96fb5a1e6d2e73c999c368756b6ca34291330887f94ccff63b332bb94d4bca06

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Manual/complete_dashboard_print.htm
Size 23KB
Sample260714-pn13gsft21
SHA256 96fb5a1e6d2e73c999c368756b6ca34291330887f94ccff63b332bb94d4bca06
MD5 02ba3d890e273f6a4116789dae0b986c
SHA1 47dc090f09287da22e0555aa8e7d980fb6fd2d97
SHA512 84f8fdd432f8877aca0052df4fe0ed7912d2e2cad74a97fdc1cd1d050df4f1221d8d1ec4e3fd22e7b29d677a022973ded3870caf739df77763428e5d6d9e8da4
SSDEEP 96:1AiGTXde8QELQiMuBRqQ/QtLQIQiMuBRqQ/Q+LQJQiMuBRqQ/QWLQeQiMuBRqQ/i:SfeoTfOvp
TLSH
T1F2B2CB63B655152E91C391E8E4219FE43686930AFB2B5074BBF15378D28DEC02D3A4FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
312	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285058771770084"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{936E5A59-177F-4679-90A0-C1CCBCE735F9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe
2092	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2092 wrote to memory of 3512	2092	msedge.exe	85
PID 2092 wrote to memory of 312	2092	msedge.exe	86
PID 2092 wrote to memory of 660	2092	msedge.exe	87
PID 2092 wrote to memory of 660	2092	msedge.exe	87
PID 2092 wrote to memory of 4728	2092	msedge.exe	88
PID 2092 wrote to memory of 4728	2092	msedge.exe	88
PID 2092 wrote to memory of 4728	2092	msedge.exe	88
PID 2092 wrote to memory of 4944	2092	msedge.exe	89
PID 2092 wrote to memory of 4944	2092	msedge.exe	89
PID 2092 wrote to memory of 4944	2092	msedge.exe	89
PID 2092 wrote to memory of 3688	2092	msedge.exe	90
PID 2092 wrote to memory of 3688	2092	msedge.exe	90
PID 2092 wrote to memory of 3688	2092	msedge.exe	90
PID 2092 wrote to memory of 456	2092	msedge.exe	91
PID 2092 wrote to memory of 3324	2092	msedge.exe	92
PID 2092 wrote to memory of 456	2092	msedge.exe	91
PID 2092 wrote to memory of 456	2092	msedge.exe	91
PID 2092 wrote to memory of 3324	2092	msedge.exe	92
PID 2092 wrote to memory of 3324	2092	msedge.exe	92
PID 2092 wrote to memory of 556	2092	msedge.exe	99
PID 2092 wrote to memory of 556	2092	msedge.exe	99
PID 2092 wrote to memory of 2884	2092	msedge.exe	100
PID 2092 wrote to memory of 2884	2092	msedge.exe	100
PID 2092 wrote to memory of 3992	2092	msedge.exe	102
PID 2092 wrote to memory of 1732	2092	msedge.exe	107
PID 2092 wrote to memory of 3516	2092	msedge.exe	108
PID 2092 wrote to memory of 4212	2092	msedge.exe	109
PID 2092 wrote to memory of 4756	2092	msedge.exe	114
PID 2092 wrote to memory of 4756	2092	msedge.exe	114
PID 2092 wrote to memory of 2180	2092	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Manual\complete_dashboard_print.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9d006c188,0x7ff9d006c194,0x7ff9d006c1a0
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,4093090875840747168,2471142319629139447,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,13710690453878118489,14721161500420025467,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1828,i,15592250066930422365,8573510611188853361,262144 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,17463396809483785765,11262956549970841654,2097152 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,10227759810747057352,16583289369890518035,2097152 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,16925148442857651702,2703326065682383264,2097152 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,3711660066368366324,5470989633874192555,2097152 