39ad2e2547b6f41f87f9a23e485db5dd297194fd9b2111b6a4678e9f7038b4e5

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/07/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
j/83097940198pwdzI7hjfmhi3i5/index.html
Size 1KB
Sample260721-ancybsas4k
SHA256 39ad2e2547b6f41f87f9a23e485db5dd297194fd9b2111b6a4678e9f7038b4e5
MD5 503ed75a21cdcc3abf950a9e99a2d8db
SHA1 fe5d6e88e2d0cb688c39e34e6e23ac321fab8f05
SHA512 0db80825b35b02caeea1f3e5a709b72862be5173c9dbb422e92e88b6461d9f9f30a7be2922e5d4897ee6f3beed38a098a6c0f3ac27bf445fcd1cdac63ea2ce89
TLSH
T1B531BB73EA5630AC01509108A009B688C0698AFFDF691B01B38D59AF39F2F50C3776BB
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2652	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290669690601748"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{98C6D92E-1360-4F09-9148-91D57A9751A2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5636	msedge.exe
5636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1488 wrote to memory of 2584	1488	msedge.exe	85
PID 1488 wrote to memory of 2652	1488	msedge.exe	86
PID 1488 wrote to memory of 1636	1488	msedge.exe	88
PID 1488 wrote to memory of 4288	1488	msedge.exe	87
PID 1488 wrote to memory of 1636	1488	msedge.exe	88
PID 1488 wrote to memory of 4288	1488	msedge.exe	87
PID 1488 wrote to memory of 4288	1488	msedge.exe	87
PID 1488 wrote to memory of 4968	1488	msedge.exe	90
PID 1488 wrote to memory of 4968	1488	msedge.exe	90
PID 1488 wrote to memory of 4968	1488	msedge.exe	90
PID 1488 wrote to memory of 3576	1488	msedge.exe	91
PID 1488 wrote to memory of 3576	1488	msedge.exe	91
PID 1488 wrote to memory of 3576	1488	msedge.exe	91
PID 1488 wrote to memory of 1812	1488	msedge.exe	92
PID 1488 wrote to memory of 2192	1488	msedge.exe	93
PID 1488 wrote to memory of 1812	1488	msedge.exe	92
PID 1488 wrote to memory of 1812	1488	msedge.exe	92
PID 1488 wrote to memory of 2192	1488	msedge.exe	93
PID 1488 wrote to memory of 2192	1488	msedge.exe	93
PID 1488 wrote to memory of 3064	1488	msedge.exe	97
PID 1488 wrote to memory of 3064	1488	msedge.exe	97
PID 1488 wrote to memory of 2868	1488	msedge.exe	98
PID 1488 wrote to memory of 2868	1488	msedge.exe	98
PID 1488 wrote to memory of 4556	1488	msedge.exe	100
PID 1488 wrote to memory of 5608	1488	msedge.exe	115
PID 1488 wrote to memory of 5616	1488	msedge.exe	116
PID 1488 wrote to memory of 5624	1488	msedge.exe	117
PID 1488 wrote to memory of 6116	1488	msedge.exe	120
PID 1488 wrote to memory of 6116	1488	msedge.exe	120
PID 1488 wrote to memory of 408	1488	msedge.exe	124
PID 1488 wrote to memory of 408	1488	msedge.exe	124
PID 1488 wrote to memory of 5636	1488	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\j\83097940198pwdzI7hjfmhi3i5\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9851ac188,0x7ff9851ac194,0x7ff9851ac1a0
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,10755188054563921449,12122932454147686241,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,16236366394297472900,2699148143777876254,262144 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,6818050104808754367,13717032743469971034,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,7462451581656799689,2040815924828885315,2097152 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,4136979897737473293,3244999272132967093,2097152 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,17611413521955428179,11202487662959441543,2097152 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,2927823033955865427,3733116148833478170,2097152 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17846464274429035287,3147450891087298878,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,12341888353755550970,9699281621534352372,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,17136724626031923347,7489359695633933401,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,17136724626031923347,7489359695633933401,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,1467183578242088997,17152115419144368140,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,9577190951418363171,10552240825391912521,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,462736823130176858,4629842416190683883,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:8
