7adc0963a1fcfa87909a3cb9bb16fce555c7ca6a0becdbf8da4d75c117656d04

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
j83097940198pwd=zI7hjf11mhi3i51/index.html
Size 1KB
Sample260708-wt77baev3j
SHA256 7adc0963a1fcfa87909a3cb9bb16fce555c7ca6a0becdbf8da4d75c117656d04
MD5 6a88642faa9bab4e5e8052ebc224feb2
SHA1 9ddb8753abf3332158cffe6737922c8fe9b21cc2
SHA512 716e104b76fbe7bb581a82d912f406ad9926980fe95e23e4757dcffbb106ce5a6210750fd0b1628e930b33d263df81bc0b70672fc92f98e12f9c1c7b16e05ea2
TLSH
T12221DF235AE260080250A1186485F988E4AE42FF9F28620436DD5DBF3FF1710C37B6F9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2656	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280080536452646"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{6B5044D4-5A5E-4BCD-BC00-5A570B2DBE19}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1232	msedge.exe
1232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 3020	4300	msedge.exe	86
PID 4300 wrote to memory of 2656	4300	msedge.exe	87
PID 4300 wrote to memory of 4484	4300	msedge.exe	88
PID 4300 wrote to memory of 4484	4300	msedge.exe	88
PID 4300 wrote to memory of 4484	4300	msedge.exe	88
PID 4300 wrote to memory of 3180	4300	msedge.exe	89
PID 4300 wrote to memory of 3180	4300	msedge.exe	89
PID 4300 wrote to memory of 2848	4300	msedge.exe	90
PID 4300 wrote to memory of 3364	4300	msedge.exe	91
PID 4300 wrote to memory of 2848	4300	msedge.exe	90
PID 4300 wrote to memory of 2848	4300	msedge.exe	90
PID 4300 wrote to memory of 3364	4300	msedge.exe	91
PID 4300 wrote to memory of 3364	4300	msedge.exe	91
PID 4300 wrote to memory of 1072	4300	msedge.exe	93
PID 4300 wrote to memory of 4464	4300	msedge.exe	94
PID 4300 wrote to memory of 1072	4300	msedge.exe	93
PID 4300 wrote to memory of 1072	4300	msedge.exe	93
PID 4300 wrote to memory of 4464	4300	msedge.exe	94
PID 4300 wrote to memory of 4464	4300	msedge.exe	94
PID 4300 wrote to memory of 4244	4300	msedge.exe	98
PID 4300 wrote to memory of 464	4300	msedge.exe	99
PID 4300 wrote to memory of 4244	4300	msedge.exe	98
PID 4300 wrote to memory of 464	4300	msedge.exe	99
PID 4300 wrote to memory of 4552	4300	msedge.exe	100
PID 4300 wrote to memory of 4552	4300	msedge.exe	100
PID 4300 wrote to memory of 4552	4300	msedge.exe	100
PID 4300 wrote to memory of 4680	4300	msedge.exe	104
PID 4300 wrote to memory of 4976	4300	msedge.exe	117
PID 4300 wrote to memory of 3512	4300	msedge.exe	118
PID 4300 wrote to memory of 3212	4300	msedge.exe	119
PID 4300 wrote to memory of 3108	4300	msedge.exe	122
PID 4300 wrote to memory of 3108	4300	msedge.exe	122
PID 4300 wrote to memory of 1232	4300	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\j83097940198pwd=zI7hjf11mhi3i51\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x264,0x7fff4ed6c188,0x7fff4ed6c194,0x7fff4ed6c1a0
