7485aa20fab48554dd136617e96fb3a6c24eb38d296a31b14a10823d58c67b10

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 18:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
original.html
Size 11KB
Sample260714-w8l8dsbs3q
SHA256 7485aa20fab48554dd136617e96fb3a6c24eb38d296a31b14a10823d58c67b10
MD5 96dd06ac8f73a0a25b2ff35a2bcdf0fe
SHA1 adc85eb7aa0cfb54fcec11947f6dc0d2e4c2b08b
SHA512 79e0a3ac6055f588738f4a3df76c495d92e921b42b4e1102e2616b235fd7558ff5fdff4e44b1dcf71f64249a237d13db69b75b81a42bad7e376301b9d1f6afc9
SSDEEP 192:qkssxkfzYju12ahE+DCObOczuznEkoMwobvbnylfvh473rHg0BZ8:HxkfzYju1RZOt5/Hg5
TLSH
T17032615877CE81770223828B6031AB8DF29FDE82D3A68986F2FD17772B92D047D17519
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4372	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285277630899259"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{E842F9A6-15E1-4DAF-B38E-F34492C8472F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5116 wrote to memory of 3752	5116	msedge.exe	86
PID 5116 wrote to memory of 4372	5116	msedge.exe	87
PID 5116 wrote to memory of 4964	5116	msedge.exe	88
PID 5116 wrote to memory of 5044	5116	msedge.exe	89
PID 5116 wrote to memory of 4964	5116	msedge.exe	88
PID 5116 wrote to memory of 4964	5116	msedge.exe	88
PID 5116 wrote to memory of 5044	5116	msedge.exe	89
PID 5116 wrote to memory of 1132	5116	msedge.exe	90
PID 5116 wrote to memory of 1132	5116	msedge.exe	90
PID 5116 wrote to memory of 1152	5116	msedge.exe	91
PID 5116 wrote to memory of 1132	5116	msedge.exe	90
PID 5116 wrote to memory of 1152	5116	msedge.exe	91
PID 5116 wrote to memory of 1152	5116	msedge.exe	91
PID 5116 wrote to memory of 2092	5116	msedge.exe	93
PID 5116 wrote to memory of 2092	5116	msedge.exe	93
PID 5116 wrote to memory of 2092	5116	msedge.exe	93
PID 5116 wrote to memory of 4412	5116	msedge.exe	94
PID 5116 wrote to memory of 4412	5116	msedge.exe	94
PID 5116 wrote to memory of 4412	5116	msedge.exe	94
PID 5116 wrote to memory of 840	5116	msedge.exe	98
PID 5116 wrote to memory of 4172	5116	msedge.exe	99
PID 5116 wrote to memory of 840	5116	msedge.exe	98
PID 5116 wrote to memory of 4172	5116	msedge.exe	99
PID 5116 wrote to memory of 3312	5116	msedge.exe	101
PID 5116 wrote to memory of 4100	5116	msedge.exe	111
PID 5116 wrote to memory of 1676	5116	msedge.exe	112
PID 5116 wrote to memory of 1812	5116	msedge.exe	113
PID 5116 wrote to memory of 2824	5116	msedge.exe	115
PID 5116 wrote to memory of 2824	5116	msedge.exe	115
PID 5116 wrote to memory of 4552	5116	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\original.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff4d27c188,0x7fff4d27c194,0x7fff4d27c1a0
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,6994794777518053560,416232233866147205,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,10484080085317402896,6948670954451016350,262144 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,779378757503968688,15529273723139324886,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,15843120264119096092,17296590108016906244,2097152 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,17585102747275482424,6327382395929784626,2097152 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,3984719319231361716,8780552293015785517,2097152 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,15626540268351421672,634361599204831145,2097152 