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,13375014689992214048,6285373616748812154,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,8675821199289688758,8238361689422370585,524288 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5192,i,4434121465620077029,12609428137932614011,262144 --field-trial-handle=2280,i,1946785428137207389,11663973573304232217,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5636

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

9f5e767f-bba6-4ae4-88d2-5c683c4df742.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9f5e767f-bba6-4ae4-88d2-5c683c4df742.tmp
Size 8KB
SHA256 8cee77a1ad51820f58d66467b67b9e2a3aaf8d58f8ee321ed74ddb117dada380
MD5 f0d05c24a3ce0a3d667b6575773c52c3
SHA1 b3a665c6658876a407cf9fa74346887959d53376
SHA512 a19314c9837170fbc5757a18817f7df5461e6f4e3deba78c8a5af3b18bee827ee6c0f477e12af3eac20d7a168fa1449041af28d66f7dead67c20e451999527dc
SSDEEP 192:wONp6JkRGQmiUyU2a+RNmOmos19RHVcnqNnU6:wONp6UiUa+RNmOfI9AKU6
TLSH
T10C12E73679385C7B5EE2A985F48732535EA8517BEE896F80D1DC1F0C02DBA9C134E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e26d6712e16e1f1c66ebbe3402dcf282fbdfa603958e3135fecaf045ac5c7113
MD5 a9b7689d5586a8fad2b750426c30f039
SHA1 f8ad16d742c2772460058c076f8126179703113e
SHA512 3745f7f91648d0e62a2762b04c40bb8d3c88f98e1ad5a9abcfcdf96efa27c001f52c4f36b1468c69b580df571d3f5a8ed3fa435aa5b1827273c17688efe0466f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T1D4B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 605e6a62e99fc5fe1ef86ec9404a045b6da327095196ff1ed36795f53b9463b3
MD5 a876849634c18a07eedc1738eee761d6
SHA1 90db2d7542e3141180b1620282c65b1a0bf740f8
SHA512 99c75e0c85987fa361f56e0b37064d9e3312e1f936b5e02062d5a2ff0ac62f8c69010ed5f44749ebe5be0cdc5b3e82c8cce10d6829c93ad3bb1ccdeb54f83469
TLSH
T19F718F31B25140EFE7D221F224E2528975B0CDDAFD339EB1C15A56F1E639360B6282CB
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586e94.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586e94.TMP
Size 3KB
SHA256 ec046072de948b603010da491cf11cb7242781414c77c5a4be8e29304c85ae4d
MD5 bfe4addd1b2145066e4fdc328510aeed
SHA1 f69f4f0b563e9c03d8a3666ed2f803994865903b
SHA512 13d7a7769374b75458c4cd4816cfbef7099fc2697ff954cdb2f77e38f32a1e4107a4f0b4ad29c88f55f6bcf9d42643237ed9649074a3ce2e6662fff6d35622ae
TLSH
T108717F31B25140EFE79121F224E252897570CDDAF9339EF1C15A55F1E639360B6292CB
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1785b384ac6659fe86e8e7da828e9b27a803c95107098c0ef6fec9340d542637
MD5 101287728633de85e402a182f3660b06
SHA1 6cbaf65e95b73749db241e48484608b4c47ad9f9
SHA512 5dc4f293c721209b4eecea77b8d095704a261d6918aa6e3cf8444f371b97cc3d0287df2c1df585a311b9fe5397f0145624801f879af6037b6164d3fdd8c3397b
TLSH
T125117AB7C3D586AE890116F06A28AE2BCE2D0606831C7C1A89D4FF2B93E3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6511db89c93b99ec8fccdfc404885964ad7058cf88019bbb7431fa0bfd4f406d
MD5 9cd0c08d47e657f305bc3c58a845a659
SHA1 a67f120397dcf7e9ce994f38a32d6e637806d813
SHA512 30cff83e1b89d9c00219dfc59a0fbae1b4cd70bcb9f982b226589bd762dc34b65a64d20398f024816fb1c6f66512eb97f102d46330a210448d004da84a8beb3c
SSDEEP 192:sxZwRnyM/jK1Ml8UQekx/f5sRDVNTIdpHfHW6+WNGYIrn1aIg5nJ:sxZwpq1x/f5sRDVNM/HbGm3
TLSH
T1A052C4266A349977CCDBD209FA457B93D6F41472A2900E44A9FCDF0C05E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2f854d59c4ee05938b5d1b161ce91a8bd231505efca104c31b31442302e748cf
MD5 682bd38ef5dd3141f40f658a1e525b81
SHA1 efe17a4256ed08d0c7868ffc3ebad47b755d9191
SHA512 ef8a421b2378ce68eff8578c2be75979da6ecc692c0e96a7e9dbcf284d3f9b75974eb89b690c11c52c057b4f23948a85094ebadf3481da8f9d2dcdb0f8938b62