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,16114107344348677222,2068070215430841241,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,11573823565449457386,6287838791467126204,262144 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,11581599952594556151,9549916423591610654,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,2832473537297140894,15336092451396073556,2097152 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,16513430465201208611,13056921327514406175,2097152 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,13297851091516388796,15913432606414464297,2097152 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,14307762034195217561,13959759075748277767,2097152 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,17810022326899684668,1678270851614194364,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,1522252505136487039,349512706314645899,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5504,i,15916237894161700584,10123098656708128782,2097152 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3618539327794305249,12494459045945498671,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3618539327794305249,12494459045945498671,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,17729181227331185706,18235509271710409803,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,9036259868797291697,7356014196443381632,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,11488589509007559218,13718722275666244007,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,13082129877356447251,4895898571517062897,524288 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5208,i,15805534885813339701,10578141818492942799,262144 --field-trial-handle=2308,i,3782637600647401300,3364052584886006655,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1232

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5040

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

97024b92-3475-40c8-b62c-77f655f7de4e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\97024b92-3475-40c8-b62c-77f655f7de4e.tmp
Size 16KB
SHA256 23afe58294afe18f362da5f8d4fd78783e981a830f4b20c2dada60c7c54528c4
MD5 faf6d3bf5dbddb158053b8d89cfc3732
SHA1 9271eeb2e340ba05ae18bd1ad149d08dcbef68be
SHA512 b9d2b3e64c7c705ae03fc0b616b8c066b2991e3e2c245f815a0569f0407abd2edc21885ca689dac6d20521e2d9745d149098069c7220e90d421a40bc55f68ccb
SSDEEP 192:uALsNO0Qt+FIBbahQmiU1rAu4aGBPKm2+FdGr5VkE6cdN7aqbScjmqYoJXmg+U:JsNO0ebSuxtdMbH7jScjmwYU
TLSH
T1C5726C326C75AD679EA2A146F4473653DFB89077DAC42F84EBEC9B0C01D92EC1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 29f455a97ea0d82fcaa3cce087c6b9c78f691e4df4a858d87d7ad76f27cfdcd2
MD5 32d3b5508e2a2732273219f28aad82ea
SHA1 2c22e9c53ee3e40946d1e72a3140e4bcc3503347
SHA512 7183d580afff1b8621dc22d1c50d39781a3a011f24f545837d463157f71080671f946fed74d72d20c71bd8e4b57306725b66814a545c2f4a86e03e3e0236fd5f
TLSH
T1F2712B30C69604E8C7A249FC63C1838039F0C5E9FD872E60A2AC6AF86C467DC83DD138
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 91081dbb70f556b4a10edf6387de569c5b0aca4d92e0d2207d9234f804495d35
MD5 5a9485f1e16d669678fef7e1e8963904
SHA1 bae650f4fa67fa0805a7c61626739ce5bae2e908
SHA512 c7d29db0b28029d5d734dd5d0e7b450f4b7b51be73008811ebde4410d2c06c0b3671d5d478dbfa595a93318ce75b79b06232e613612448426818099fa15a7fa6
TLSH
T1A5218EF3C3D5856ECA1156F0AA18BE2BCE1D0505432C3C598AE4EF1793E3465E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bd750427592f8c09d10eb8cb88d94065cefc87c1e7f37e4115fc9fb7c0232a61
MD5 93464cdcb63f35864ceb304506fd65c1