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,12697641429857433758,915293693866682876,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,6550642583875553109,6596452008033611292,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,15262840095009040821,1271254483087465518,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,15262840095009040821,1271254483087465518,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,17452996742541551600,2289681572778249287,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,4627666078625315242,9781453956753396364,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,5844420563682268526,14329472961686281899,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2900,i,5220217626510571499,3573082198351967243,524288 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4336,i,6228061122184803878,6005569176035734798,262144 --field-trial-handle=2344,i,16062659869036755144,6240095498044137296,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4552

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3984

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8fd9a59614799dfef5e64b8a6d988301d4478672da80e06073ad7ed3d201ff2a
MD5 1c54573b383f2dc30a21b37181ad9e92
SHA1 b98adb28ba398603be7ba572534ff830a9f60aff
SHA512 620a934520bfba47a6836b7d8be6afffd2903194fcc70ca989b04c78e6b704ad1ee0203e96af5e1cce2268a8970319b493eedf4c3222214da1da455ae5884356
TLSH
T11F718158126BC98AD7211331E4E33174FCF28FA90EDFFE8511855BBE19E1F6E6126448
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f8b3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f8b3.TMP
Size 3KB
SHA256 0b843c4a0474e2b40087313f28d7e62ab1ab6de1dd5038964c3202b1be802943
MD5 c1dd83b12046cc0df030208bbd53dbf5
SHA1 a13ebfd0013174a69bc990af932ccfc7b4080c87
SHA512 b77aac3762680ef4f60d7b666533b41b04499f538c2a2cecb4d09367de87b372d0335bc970c0ecf99620192b86e3bea36e59425d2c9a9e6a9960e87a04c9e0db
TLSH
T1E8719118126BCA8AD7201331E4E33174FCF28FA90EDFFE8511855BBE19D1F2D612A408
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 676cb654c483cad6bc56e3a2275a861ea3b9ed8ef0a1f53d8d35c9f1c2088b99
MD5 f7b3c043cb7688cde811b1d4c8c1275e
SHA1 61520cd3826060d16459e2a1dc766f5c6cf85cbd
SHA512 5ee7516e3c35eedc274b0cc69c4a5cba2428d85b7c8c3d82e8481546ec730b10a73062fd07ada9a74637f55605e4184fd1f9e544c8c725e9064a0e822231fd2e
TLSH
T1D721ADF3C3D48A6E891156F06B24AE2BDE2D0506432C7C5989E4FF2B93F2475D101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a4a2377aadfe1d4af1571e7e308664f08ecaaf7fb8fd33d6daf0446ff63a0763
MD5 256c9671360b752747effd8faae9d4cb
SHA1 c01ccac3e5f572d9c802db8bd04ad8732d3090d6
SHA512 49c8e692a4bf97dcbb5b74ba68f337faddcad2d9b1a2eb233a55c2a892b297f4d4e209bcd9e49a361902d611c7de5c64e57db2faf7a306269a0c30f6a632b9c4
SSDEEP 192:sxZ/Rt1yM/jK1Ml8Mky/fjXsJzbFIdpdnHW6+WNGYwK3CbIgrJ:sxZ/hMy/fLsJv2ZHbGT9
TLSH
T1F642EA126B34597BCCCBD209FA51BF53D6F5557392900D44AAFCCA0C05EAAED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 93235561192516c5d1b548673e7f257d08786d9361072eaeb61c6a55a404d017
MD5 5364cc636557a91a23c4bee791d28cd9
SHA1 d1168ff51de0f8a434f41debdcb7002b2c70fc9b
SHA512 180c6e9490ce45e2f8aa5bb6706cd1b7b47a0d11e79fe47df16f7109641464b716c5af4639113746018a6ca9253302bbe7e4f13a3c9b88bc540eccf1d4268b30
SSDEEP 192:sxZ/Rt1yM/jK1Ml8UQXky/fjXsazkFIdpHnHW6+WNGYwwsCbIg5gJ:sxZ/hqUy/fLsaA2HHbGey
TLSH
T1D152E9166A34597BCCDBD209FA41BF53D6F5547292900E44AAFCCB0C05EABED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 396072472bfbf3060e8f7129bb644bce402c54ba17c35180936bdfd19e8afd6f
MD5 c5a329768187ca60865880b8939bc912
SHA1 ac3387b5041b60e25597dd3c3ea98630dcd6cc23
SHA512 e30a4877bb810727cc6c3984c12b4e9c9479b6516e5868322a9ebf7065529d4840e08bc7dc82caa743d8501ad0406f60c256297bddd6774739998329f63588a2
SSDEEP 768:j84jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dcrohNhcGaT:j84jeXmWvmKLEu1jacPLZQdHbah
TLSH
