f3a33ad0c5dcdbba535684fc8f6f8514cc144bea144f099f48e632e724f76eba

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/07/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/index.html
Size 27KB
Sample260715-g32cssgv61
SHA256 f3a33ad0c5dcdbba535684fc8f6f8514cc144bea144f099f48e632e724f76eba
MD5 2d53b20d968ed838e92efec419fb03f1
SHA1 c12bb51b851e94bd28c35a88e4796da33452199f
SHA512 66e2794754798183109d69097ea9d11cff7fa9d545cd230d03cead441a4bb47d0d23b74a85c3286b21cd9ad734042042e5284f438af1c4ac3ddeb46882cb77fb
SSDEEP 384:vN7Y6FCs5XRJ/seq06IfLglbyMaAt1vnE++ggevsu5SwU:z5XX/seq06IfLglbyMai5n30u0wU
TLSH
T167C2A611DA36202DB137462A75E2BA5D3034C117E5639A7EFA5C9674CBCB18B1F23B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2712	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285700594766142"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{BCF977FB-917C-47C6-9933-662CAD36B80D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4216	msedge.exe
4216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe
564	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 564 wrote to memory of 4360	564	msedge.exe	85
PID 564 wrote to memory of 2712	564	msedge.exe	86
PID 564 wrote to memory of 4592	564	msedge.exe	87
PID 564 wrote to memory of 4592	564	msedge.exe	87
PID 564 wrote to memory of 4592	564	msedge.exe	87
PID 564 wrote to memory of 372	564	msedge.exe	89
PID 564 wrote to memory of 372	564	msedge.exe	89
PID 564 wrote to memory of 1460	564	msedge.exe	91
PID 564 wrote to memory of 1460	564	msedge.exe	91
PID 564 wrote to memory of 1460	564	msedge.exe	91
PID 564 wrote to memory of 2416	564	msedge.exe	90
PID 564 wrote to memory of 2416	564	msedge.exe	90
PID 564 wrote to memory of 2416	564	msedge.exe	90
PID 564 wrote to memory of 2148	564	msedge.exe	92
PID 564 wrote to memory of 2148	564	msedge.exe	92
PID 564 wrote to memory of 2148	564	msedge.exe	92
PID 564 wrote to memory of 3964	564	msedge.exe	93
PID 564 wrote to memory of 3964	564	msedge.exe	93
PID 564 wrote to memory of 3964	564	msedge.exe	93
PID 564 wrote to memory of 2668	564	msedge.exe	97
PID 564 wrote to memory of 3528	564	msedge.exe	98
PID 564 wrote to memory of 2668	564	msedge.exe	97
PID 564 wrote to memory of 3528	564	msedge.exe	98
PID 564 wrote to memory of 4768	564	msedge.exe	100
PID 564 wrote to memory of 4880	564	msedge.exe	110
PID 564 wrote to memory of 4936	564	msedge.exe	111
PID 564 wrote to memory of 3156	564	msedge.exe	112
PID 564 wrote to memory of 2732	564	msedge.exe	113
PID 564 wrote to memory of 2732	564	msedge.exe	113
PID 564 wrote to memory of 4216	564	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9557ec188,0x7ff9557ec194,0x7ff9557ec1a0
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,14447571593312773242,12086061048510175087,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,1177557610691001566,9617027560589186644,262144 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,4002176878287702116,10695044267775086493,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,5473180460739859939,8322659875514981970,2097152 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,10630688818780386454,14860538806552557505,2097152 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,3812160421270811753,9401275560601083647,2097152 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,1908144728595483944,5717298454937118767,2097152 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:2