SHA1 7a4c23f46185abbe195a9c65770d2dc34caf23b6
SHA512 554c7db7fc5b573a99e91ad82e2494dbee19b61ae4a697dce2f062e7e02453ab680aefe8bd72d1afce51725a32ddafb796b8f8e7924286bf62c78257c887c6bc
SSDEEP 192:sxZPRIkI/flsDZgPQIdpd3HW6+WNGYzQoNAIgU6J:sxZPBI/flsDqJJHbGlU2
TLSH
T14A22C7526E38A93B8CC7D219BB15BF53E6FA503295951E48F7FC860C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 193c1fc4dc2f1d805833c5248e1e4b151a679078d43b21d3624d07307c8432ba
MD5 af56732a63df4db3c5d64d213c746461
SHA1 7fecb67de5603902594a845ac33fe472cebf0983
SHA512 0e8b3affa7d1cd306e61f29e04ad21ce085ac5e920309aa8b45d484f37a520763999716794f5205e73894e5f2c36c61217d6e7ff2fb12944456da5be1ea22f38
SSDEEP 192:sxZPRIkI/flskZgPQIdpd3HW6+WNGYzQoNAIg5I6J:sxZPBI/flskqJJHbGlO2
TLSH
T16422C6526E38A97B8CC7D219BB55BF53E6FA503295951E48F7FC860C04E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1c7b1235f9043fe3812146e8dca62e7e4bb2e70a08a782a14295c0370662ce57
MD5 b917fd6bdb2bb26243dcb3aaddb36147
SHA1 e5b9a6a28c9b28b2aada7e516c92d834b523ba78
SHA512 493f9f827c57ad6c361d88402a2b4a490ee76dc60bf7a277463cfac50ffca8f3818a5d89a085a487f6eb09f62a6a09a41fa908c614ddac0d1a476e2a301ca578
SSDEEP 192:sxZPRUyM/jK1Ml8MkI/flskZoPQIdpH3HW6+WNGYz6NTtAIg5G6J:sxZPqMI/flskCJXHbG7442
TLSH
T1F752E7566A385977CCDBD209FA457F93D6F9147396901E44AAFC8A0C00E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ebc0ceca5d94756c152740878a2b3e73a0b5713686b5b9d2d912c921a27d243e
MD5 fe968202de0b580fab1602383a28372b
SHA1 cf2f979e90ced9e62fa7b3fd28282ce5f87bf3ac
SHA512 0d81a781491a82c4d8dc86c19667ce2e6d0a16639b06549c8cb746c08d7dd98214760df02f8d51cc4e2d46c5c95823a0475d8e3c3d0aa901ff54d6e8894d8a0c
SSDEEP 192:sxZPRIkI/flskZoPQIdpd3HW6+WNGYzbgNAIg5G6J:sxZPBI/flskCJJHbGy42
TLSH
T17232C5526E38997B9CC7E209BB15BF53E6FA503295951E48E7FC870C05E6ACD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 edbda31fe7419ce861c002f06c724bacd03d5d6d2b53711917ffd244ffd8dc23
MD5 79192ba37814450e9c0f0c568929b26d
SHA1 cbe5f9cf6b9830c7271c40752319a9974aaca397
SHA512 08af680da45d57b5ae90fc6630dfe89323a06d387bc0358cd3c415218e9af049e50b0a7e66879a7f086ff1490d8dd8a4d718d3b0de8d4e39d07345c8a3dcf112
SSDEEP 768:o7W7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjHroIHjiJYW:o7W7kf0Wvqidau1jaa5LA3jUqW
TLSH
T1FDD20A3B680CCB7E4F841E5CEC266F966ED801CB66988D5487FA884C03CB6EA51175DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fdbbb37f1a6fb0b474a43803dffe6573a2acad083bb14d0d0b10a330c7ea877a
MD5 3a76cc5123c6e538ec9783a686ae614c
SHA1 cd4b2b8856aed786469b040905b51d6647c618df
SHA512 beb1c6d41eabfc653a74a8d6ac34702f030832f7e8581edb7e09a66eeac207a59a04f10a172a0fff9df9036f90307e47edb938810b51bea3e07ddcd82e8127b4
SSDEEP 768:oak7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBHroyHiYk:oak7u70WvqiEau1jai5LA3BUQk
TLSH
T13FC2E93B740CCB7E4F801E9DEC566F967E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c3521a8ed89394ee3a0dbde51cee4424032765a79dcc302c7b0cc5b66f34e98e
MD5 b01e86c41873f9d8134fa459ba87bbf8
SHA1 d77eb03d44e73d1cd22480b42d8a648ae908ee01
SHA512 c7d1256f08fae81c76155a7a2dd2aae844e2ec93b55e2605c2fe59e733944659e82098ae1157b04bfe4eece4fa10d43a9473aa494adf00d46bef620c2f389090
SSDEEP 96:KIbCKcfruKsY+WfmKEcczc5t7xxNWlqggVNK4sg8:siNhfzc5t7xxolqxVHsg8
