ad3cc24a66bae714bcb1536ba2be070d636f61bbdfedf1e66de4d2a610a4f9e1

Analysis

max time kernel
148s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Login - Used Airsoft Guns Paintball Guns and Air Rifles_files/a.htm
Size 108B
Sample260728-ap8rdseb49
SHA256 ad3cc24a66bae714bcb1536ba2be070d636f61bbdfedf1e66de4d2a610a4f9e1
MD5 67c58a38087e1a243fd14984f663b520
SHA1 d39158107e8711b6d9fbe13be4a3a3156f571e08
SHA512 5cf5428985e4315f7d19fa546e038cbce88a13149772002b4e76dce223270b74313f8fa246368d2486bd06008986671f44a0bf6e1fe5847a23fa8fd2375a4d81
TLSH
T1AFB012F51842000FB660FBE04CCEF2184801C910F0098C40A49031FD54CD70DD8D3790
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4736	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296719981858574"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{7514B7AA-8972-479C-8AD0-377911E5C3C4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
628	msedge.exe
628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1688 wrote to memory of 2820	1688	msedge.exe	85
PID 1688 wrote to memory of 4084	1688	msedge.exe	86
PID 1688 wrote to memory of 4736	1688	msedge.exe	87
PID 1688 wrote to memory of 4084	1688	msedge.exe	86
PID 1688 wrote to memory of 4084	1688	msedge.exe	86
PID 1688 wrote to memory of 4004	1688	msedge.exe	88
PID 1688 wrote to memory of 4004	1688	msedge.exe	88
PID 1688 wrote to memory of 1280	1688	msedge.exe	89
PID 1688 wrote to memory of 1280	1688	msedge.exe	89
PID 1688 wrote to memory of 2036	1688	msedge.exe	90
PID 1688 wrote to memory of 1280	1688	msedge.exe	89
PID 1688 wrote to memory of 2036	1688	msedge.exe	90
PID 1688 wrote to memory of 2036	1688	msedge.exe	90
PID 1688 wrote to memory of 5636	1688	msedge.exe	92
PID 1688 wrote to memory of 1492	1688	msedge.exe	93
PID 1688 wrote to memory of 5636	1688	msedge.exe	92
PID 1688 wrote to memory of 5636	1688	msedge.exe	92
PID 1688 wrote to memory of 1492	1688	msedge.exe	93
PID 1688 wrote to memory of 1492	1688	msedge.exe	93
PID 1688 wrote to memory of 1368	1688	msedge.exe	97
PID 1688 wrote to memory of 5476	1688	msedge.exe	98
PID 1688 wrote to memory of 1368	1688	msedge.exe	97
PID 1688 wrote to memory of 5476	1688	msedge.exe	98
PID 1688 wrote to memory of 1976	1688	msedge.exe	100
PID 1688 wrote to memory of 5152	1688	msedge.exe	103
PID 1688 wrote to memory of 5868	1688	msedge.exe	104
PID 1688 wrote to memory of 872	1688	msedge.exe	105
PID 1688 wrote to memory of 3432	1688	msedge.exe	113
PID 1688 wrote to memory of 3432	1688	msedge.exe	113
PID 1688 wrote to memory of 628	1688	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Login - Used Airsoft Guns Paintball Guns and Air Rifles_files\a.htm
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc5410c188,0x7ffc5410c194,0x7ffc5410c1a0
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1828,i,14566314349141292320,1875809730412171155,262144 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,11054210225895817023,7260721641108375959,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,3016404217117474474,3772098730129988951,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,7794632781568848964,9116501147861512380,2097152 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,10551146201220080404,11119260819450463661,2097152 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,6627932898101102793,15351721052960010647,2097152 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4132,i,13365133480033927747,5845131032576811215,2097152 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:2