T16FD20A3B284CCF7E4F844E5CEC26AE976ED801CB5A584D5447FA894C03CB6EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 601f7f68c8c2c3638a74cb4c9e08ff5cdd3263b30fd6d9e5ebe06ebd182ae840
MD5 e7620d2f6d80221af0fcfd6309938fe1
SHA1 727be969d8d8791b4ece0012b8b19b4f0b03ba25
SHA512 aef1466fd2b8b7441fae651fd1f3781b6291a8f316e1d660ad64cde464e2c1db9c984505bd758b2a68e6c4f24c4a72dcb77a534dcd200329df5b9ff88d9cb0d9
SSDEEP 48:K88I7KZiEzyNdIpKGkcGXIdKok4DyJ4ITKB60z:K88QKZi6mdKKGk5XiKokWa4wKB6S
TLSH
T1C2B1546232BB63113D7E2D089656A7265781B0A73218A42B3BED44F20F27E251DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 41981923ab32336301f7e085374195aa4ae7ab6eb4693dfa6dcccd413f690403
MD5 5f6df0016f0a922b3b0f7feaf9de63dd
SHA1 6192d438d9fe3594c2267a272cf453d7f3d525bc
SHA512 7e4a158e7d18059ff409e2768e20282e35f11be1b2a033b9257ca6e35fbcf51fcba98518163ffc1c00a4e3dcd8153f184e4addc83fd0fa752942824780fb7c66
SSDEEP 384:gtNn/s3n9SfsN6KPFUbf+98RUlXU+2mIF1OObjI9G6w7uUWA:gj+9UFLqlUlm2129MGA
TLSH
T1CA929E3668389C778DD29691F04B3A238FF8456B96C57F84E5ECAF0C04CFAAC0316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ad298af1777624295e262c22f27c4cf4aa1264ad30bb4520fda6a13e054cb2fe
MD5 ab981ab0e26de7cc39b72e02382c8c9f
SHA1 d2ba6d78ddd602b9890cf87522ab43e8e48f9141
SHA512 8cb0134e70d13fcf1b6357f10767a49c5147cdd6b4d7a60a336767721357211a76e49f38ddac2ef687489775c12cbfc136f6ab3d9d55ef121af5950606964e5c
SSDEEP 384:tF1tNn/s3n9SnzsNC8TUNTUlIlHPFUbf+98RUlXU+2mcF1OObjI9G6w7uUWA:tF1j+90LwgALqlUlma129MGA
TLSH
T1C1A26C335868CD7B9EE29B95F54B36238EF941AB86C5BB94E6DC9F0C00CB5AC0306D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 23916f3b38bfea210ece72c758e61040a8166bf26f199d2a7b4fc597cb4f8398
MD5 c2254718eaab12f5bafc9d9efe162c24
SHA1 561f7261a7802308a9b17c706f41618dcd417090
SHA512 015063101ef4ea7b59dbca3b022b5d576610a6af762a1f48bb555bdeb663c0e85054398e71d33ea9cbaade7e8ca80cb4e53ab21186317bfabbe4ecd0215529b2
SSDEEP 192:EONu6hZ0QmiUyn7pc/+jVnjzorRUY5wOZNzU6:EONu6oopu+98RUn21U6
TLSH
T18F02FA35A8786CB78EE2AE45F48727235FE5112BE9956F84DAE85F1D00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0274241e4156a0314d511253749059a4043a8bd352759f6e0058d0984d47cc68
MD5 f4db1f165dd85ab3a80914338e39112d
SHA1 917b94de0f92437eeb46c5f1f03521884c159ae0
SHA512 3cec94e4be338125d17ab04b9f77d73d9089ad47194a71f60350596feea2beb3342adbeb856ee0bdae26b9391b0a9af9aeffe58129f8dbabca8832c1fe62c3a6
SSDEEP 192:1ONT6hZ8QmiUyy75c/+jVnjzorRUlXU+2mE5cOqCq1U6:1ONT6g35u+98RUlXU+2m391U6
TLSH
T1D5120B366478AC675DD1E681F08732139EE95217EAC9BBD0D6EC1F1C04DF6AC274AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f18d33679eff12ce7bde10d72dc2a4c4331b6d3467db158357663817b82dfdc5
MD5 d30707d7d6a5bf0f868bdc29040fb9a7
SHA1 69668dafaa114a3462f3ec857f24c7ea77565059
SHA512 9dac12f2119c867c54b115028de1085ae99eaebeecc5668e7db757d3c0b09b887ce78bb8e6b54103de5d8900b95fbb72b08fd0b96d56cdd98e0ee03dd143b557
SSDEEP 384:ttNn/s3n9SfsN6HPFUbf+98RUlXU+2mIF1OObjI9G6w7uUWA:tj+9UkLqlUlm2129MGA
TLSH
T1C3928E3658389D778DD29695F04B3A238FF8456B96C97F84E5ECAF0C04CEAAC1306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0e34a817-a77e-4eab-8d19-21aac26a7920.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e34a817-a77e-4eab-8d19-21aac26a7920.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c6b1c552cdfd7173e220630b110b94b1d3fba7ac6e2f3b352f3835ca6afa605c
MD5 9c0a713859ff284175bef1c1121a0f51
SHA1 9fb7e255f636f8429f406b812975896c18baf51f
SHA512 7a44fdd4da170b67a225fefb85f6d774ee4c2d4ed0248da2d1522e644371029e9f82611468a734c65c0e051bce5d54e551e8f8e88ab0cfe7e6cdeb613afd794d
TLSH
T1BD41064CAAFD1108B3B7AE5AABF7A86D487B78672E06D06D00010D4F0A23E40D971B33
MD5 SHA1 SHA512 TLSH

Submit Download