TLSH
T1D9910485353B4A923D7F2944A3A6853B9E8232A33414E86F7BB910A11F67E114DFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a306650e-160c-41ca-9b88-f6b7bfa8744e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a306650e-160c-41ca-9b88-f6b7bfa8744e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 b99c0f297fd96b3c46ca665c23241776009d5c5dac91f5dad069c2cc783bfcaa
MD5 ed59e70c2b382316c13fc09bedfb8efb
SHA1 21645dc5cf798e760120a94a414eeccf2631f808
SHA512 95ff750192af88c7ec0962a29397c989e4083f3cdb1cf25c3c0454fe8ece800fab740af71e3166037d0a10a8098a08755c99618e43fe041fa2c964dd5a854607
SSDEEP 192:ugLsNOpQt+FIBbahQmiU1rAu4aGBPKm2+FdGr5VkE6cdN7aqbScjmqYoJXmg+U:VsNOpebSuxtdMbH7jScjmwYU
TLSH
T180726C326C75AD679EA2A146F4473653CFB89077DA842F84EBEC9B0C01D92EC1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4c4af96e38663d1670a21efd8aeb1dd160fe547a74d8db08f0e3f218719e0fb5
MD5 117d4bf30013301a65cd3a16459d1836
SHA1 eb3a7add5d26b6fa0cff3bd0e1e3aa792261901a
SHA512 a4467241443b65612d00f503812cdb99852483cb1bdf2353f25d7c47615f510bc7803e5eeb9f79d3a3e5be1a908d03699d7499a8117b7b786c3bc57a5e5f913c
SSDEEP 384:5iFuzsNe8TUNTUlIl0ebSuxtdMbA7jScjmwYU:QFu7wgpNzkA7j1jR
TLSH
T152825C335CA4D97BAEA29645F94A3253CFB840B7CE846B95E7DC9B0C01DA2EC1307D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9a9ed864a3f0a9f485dca0e692c25245c8ec96d6a3e62a50269c9b99ab19b2d0
MD5 dccf645331882c3bad5b9cbfc8fd679e
SHA1 e3399ad84cc8e0bce1974956705b5789f795e635
SHA512 2674ecde68d0793e5bdbb5989ec123b261da8baf02bab4773acf80b95bf793ed4f8b12fb7f75ae61b11af368688b09596b476bb840b9e380fa322c5db3ecc32a
SSDEEP 384:5iFuzsNJ8TUNTUlIl0ebSuxtdMbj7jScjmwYU:QFumwgpNzkj7j1jR
TLSH
T18C825C335CA4D97BAEA29645F94A3253CFB840B7CE846B95E7DC9B0C01DA1EC1307D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 788c937b6fbaa20a80f91312c5a182d5648966fdfe9d7b6808b040c2f8239867
MD5 bed66423440b15167faf89d25f2d9eb0
SHA1 f8ac02a32820b5354d93adc41009d1a9fc14200d
SHA512 2eb83f6602867c589315b3993780913d2ec5a98abad5b70c5350c35e498704acc2f0dbe1fdc87fa98b15b746ad69d9e56ff4f1b637475d0524cffa0175a8250f
SSDEEP 192:MONG64BAQmiUy/1SW5GBPKm2+FdGr55aD7DZU6:MONG6eAIMWidMc7dU6
TLSH
T16702FA396C796C7B9EB2AE45F48737175FE8113BEA952B44EAE85B0C00D764C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5fef61daa424c3fc10c4374b7f0bbe85fadac6099aed3f12d1005980a430930d
MD5 de3300ade82643350592db86ee8e16c8
SHA1 33275f9adcfb01c6f9482562d2ba9fa546a7e5be
SHA512 92921b03d8f81fd1fbc461aa91028d6aaa8c0fe357116072372bb0f44b65f2c42b1170365a464179a3a36528a9e025b003398aabc9c5a7753be0edf7a319fc3e
SSDEEP 192:CON364BFQmiUyeSD5GBPKm2+FdGr5VkE6yWw7aqbU6:CON36ejiDidMbP7jU6
TLSH
T10C121A326C796C2B5EA27545F48736039EA5423BEA857F41E6EC6B0C05EE6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 22412406b59641a68b68d223337a7c02aa9b07b8ad418d775559100e00a9bd4f
MD5 e1810750c8abb9c676a4404cde5dc911
SHA1 5f1ef6f7cc1969fb18ad1f5364f3e54803972f9d
SHA512 e3af6ede9982144eb836ec40dca703af976a2988b4a44713dec292c7e8190fca2711fb7169c1725f5a76fa1938c269c726c5385e2dd11939346015a43bb6b5f9
TLSH
T1C7412668A6F9114CF3B76E56ABF6B46D987ABD372F06D09E10110E4F0632B40C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download