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,18404029114133125078,13573570205731781822,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,13035372584559845442,17205350632760681077,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,12136797959503220663,5834986437223047645,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,12136797959503220663,5834986437223047645,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,17019929460601644137,6665409586851395849,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,14918072315961262343,8233391131496994080,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,3802729216811587309,165080626479439988,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1060,i,13404269496701480280,11534973833977791439,524288 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6044,i,2853617847422804451,7495448439510298825,262144 --field-trial-handle=2240,i,17831379752764903789,5825135212428301140,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

46043aed-288e-4803-9f94-0841765373e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46043aed-288e-4803-9f94-0841765373e4.tmp
Size 19KB
SHA256 abf22e2b986a9c9ceee9847e368a5cc61a2392628c2bb76202c433fb0aee2ebe
MD5 942fef24ca5a39ce42146430213815ae
SHA1 77d379eab71cd2b3a6313c121b8ea41d8e7b1317
SHA512 2f2204d35804b50e057ed49b89b2c07ec3fbda6ce664f618138758c6ebbd7e6c6d76d9e7afdf5e596bf8df0af78f9dc2399eee45a2722ef0d6eb1744fe95702a
SSDEEP 384:BZcIhsNUUSLaWJ2+uzX5od+0ODn7ktJrQuJOObjI9G6w7o:JheHOFOn+hQm29Mo
TLSH
T11A929E32A8385D7799B7E510F48736135EF8A07BD7982FC8D1EDAF0C05A65AC131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dab7bfd0d0a87410e7711668a114009077699515952736b8970e940a8d7f54b9
MD5 e210084ae4166a84096bd20c1b7e0f89
SHA1 8681992ddfdc450901f3678d06d65e57b3d78550
SHA512 d4c402e01258a352e35057b2545b472bf8b65c28828999468a9716ab81dc5a8e645be20bbd627148c9e76d06ace6130acb9dc124fe958f5c15a21f67ecac07df
TLSH
T16C514B7F42954497FB853C708FFD4E113379C64A2A6F5EAD00647A7E6711B2280D5038
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 ae01fad1549385e12e37be98e154f391c3cea04c3d5f380393462a34b8b06941
MD5 ed85810a327ac7b40ffcf79e9a9f5d5b
SHA1 2d50b19505451c512ee707077c0ed9ae80203856
SHA512 bc409f70dc415803f136f000d4f9991fd8b64fa21f0fcd89fe21fa6d633063dcd299b9fa249d54814aa10cbefec44cd166202ff66c397a6f3e95cbdb4cede372
TLSH
T1B9115BB7C3D585AE890516F06A24AE2BCE2D0905822C7C1589D4EF1B93E3075D10655B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 33eea0a26df19e2a366ad5213f404620c00b432af523a2321782018415131ad1
MD5 665440662787ca36561c5d6c7c86785e
SHA1 b60c88954d33e16136b942969e21c78621599d59
SHA512 6370e4e8c501c91d0e69b6c7e1569584e0d2f988deb73426a0a0ba56b35abca374d19c9f837720392738be424a7021d926f2c0dc583a0aafdf41c4a692f8ffda
SSDEEP 192:sxZ8R3yM/jK1Ml8Mkk/fesQANuIdpdTHW6+WNGYHj4o+AIgrJ:sxZ8RMk/fesQw/NHbGSX9
TLSH
T1A642E8166A34597BCCDBD209FA51BF53D6F91472E2901E48A9FCCA0C04E6AED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 c80bd9482d7f1c7745fddc916bca9ebe6798afc3890a75caab4a04fc0435d28c
MD5 43f416b49e589764533e815af3ac68ac
SHA1 428e8cb69b86158e948896755c6145cc47da2866
SHA512 05e89a94fd539c27d65cd8c6779acbd9dffaf0a6c1b7091cd1e303ea3420f896cafc253a9b9ca40089bbe6fe1f56f1532c94a61da169ee4d7ad3bcc51c10f790
SSDEEP 192:sxZ8R3yM/jK1Ml8UQskk/fesWNNuIdpHTHW6+WNGYHKvZ+AIg5DJ:sxZ8Rq3k/fesWj/zHbGbXb
TLSH
T13452F8166A345977CCDBD209BA51BF53D6F91472E2901E48A9FCCA0C04E6BED231382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8227778fb6c3b66f75f2a46e86224750d410c6422ba29c9ddde68f0314fc8f45
MD5 9003df05d7c126c314ddf6bceb41b483