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,10469775138244195824,17553772894030749409,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,14632260834773300019,15062015237852155153,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,1428412202058803261,2372757411621719400,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,1428412202058803261,2372757411621719400,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,2945555495825984911,602226234860635562,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,10091116226809454657,2234282522457125828,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4796,i,3903382571601211503,6973080107224542949,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,17443113249110774561,12237818825711067699,524288 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,3958317006434433877,4767388706529675449,262144 --field-trial-handle=2312,i,8169612557606430196,8458445506289814970,262144 --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 994380ffd288a5f1a9acc9eb76a487a55b12cc1daec839d811240f6cbdc4da3a
MD5 f5ed4946834be586ac6410ed88740a7c
SHA1 6108ce368e8b3bb8012956bb25606c3b16835c7b
SHA512 76bf60b37c50422ab125edd3da70629e685408a106655a9b7e5cb6aa7b6a9000c76d8ac2f5dc85e58e893b61bef9b539b9488ac894f1fc1338a58944dc9f4711
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1E5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1787fe6b8a50c4b3c650be4ebb8dc159e9337dd9ff65a38b7154a2a0f6653948
MD5 0bb1cfb7e610afbd8789be2ec74b88e7
SHA1 8bf931accb2bf6feefb6f6676b1596e8165baea2
SHA512 dcbc8c8ea0958a5abbefb7a207263de91d84228340289e5a6fa3087e16c0fa7b23bc1ec64af72dd50d9ec5a11726816e3a2eeefc6b7f45678d287809cc231659
TLSH
T19D71E92B06C31859DB605632E4D142067A7EDC9DCF63BD66537C447EFA0A7E28CD64C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58eb07.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58eb07.TMP
Size 3KB
SHA256 80b45eaeccdcddb482e5df982edea50a23e99c02abffe517c80da9c3f28177b7
MD5 fd5bda8417d70865e8dc689a6c7a741b
SHA1 e3d50f89cfcca49203526f3ea91b1d506da608b6
SHA512 888cc4423bc3c9db5e43d759c0c731af306f60a8854e0d4ff68fe3ebfbfc7af10e77358182778fc3dc111271fea9fd00f46c585b41f9569fe4cc22bc126f207e
TLSH
T13171F92B06C31859DB200632E4D14206793EDC9DCF63BD26537C447EFA0ABE28CD60C8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f6bbb8be78877a83b52ace5638fb950d47b8aad2770be4ed88c9661eb4d12e3f
MD5 071db9c4ae62e8d91aaa44e1de0ef8b3
SHA1 f588c811402e710343488ec2f023e6ac73bc1c66
SHA512 754824a580acc4922af4268d3ecaef0befd650a7b5becd276529a5e563c5164565ba85d2af7937358d0e0f449c6aac3ae8b35b3a4e8e5ab1008bf197a73ad6d2
TLSH
T1B6216BF783D5856E8A1156F0AA28BE2BCE2D0501431C7C1986E4EF1793E3465E50295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 03d8d67b20694f4f50f77f589719517b81701538daad2f58b3c0930ef7a78ad8
MD5 47eb0ff5edb5a4d5010b4a06c1967646
SHA1 9df3474de1175dec009bf505b6a8a32c6e399eb8
SHA512 7bf726e7279a2d99b9e34f89e197ab1721f51f63c0fa1aa0f4eae917a75b6447e6c1fc97350bfe97270f9b449f19ea1d12ae7371644564142b8df3596eb11f3b
SSDEEP 192:sxZ0RwyM/jK1Ml8Mkm/fnsvezPIdpd6HW6+WNGYwKPEVIgrJ:sxZ0eMm/fnsvCg0HbGT9
TLSH
T1AB42E8126B34997BCCCBD209FA51BF53D6F5457292940E44AAFCCB0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8ff64410e3d2fd532f43968891e155c1b8dcabc29375f400cc2301ddcf56c760
MD5 77c4bf31b1342b90cb7c081bc34da956
SHA1 39f96c747c30d3c46642177fd7c8bbca66e3500f
SHA512 dddac6bb745cd5175ebcbc553185f4206aa8c5a10e86824ea672508b5d443dc867a949805200c8613ea116c5f979a873135fcf3b690d265a41dfa87e5955b571
SSDEEP 192:sxZ0RwyM/jK1Ml8UQGkm/fns8MzPIdpH6HW6+WNGYw2kEVIg5kJ:sxZ0eqtm/fns8wgaHbGcW
TLSH
T16D520A126A34997BCCDBD209FA41BF53D6F5447292900E44AAFCCB0C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 301c535d1ab291dd89eeba8cb7094d3884ee92a0d89da10b5ea1e08f7312e316
MD5 ac6aff9b73d12b2765f1058fd31c0457
SHA1 55f353362b47176573447147d958849dd63e3a46
SHA512 cc74ad87987f00c63b0bb817d20f11a283218e73bf8ab450c82f2a3fb10b85ce2318d7e6c6cd87fadd2ed2af608b3577a793928e9989afa778cf9e3d464b90a5
SSDEEP 768:ZG4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+diroh/2Cc3az:ZG4jeXmWvmKLEu1jacPLZQd5J+U
TLSH