SSDEEP 192:sxZwRnyM/jK1Ml8Mkx/f5sbDV0TIdpdfHW6+WNGYIk8VaIgrJ:sxZwpMx/f5sbDV0MJHbGU9
TLSH
T1B242F6166A34A977CCDBD209FA457F53D6F81472E2900E44A9FCCE0C05E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 09fc92f2875b535c71e60503567028e49b0bdec51331607cab7af497222cd25e
MD5 706935143c6fe73ecd3017ddf2c12914
SHA1 f8c4818a790555b92cc455a73b126b71575bb913
SHA512 ba4fca7f3b19a899a335036c2d0f0f26b82032ed0a698d16dfa5af7222b7bf97af45587560c4f185fee2fc215ae3a107a3052e5bdaec4204b215337128cde831
SSDEEP 768:YesqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9broNjo:YesqxXlWvJD6Tu1ja54LAs9oN0
TLSH
T1F8D21B3B694CCB7E4F840E5CEC266FD66ED801CBA7988D5447FA894C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b47a4aa546cd9707dd3f4214232c595408da653c38b16b41da229efcc1738603
MD5 062db7b35cbd97c7e27f1d2bd6c172ea
SHA1 f58ce4cb4e682ffe4e1e592534ebe069f867c1e4
SHA512 7caa76ef26466e1514408049c1af233ae4e1426e512342ea96aa293d72624dc9df65690eabd50c81eda4e6201affdfc2869e3cbe621c8fe4548a816e64429522
SSDEEP 96:KYbaKYIKqawK/q+KkgKtuK9cBN7HrQ3fKF:ExvrLC
TLSH
T1CBA1134A727612523C3E2958B266C5370F8236633018B47F3FF854A64EAAE114DFD9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590d73.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590d73.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ef7e12de025a90100d47aa8137be2699303b2a3e18aa8fba248376ee5eb5cd33
MD5 67ad998f54d5f67aa1401323f77d9901
SHA1 2e0cba36af69033c431114280e61b099c4697660
SHA512 eb96a5063c31facd4c6201d00c6fcff55c04866fa850031ca3e8ea6f5eb365d8f823c62ec7281e6e8b9fb2819c76df4388a877d9a39937f95e493ed0722abf7d
SSDEEP 384:giF1tNn/s3n9S8zsNI8TUNTUlIldVfjLb+QeVRNmOfI9GKDVcl1lIO7w/sERLyfw:7F1j+9rxwg1f/cHmOA9GKDVcLCO7w/jJ
TLSH
T13CA26C3799659C7BAEA55E84F94B32079EF4907BCAC66E54E2CC6F0C01DF68C030AD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8280dc1e966e612d3a9a765433867cc7994a034e5812381a544def4e48fadd8c
MD5 4c27a26c141e078dfe665ba7479fdb7c
SHA1 b215556e345191ceca34687231362a2a01d4bc93
SHA512 b55548640de2797dd13bfae7209b3a2b1e2aa056f1f4887ffa58623309d5bc64ef401ee34b8a382adc70738da7f76704464e8ac560ed311416fda52575553435
SSDEEP 384:StNn/s3n9SfsNYOVfjLb+QeVRNmOfI9lKDVcl1lIO7w/sERLyfw:Sj+9UCf/cHmOA9lKDVcLCO7w/jJ
TLSH
T10A928D36A9365C7B9ED56994F547364B5FF8907B9ACA2E44D0CC6F0C02CFA9C030A939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b51e80445d9d982881cf44ed2f76532d1a1c258dd110d323b4e240da0c98c2da
MD5 64c38f1d81169eca2ecf10e627bc0638
SHA1 b6495a70b64e575b581f8b934e7927f2bede4cf7
SHA512 ea89692389abca41f4847b6d5b56b8e2c3fc3c2eddc964e8e97baaca5fa7061d2f0025d6a980fb1156d5fc54654a6b3ea021c04f117bb57687c6b40fbc200cbc
SSDEEP 384:LtNn/s3n9SfsNYdVfjLb+QeVRNmOfI9lKDVcl1lIO7w/sERLyfw:Lj+9Ujf/cHmOA9lKDVcLCO7w/jJ
TLSH
T1A1927D36A9365C7B9ED5A994F547364B5FF8907B9ACA2E44D0DC6F0C01CFA8C030A939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0edbc8097a4e87bb2be75a77f1f4f17b26939c5f4780bb3038e663613ab5649b
MD5 f5aded33a798edda8165776d86ac6926
SHA1 13ba9452d7196873baeba1302802409e9c1680ac
SHA512 645ef939ac776ad52ce70f918c9c890c00e3acd929a8335c6ff2220b80a2766e0c65c796149a20aed43b66936b690fc35e5a886929636a2efa0186b4b729561a
SSDEEP 96:mqONk6SQsjpfHkRQ9865ih/cIPURHl8h4otop5gTDmBsPvvk40KQN0YsOmXxdwWv:tONX6JkRtQmiUyK2W+RNmOmoTh32RvU6
TLSH
T15102D835AD382CBB9EE26E49B98727135FA4207BB9952F80DAD81F0C01D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9123058b-f7a9-4fcf-a58b-bc7eb8b4c69b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9123058b-f7a9-4fcf-a58b-bc7eb8b4c69b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4e0e1a28d22b5e2fafde88d0923d6ef39274c3c460e19be0396b27ffcc80e506
MD5 fd0b9b14ceb782cb6774260874f96d7a
SHA1 3d460f1fd9de4a5854e2948af3858218324e2edf
SHA512 17438c05a48f30ca981a4ee034a5a83c96fe3636f609d09a38745b65fcb3ef1e52241c801a084d5f3a6fd121bfb48a8c1dd071607d92df5eb526c1cb31110ecb
TLSH
T1D8412758B6FD1108B3B77E4AABF698AE587EB8672F06D05E10110E8F0663A40C861737
MD5 SHA1 SHA512 TLSH

Submit Download