SHA1 f7c0af199253d3e5a79f3292bfdbe4dea857b08b
SHA512 bf0e0d57355847c0fde0b7f11c9add3ec02c0fa3646f953ddb83c724c248076e65d94157a779f528f9387800c3ac4e579202c0399b9a7d7c68cb2dfbcd7341df
SSDEEP 768:qZUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RJroVJ0I:qZUZYTMWvg0Pou1ja7eLZmRisI
TLSH
T1D4D20A2F280CCB7E4F844E5DEC2A6F963ED801CB5A584D5447EA894C03CB6EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 6423bad3f82d6af84bddd7d70b4238d2b25e8140c89aff8364fd48c6b30257f7
MD5 ff31f6cdc7b984a678e959722bae46bd
SHA1 ea47121ba8bba313ae2449cb1f9038de8d0ba8ab
SHA512 fb9983d29e1599a9d3cae88635611b052d8017ad99986fe1c086af306e515332c7a15b25601bc2ddc8833f4f30d4d08ce4160e7f37a88506b2865e947691599e
SSDEEP 96:KA1eK2AEK0KTCqyuoKfq4NAKtyiiCAK7iP:E2//3Pvg
TLSH
T163D1335730B602923C7F2A0C86D597268E5276633018E56F7BEC04B24E67E219DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58ef4d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58ef4d.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 88eebcab285f1d3fdfebe480b2678c7cd831b1468503891cf6633d7e358390a6
MD5 e112f18676894267240864b96da8900e
SHA1 033ec85aa0a5d2798a25e50bf78bb7719c3fcb2f
SHA512 f844e02dd5ab02a121e60c07c9b17200edfdea31d3252cdcaf12e2c53baa962d63e0629d9a652dd69333bd3b782cb6efc07915c52655dc99bd0ae4e79247b4e9
SSDEEP 384:hiFiZcI2zsNV8TUNTUlIlrLaWJ2+uzX5od+0ODn7ktJrQuJOObjI9G6w7o:IFQGMwgaHOFOn+hQm29Mo
TLSH
T1B3A26D339854997B9EB79A41F48A36139EF8507BC698ABC4E2DC9F0C04A61AC130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5058c4f6845840d73b62b556fca36d57e24148fa9f9d18a9d16717eeab868db3
MD5 d645c5ea38fd441e8f9729fbead1b2a7
SHA1 cd6c696e98c4c7fe87ac15b9344e77f89557aa54
SHA512 0664985b39b3d281da78d97699875431d49335709301a06019f30038ef065a194928e725e4e415a9da403df446466eab50ca1116e2b22d56af3ae4d3d57d3590
SSDEEP 192:yON461VWQmiUy8FgGX5Obd+jwODyRiV/a639qXU6:yON46WrgGX5od+0ODnYsqXU6
TLSH
T1A602D83669686C7B8EF3AE49B48737135FA4206BEA956F84D6E81F1C00D765C2307C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0925cf36efd23995d308bf710550f5a33a5d66307a0ee0e0d8bd614410f0cb58
MD5 a0ff94c33ae8c576c7c7436cbfb84043
SHA1 93ec02ec8b2be66e850e3130a16202c66e6e23ea
SHA512 874fb55e4fbbb5e8daa76771c54957c6987a40b650c7588b5752dc45eb232f4afd976b0530e3802064262ce9ddd404d28d29a05e124ad2f638342ca24f6fe048
SSDEEP 192:2ON2617WQmiUyPFRGX5Obd+jwODyRi7kySJrfjJsqIJU6:2ON260uRGX5od+0ODn7ktJr9uJU6
TLSH
T157120A326568AC7B9DE3A954F48732535EA85067DA497FC0D2EC2F1C05DB65C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6e23d438b988e68527fc9525d8669dbc75c9c5091ea3568a4ebdd54c9fd53c9b
MD5 e7d71e7f99fac06f340a8b9bc9cea385
SHA1 20f7aea648abacbd7624061abedf358344921dc1
SHA512 aa561da368f5495eff42fbb6a60e351204c0820cb30cc31000b80cfdba816c4731b3a0e3f3edfdd38c0b8a10729af9fafba9442972a1fb9340882cfebb01a3c7
SSDEEP 384:YZcIhsNUUrLaWJ2+uzX5od+0ODn7ktJrQuJOObjI9G6w7o:mhTHOFOn+hQm29Mo
TLSH
T109929D32A8385D7699A7E500F48736135EF8A07BD79C2FC8D1ECAF0C05A65AC131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7912c1d2-c25d-42e3-bc48-d416fcdd2c43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7912c1d2-c25d-42e3-bc48-d416fcdd2c43.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f6da57e866728d8a5dbef1537927369c947fbe6de3a80a63371f96f176601b46
MD5 c8ef9d18d955ebaebc8b770e724a38ad
SHA1 d602992c211e3b422fd62578f6fc0f6f79fac0a1
SHA512 885190a519317cba766d2d972ce8b29d8baee77c0a8a0c2e79e2c7c954e965de6640d40a742d4199b59d315a6180bfc89ad6c43891c231609380856e6424da03
TLSH
T1E5412659A6E91149B3B36F4A9BF6B46E447ABD372E06C05E00010E4F0662F00C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download