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12915037769583417797,15777151809971228824,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,7499418257990367202,15189939041457517897,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7501107111902962667,457975835117326013,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7501107111902962667,457975835117326013,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,10910226896490151229,2473472055347796493,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,3872624455013096845,18285041316779862242,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,10255324983100560122,12749426382814664657,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,5370657806661762215,14404368364340934475,524288 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5808,i,5001586435051764218,9866549794290260191,262144 --field-trial-handle=2240,i,10396071351759052130,5153063872004296038,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4216

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

8ebe19a7-5526-40d8-a5e0-19cecabfb755.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ebe19a7-5526-40d8-a5e0-19cecabfb755.tmp
Size 12KB
SHA256 d60f048611a062b03cbfeb8fc20a30ebd55958f44374cbefee80b0aa00c72f49
MD5 970cf010836e54c607af1f42fa889e68
SHA1 d29cb8efc7770058a3600832512a1031cba6ce25
SHA512 6b39e6664fcc31623bbdd984c35c90e2ae05dba0a098ccf32a7a718cc1765df33c90248527bed35b7af80695f7d20eef3153d92208a39e1b489a33f2c7e51077
SSDEEP 192:sxZeRiyM/jK1Ml8Mkt/fms+VaqeYIdpdLHW6+WNGYHjI7dn6IgrJ:sxZegMt/fmsUaqepRHbGNda9
TLSH
T1EF4209126A34597BCCDBD209FA55BF53D6F54573A2940E48AAFCCA0C04E6AED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6a44f9332f1e6f158ab645fd3a4bc793fc382053dfbc0c85b9c3f11aa6961327
MD5 3a09c7f5152671b295c1534205baf9e7
SHA1 308b51855739630242e004db77ba5447714101f7
SHA512 0d36277eacd955850f29be79217374666d1fb91b028ca50effc8a29d559d0ddb28ac7aec615c6b2a6b136d5e81849520f0f3cc406782014bfd3ab7ddab0aa448
TLSH
T16B71616547523461F3DE3131A2D206CD7BF38C851A9FDF3746236BF92B267218A7A818
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5863d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5863d6.TMP
Size 3KB
SHA256 1810bda6624c6b8294e4908e97bf6f63cb1374abefebf17a0131255696546ecb
MD5 4832664a40acbe9da40b2727863a5c38
SHA1 b0d3ac2e579afc646840eb777505fc5b271ea425
SHA512 6742e7a67155a3465b5a0ab9f75aa509c2b5a9a7ea11c4dd6829daae30417a728cc26f49da53e4fa7f8c1082de63656ea0687ec2236e271fd6363d17a1042f0a
TLSH
T1F771526547523451F3DE3131A2D206CD7BF38C85199FDF3746232BF92B267218979818
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5d0dcb2aa320476b55eddebce1b88d9c254af4a15fe8dc4267b8893a6cb79a0c
MD5 6466370c4aecf1a93b3abb6fcb739710
SHA1 10489b68f07e37b01247b32247f54796ad03f6ea
SHA512 b163fa3b68bc5afb511fbcf65b5c3e244cc7854628b2de958a69e49a90f22b574b43d1a3d734c8a8f8c4ee76c7bc9207f9a7cf0fd31198473468ebbecd34dc16
TLSH
T1CA21ADF7C3E4866E891156F0AA24AE2BCE1D0606432C7C1689E4AF2B93F34B5E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 dadf217709066bac97a32b97c784af2aef354cb218d41adff3db4aa7229c8f7e
MD5 d1feccad353f67777e73b1194bd8380b
SHA1 130075dcea7146871fb06c65ae5b6944ba54c569
SHA512 f5ab5b3606ae9c7cd224c3aa278c78b60797833243e26912a90222c7093e47040cd7667349c29018cac52d0fbfb68f7df4a7c806c73e77018dcbfdeedf5c3b5f
SSDEEP 192:sxZeRiyM/jK1Ml8UQ/Wkt/fmsdVa3eYIdpHLHW6+WNGYHZf7tTun6Ig50J:sxZegq/9t/fmsDa3eprHbGOxuae
TLSH
T10052E8166A34597BCCDBD209F955BF93D6F54473A2940E48AAFCCA0C00E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d75f3d83be2b0e97b97e452adcd3dea81530ebc0abd81e2fbea7e985995eea01
MD5 63940d4342ed8070cd19cc16937cfba3
SHA1 c818c97a5bc1041de1062cfcb8acab13f461740e
SHA512 e732e740f6bda8d9dd26e2be57d1570c59caeba1e0edfabb6928d3f314f1c6a83fc684f28c6e43c38a6a293487543bd45a7e4e5281e79b70e6d678c8e4b53eb5
SSDEEP 768:zqUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R8roVr0s:zqUZYTMWvg0Pou1ja7eLZmRnis
