1B142F9126B38597BCCDBD209FA51BF53D6F5047292900E44AAFCDA0C05E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a3d155f5426d99013eb5e969838aee19081ba58e14a2f2ef927978c8b1e12299
MD5 7e285ad6125e0cd289a4fdf984676452
SHA1 c72e0940e32173f6c99c4a467c6f77ae2c474008
SHA512 e4f460c0d2710f5d740e23c0c0359672f8b2686ee98ce87e927ec7ab44a7430623e17bb4791290fa9ea281c04e322b925092a942fed4d85c6ef78593c5f128f8
SSDEEP 768:YF4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dfrohicOaE:YF4jeXmWvmKLEu1jacPLZQdMn+
TLSH
T144D2FA3B240CCB7E4F844E5CED2AAE976ED801CB6A584D5447FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 145bdb789f96c46c3269945f0ae551d9c3010262261a8139a828db0e0f38afc6
MD5 4b39ae65c2c20ffcda0ad009cd2e52b1
SHA1 ae38f7cbd5aea652020dbd5657e906c7bd369b2b
SHA512 0bd50869e39c87739679d8154c434b876bbd739df3d6b2024c0930809d273c38afdb91b42dd9d03f0480aed469addbb21c5649a8b34d86d9861b5415a756fbd6
SSDEEP 96:Kk8gKdO+G5SKagiO0OVOAOEO+OiOmOkWOiOvOPgOMOkK4OBgOG6caS5oqzHnwVRV:Kn95O0OVOAOEO+OiOmObOiOvO4OMOYOJ
TLSH
T1C9914625767A42013CBE290C83949B579A82B153341CA96B7B9C10A2CE77F209EFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

03b8fff8-dd72-4e0e-b224-b505a5b67e4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\03b8fff8-dd72-4e0e-b224-b505a5b67e4a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 7de92a4bf1c30ac7d47ee52ca6fc9741ed3a2b4b7308e6b6bd90473128e594a9
MD5 cc9be61e72d787a5d4fb8e282e3fc69b
SHA1 59cdc79e4fe523810376d531b73e2222ba85c9de
SHA512 b141c22b569fc6a93ffe7d8a91df5111966fe8d7aa44e2044f66d084f886a1d8ab414bb50fcebd7147a715488558309413a19533aefbaef3e06ebe78f9dbace8
SSDEEP 384:XiF1tNn/s3n9SEzsN18TUNTUlIl3fCSNgWf+x82YEX2fZFhOObjI9G6w74Uk:SF1j+93UwgFmG62fzh29MK
TLSH
T177A25A3358A8D97B9DE29B95F94A36138FF4417BCAC56AC5E6DC9F0C019B6EC030A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f784eb52c4a1d31c66a83706257ff80eaaec6bc94d20a2cba928e4eedceb060f
MD5 8c803965b8e5e7a3f6ce0acba66dce4a
SHA1 cd60bddc469a0ccf507d2b042ead5abc1bc56f54
SHA512 be4282f75a2ef494c8fdd4743c0bdd41b87f9b2fc039b4782a8f7be12288b2d52b5cf122b1e7afa5585986f3c77460317d512b65cd5e22fb7a895d9c7e878145
SSDEEP 192:EONs6hZ0QmiUyGIpc/+jVLjzor2Yl5wOZxjU6:EONs6oepu+x82Yk2ZU6
TLSH
T14902D935A8786C778DE2AE46F48737135FE4112BAAD56F84D6EC1B1C00D769C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 db34f9be1eaf88b9f608f26ae2a0faf09a8b067cab89d4b14ba68e79b5ae756a
MD5 aa409a57e54bff14e7038873437ae85f
SHA1 9a2e977f2f0908d153d8ea19d00bd5b074db81bf
SHA512 935ecc95127c7f0a273dfbd809fbe89dd2fbc7db6dc09cd19bee567908722f0aaf1c80e9f2d050d7cdb389478527e9b5c3b349cc6d93cf26a0fb48bf8cc9f293
SSDEEP 384:LtNn/s3n9SfsNr3fCSNgWf+x82YEX2vdFhOObjI9G6w74Uk:Lj+9U2mG62v3h29MK
TLSH
T11B928E326868AC778DD29695F44B36138FF4553B97C92FC4E6ECAF0D01CB6AC431A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 412d5d7bb52d4e13ef129de0f1f724f4cc5d8abb6ba5848afdd3819ae8653abb
MD5 b815600e3a990b2bde22f8c965f83919
SHA1 a6def69fee452da98746f097846057d3e72b1941
SHA512 c5066a675a3024ce635e49787f9cb53d78185b9615d0a9a6f4b0d3059280944229b8f5c182bbe046f53604df106e06217bee8f598dab14729deacc4747fb6b4a
SSDEEP 384:8tNn/s3n9SfsNrufCSNgWf+x82YEX2vdFhOObjI9G6w74Uk:8j+9UxmG62v3h29MK
TLSH
T181928D326868AC778DD29695F44B36138FF4557B96C92FC4E6ECAF0D01CB6AC431A812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3ef7eb9ebecc5dc708fb95718bafed4b77792c785c0510394ca8f8a5bfa6efd1
MD5 81db531f9887a8dda89e1d37400a9587
SHA1 de67eb59d89d3445a87e5d9f2d0569a96d3b15f3
SHA512 bd654233ba4909fa32bd5822e1aa385ccc008ebb5759af6cfa5ea2c9088d4812cb096fda506a80a34945af921ae8fcdf0badea369d66d930077c8ac2fb28dac4
SSDEEP 192:UON+6hZdQmiUyNICc/+jVLjzor2YEXxEUmY5cOqzrq6U6:UON+63XCu+x82YEX2V9hU6
TLSH
T1E012FA326868AC674DD2BA85F48736139FE55117EE897FC5E6EC1B1C01DF69C130B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df29c7eb-0532-491a-be00-2766d9ddd079.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\df29c7eb-0532-491a-be00-2766d9ddd079.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1b0842eacd669e2b8d237a586a3c39188226c91c7c6efd6259dfb12a719837fd
MD5 0922ec71e7f91bef62c63fa8b4fba23f
SHA1 bd075960e96b1ae37d7140786aa2ffcc26589851
SHA512 3d5f7c04553a5ecc4d6f6579f7a5b629414a6d095da59bda93defe81c101281601c062805f087599954ab530a0718881e8cb11a16afcf992283f4e6376081a00
TLSH
T1A041F958A6F91148B7B36E5AABF698AD487BB8773F17D45D00010E4E0A23B41C872737
MD5 SHA1 SHA512 TLSH

Submit Download