T185D20A3B284CCF7E4F844E5CED2AAE976ED801CB5A584D5047FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ebf2be4b7c723300fbbcea1c518a99fea58669f5814f7ed8e0cb7952ede391c4
MD5 eab71eb7a47cef0cd017da0013787878
SHA1 c77410f45c927bc12bdcfc4d3a519fb311ac60c0
SHA512 8be7fd0889bda3f16ce245816342be1611d8a2596cf8d437320d3de7c91f657ea9a681efb01278c883c5c7f4439ab8b6e4436037b9dca1e0d2c883a09fb2f89d
SSDEEP 24:KdZ5fZUZ/ZmaZjdZLZHZv4Z/ZD+ZmIjZTZvKiZIhaZNZv1EZZZ/SmZRMZE8ZXZks:Kk8IXKdOcfyl5IFKagIWZIdKKAwfyv
TLSH
T10091616AB6B646013D7F3A0882D48B57DA82B067340CA46B7BE840728F66E115DFD9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85ada459-ab98-482b-99ee-e46e46bd2a6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\85ada459-ab98-482b-99ee-e46e46bd2a6a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 2fd9d0cf709147826a5841e9cb87f431861de955256593b82e06f767fc202f7a
MD5 c98045728299827b65e124ab1d74d27c
SHA1 8f9bf700b545ab181528c033e1494fffc18e3fd2
SHA512 e74a4864e7049c7c8089ae74d74d451daa164068859251ee4ca4ebbef9479d56b837446cc01dbe49d6d5bf14ec929e7e26f2466b34e43fda5d6fa7d295299941
SSDEEP 384:qtNn/s3n9SfsNgrUF+0B1uf+x82YEX2XFyOObjI9G6w7IU1:qj+9U++ue621y29Mr
TLSH
T162928E3258289C7B4DD39A65F58B36279FF8416B97CA2FC4D6EC6F0C01DE6AC0316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 35bd06e29878bd2c0ce9b9f230f4ecced22d6b0bedb249583d10d583eaab223c
MD5 8eb80f1ae8323ec3e5e946f0489097b1
SHA1 0b551e9c876d83811ab784a8cc123a42f1919cc3
SHA512 169179fc94558ddf483861d2837279a9f2532cf2f5ef06500ff363562db397073ecd63dbd4c1f1684b7d85ae604eec2d1f5d21bf218848e7e40bac5c294e14c6
SSDEEP 384:CtNn/s3n9SfsNgMUF+0B1uf+x82YEX2XFyOObjI9G6w7IU1:Cj+9UV+ue621y29Mr
TLSH
T107928E3258289C6B4DD39A55F58B36239FF8416B97CA2FC4D6EC6F0C01CE6AC0317816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a933a5a6730921eeeabf2fe6d8098f8bce9fcba60b05791cd71defd3cff070b7
MD5 7564362f94dc7dcdae8b5f8f121e567b
SHA1 d5a4ce25de81c803d386528041921bcad6b24a54
SHA512 09bbda414fd1db340eab3f194be2566f8eca2ae001d5f904483ac906cff13465b8fab3f45f58a1ad5d69ab0b6a498a8af71be9ae02a05c201cf239e543b312bc
SSDEEP 192:EONs6hZ0QmiUyNdpc/+jVLjzor2Yl5wOZ2jU6:EONs6oMpu+x82Yk2UU6
TLSH
T18E02D935A8786C7B8DE2AE46F48737135FE4112BAA956F84D7EC1B1C00D769C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7c0abe1bafbdb677dd5b15bae5948ecb9e5c69b935808dd28e80037a810c87f3
MD5 cd17e45cc0683d68d2a6f5bc0bd75a2f
SHA1 f5a80a7e054e37aeadabf7a258d03f66faea7941
SHA512 92ad6cf6436a85db68fc20299a787d4e227c6b6606b39847ab8ac36f8373879bc7d1ecc7926770f073357a98092d12c07a241b280c314e4059c744e242ac0e1a
SSDEEP 192:GON56hZzQmiUy3dKc/+jVLjzor2YEXxEUmL5cOqErqs1U6:GON56JAKu+x82YEX2A9yU6
TLSH
T1D212E9326868AC6B5DD2AA55F48732135FE55117EF8A7FC4D6EC2B1C00DF6AC130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 15cbd88aba91020710600bbdc8f3cf734268d39d21d626163f5e433cc078f04f
MD5 c3c7e451e13d907406ee9285cdda99a6
SHA1 dd256aad19f387bf2e8d7d909de5a5bea33467d7
SHA512 9431e16c62d31da02ea57c985d1c82be6062dd9086bbb725792d46743d11d2ea5c2393798766c741e5d387da1abc54d031c4ad77cb130d93d9868225801ff64f
SSDEEP 384:GiF1tNn/s3n9S1zsNg8TUNTUlIlMUF+0B1uf+x82YEX2xFyOObjI9G6w7IU1:tF1j+96FwgD+ue62Ly29Mr
TLSH
T1B5A25B335858CD7B9DE29E95F98A36178FF441AB86C66BC4E7EC6F0C019B5AC030AC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4dac0935-f61c-4fa8-817f-6ccf77bd8575.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4dac0935-f61c-4fa8-817f-6ccf77bd8575.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0d57ae9be8bc6e5926a8f09df16814dd75dcd1da9fac0f823338eb57ed26cbaa
MD5 70c0e27d37718ff36f220719b55b1f18
SHA1 a0438972a2561365231f63237527744c8f063784
SHA512 6ecc00405db509bc3d66ce76608e11f315da7b301ddea01867882779d771a3418591b6b53cf45781980e56fa12646e2d0e5f19b748766732b730b301ac18dcb4
TLSH
T178411858B6E91148B3B7AE5A9FF6A96E847FBC721F06C55E10110D8F0623B44C4A1B37
MD5 SHA1 SHA512 TLSH

Submit Download