TLSH
T1EAD20B2B280CCB7E4F844E9DEC2A6F967DD801CB5A984D5447EA894C03CB7EF112759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 63cf6e0e2573993dae1bc755f44bc47adcd4023fb393510be7ca9812d6897570
MD5 e4d039e4ebb9651a5a76379936726551
SHA1 d10bf49ef9b565fd3047a731a6937fdb6723cae0
SHA512 f42c913b1dbd9b58b01f8eb24fda9859488efd4f1bf975c41a760151309c74535ed928177ba3326c8dc4a0b5a4ad443643886ab73af8f1a48e15346fa05c5ba9
SSDEEP 96:KA1eK2AANKK2IKiSIK/KcGMKvqK2jWKcg1:E0RXs31o
TLSH
T1C6D13D2270FA62023C7D6B08876497578E41F593301DA86B7BAC65B14E26E209DFFCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6766dec9-7ade-4f00-ab7c-79fcb344c605.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6766dec9-7ade-4f00-ab7c-79fcb344c605.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 edd3c0deb4466b344e3cebe80e9ecdb7d1cf7d8d098412048788656d98ba45db
MD5 3faa2e11df530f766120343d552f0d8d
SHA1 b5313ab0bc7dbb5607f0d31385756ff5d81fc682
SHA512 338fd1b03a5f9a96b6275ecbcb17ed9c7248c2946811eb0fcf22f446cd2396c5625d1032b99d9679510b42727be8c7ade619f5c4e9b26ab01da2b5be3639eb81
SSDEEP 192:uiLsNAyXQdJtss0QmiU14X+4zX5Obd+jtOwaoj4E94QSnqBidSI:/sNAyX6nWYhzX5od+ROwVMoB7I
TLSH
T13B423C36A4785C779DE3A589F44B31539FB490A7EB882FC496EC6B0C01DB6AC131BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 82e8ca874d5f6f53483e8f862ef25d1bc0f8d6f9acad6287ab0a654cb6b556e3
MD5 8f6c37159c79e710a41546a4df068903
SHA1 4dca4324b62f2179b8354f97190de72cf3da967f
SHA512 ebbe3a89e31b5fecbd1805f6cd29503ac3cd273e64d003e77e98a9c07cff616feb9bbbd75adf58086faaad76a6622402400d7d714105c6b05b388e496ad93f15
SSDEEP 384:TItNn/s3n9SfsNAyZ6nWYhzX5od+ROwVMoB75:Uj+9UzFpOwOEMoBt
TLSH
T181727C36A4286D675DE295C9F90B36078FB480A7E7C52FC496EC6F0D00DB6AC131BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9370cfd984f8872bee9d61565261258919fbbc55fa7cacad82ac568a5f14e5c8
MD5 b69851e92642f32144a263a1519fb924
SHA1 d574ed50c5c95d0f05e1af1ad296a7b1ff43a4ec
SHA512 bf4b61cedbba27f470a18869bb3a01027844779e8d15f26ceacdacea61870711301c0e7e6ee99602292b54ffac34fdddc87566abe351e68e04e9378351c51deb
SSDEEP 384:LbBiF1tNn/s3n9S4zzsNAK8TUNTUlIlZ6nWYhzX5od+ROwVMMB75:gF1j+9LXEwg+FpOwOEMMBt
TLSH
T1C3924B3398589D7BADE69A89F90B32078FB440A7D6857E94E7DC6F0C00DB1EC130AD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4da641d13b0bc091ad9108ec89c5623620c862d41126e647c1b1ce21770250c9
MD5 ab97eec751b7da9d61fe1d32eab30c7f
SHA1 830bcb3585ab1a63e5569b5447e0dc14fba4b9dd
SHA512 172195c4a3f89f1af93f104b53dbabb72e8cb3cacbd591e6867ab9d736c5169e1218f337ed61fa3681728b52bc3821d6af92cbcde680004d3da593bbc1219de6
SSDEEP 192:yON261VWQmiUyLOgGX5Obd+jtOwaojD/aK3w4U6:yON26WLgGX5od+ROwVyt4U6
TLSH
T17902FA36A9286CB7CEF2AE4AB58737135FA52077E9542F84D6F81B1C00D769C2307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 75070db9de1a2c3d0934e52994e372378cf7e0ab0530e547957dde2460ea166d
MD5 d1079f31c646867f6c94ac8173c819f8
SHA1 c539c5927ce864d1b059dc9ac1f26c81c7136a79
SHA512 19c2d9ec330a84b8621e08b777bbb2c7818ba185c225c93b8d835e81307c4ea3001428bd9c623a4de5ef8b6cf26ddd23ae878912e48e03b55dd701545de283a5
SSDEEP 192:JON0v61QWQmiUywOTGX5Obd+jtOwaoj4EWjJSnqBU6:JON0v6h+TGX5od+ROwVMjBU6
TLSH
T1AB123B32A468AC779DE2A585F48731538FA49167EB897FC4D5EC2B1C01DBAAC130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 027d180b02389b918ad00829d9715a98e50e158eb956fc34d27e8aa2ffa53b94
MD5 ae63ed376b026ea7238c3fbf2f3090ee
SHA1 8601f7b0d1a9ce1568097ccdaf494b203ead992f
SHA512 9dcba569acc9f1efc05e3c6074d556a80a8f05de5ec51ed9d586aaebd2b8f1396f3841c8960585353e12672feada66048a03396ffa03ecca5af2d1c6f658c0c5
TLSH
T155411A5CF6E91148B3B76E4A9BFAB96E447FB9772E06C49E00110D4E0A62B40D4B1737
MD5 SHA1 SHA512 TLSH

Submit Download