0791e679902b81845fb2daccb7888a4f2b9eeb92c72c9e98504992b3e83e9fe3

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
download.html
Size 1KB
Sample260728-aq5fcsvbpe
SHA256 0791e679902b81845fb2daccb7888a4f2b9eeb92c72c9e98504992b3e83e9fe3
MD5 b1100f4ba0992434e50318f9dcf7dad2
SHA1 8e963ba58a1453582450aff5deddb7326a622866
SHA512 e7e80854754b4eb54f6bdd7804c9224ec229dd3f945f03fb17b42849eca7f54617f9d7d5c22e64be2abdfdace12bc3fbc88423e9555af986b294008d0d8c6212
TLSH
T1F421932A06E0690450B242F94FF29B88FF527187A3889940FA2DE13F0FB41498C53B0C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3124	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296719911466962"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{F288481A-DB2C-4D20-9ADD-677D7DD69E6D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3172	msedge.exe
3172	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4632 wrote to memory of 2188	4632	msedge.exe	87
PID 4632 wrote to memory of 3124	4632	msedge.exe	89
PID 4632 wrote to memory of 2220	4632	msedge.exe	90
PID 4632 wrote to memory of 2220	4632	msedge.exe	90
PID 4632 wrote to memory of 2220	4632	msedge.exe	90
PID 4632 wrote to memory of 3844	4632	msedge.exe	91
PID 4632 wrote to memory of 3844	4632	msedge.exe	91
PID 4632 wrote to memory of 764	4632	msedge.exe	92
PID 4632 wrote to memory of 764	4632	msedge.exe	92
PID 4632 wrote to memory of 764	4632	msedge.exe	92
PID 4632 wrote to memory of 4620	4632	msedge.exe	93
PID 4632 wrote to memory of 4620	4632	msedge.exe	93
PID 4632 wrote to memory of 4620	4632	msedge.exe	93
PID 4632 wrote to memory of 1560	4632	msedge.exe	94
PID 4632 wrote to memory of 1400	4632	msedge.exe	95
PID 4632 wrote to memory of 1560	4632	msedge.exe	94
PID 4632 wrote to memory of 1560	4632	msedge.exe	94
PID 4632 wrote to memory of 1400	4632	msedge.exe	95
PID 4632 wrote to memory of 1400	4632	msedge.exe	95
PID 4632 wrote to memory of 564	4632	msedge.exe	98
PID 4632 wrote to memory of 564	4632	msedge.exe	98
PID 4632 wrote to memory of 1716	4632	msedge.exe	99
PID 4632 wrote to memory of 1716	4632	msedge.exe	99
PID 4632 wrote to memory of 4536	4632	msedge.exe	101
PID 4632 wrote to memory of 4348	4632	msedge.exe	105
PID 4632 wrote to memory of 892	4632	msedge.exe	106
PID 4632 wrote to memory of 2164	4632	msedge.exe	107
PID 4632 wrote to memory of 4388	4632	msedge.exe	108
PID 4632 wrote to memory of 4388	4632	msedge.exe	108
PID 4632 wrote to memory of 628	4632	msedge.exe	109
PID 4632 wrote to memory of 628	4632	msedge.exe	109
PID 4632 wrote to memory of 3172	4632	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\download.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffbe146c188,0x7ffbe146c194,0x7ffbe146c1a0
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,15198476888877123000,4890610163277799935,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,11653936481448912004,932935528007062235,262144 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2508,i,15753489574384422673,14049337918931640543,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3476,i,14702421320071761020,8741601455462273227,2097152 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,1160171948203904738,3208699196798387919,2097152 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,4633453573627209117,7424754200274529694,2097152 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,9734066488106649574,16586603514934340801,2097152 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,5003657989072832318,13811928280896346505,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,5565370763011582515,3628044397426120132,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,12805165392874806185,2688499302778354893,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,12805165392874806185,2688499302778354893,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,5704795668049464503,8431592257715110561,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,14376106110947484704,14345457220391293110,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:8
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,10206435412227144437,14850564285694392193,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,1587799275213697850,17601573368107083824,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,1057500930137645303,7903321960918004487,524288 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,13277964714832948910,17754434623517560886,262144 --field-trial-handle=2444,i,3472735148954080280,12167200558765962912,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3172

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b9f13e3843e1713f731f84833a5b7eb7c59912f09f6961a13e6182daccb9a3de
MD5 b377e1ae4e4c7a3d7511411dcecf5b85
SHA1 f01322076ecc80fc0f9be4c887502afb4e4a53a6
SHA512 c4f37e45a054e74d99041fbbfb4ba88e81e1ff499bce247eb911924331fe46d491009444afa4942a094ded29a3936c7da7ab82cf5d74a8a08f25cef1c38b350c
TLSH
T1F5712C1A01F9489DD721A330F1CA1D1E7CF3E19A0E039E49315CD8BDA53A734E4A5454
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bb0e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bb0e.TMP
Size 3KB
SHA256 aa501cba771bbe163fbd4ff3a7fe77f0510a19a3a2c3ab00891db29c8b618e00
MD5 8638fba05b432a7d4e877253a3b5eee2
SHA1 3ab63d95cc6851e884bad570033746bf51d44ada
SHA512 1cea49b082704c4ea76c056f865c028578f029c16cda75b7eeac912700e3d2bbf1568796762531342e6f79fb3482c591e93767bd4d5538d7fe053d24f67f0175
TLSH
T16D712B1A02FA489DD721A330F1DA1D1E7CF3F19A0E139E89319CD8BDA53A734E4A6458
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f76d458f4827bf03806e07bf0aea900812ae172c6f088cf5f3915cfda852c160
MD5 7764a8c248c057ae6d70e44d21645e5b
SHA1 862c541949231b287317a6b5063fff10b57e71a0
SHA512 3b3e45ce69b01e2e772f3ddb32845047b711faa06e196005afeee3567687fe708cde105a64c0c29a0f347b7178ed92a672e820efefd64bbf43a8435744b2b764
TLSH
T13E116DB7C3E586AE990156F05A24AE2BCE2C0506832C7C26C9E4EF1793E30B5D10565F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7fea05df6adcf866132645a0bf6e5a9d88ccd13c5a90cf1af250a50ff4cfd8c4
MD5 2728107f9a3c14d1f0c7fd2440e945ec
SHA1 6be36f1533c109fb7e631264a90b37a4d0d50535
SHA512 e886e56c8f4a36d00d52964611f3ed3a7cf6e963dba648f6b7c604cb343bf3e52195d167026c3c2284cc5cbe73f6ac763109a91a2f362a82a0388c27a0066f8b
SSDEEP 192:sxZfRcyM/jK1Ml8MkkJ/fw4sxrEIdpd8HW6+WNGY4wm6+aIgrJ:sxZf2MkJ/fjsxrduHbGUx9
TLSH
T14D42F916AA345977CCDBD20DFA557F53D9F91472E2900D48A9FCCA0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 800d7547fbcd102e6761fe97b1b23ac397933e4e5a46a67b17c426744f53666b
MD5 549c1d4c9512501e274309fa631a3251
SHA1 a1bb78cce2354e095a00df8405a490464b732ee1
SHA512 b539c2f541a46e5bd8a3335ee848d057685ce963a2f767e630ff3b2d6547364a23f2d1cb41d053c40ad090b74a480af2504b539ebb3d4645882da097a4ce7581
SSDEEP 192:sxZfRcyM/jK1Ml8UQtkkJ/fw4s8OYEIdpH8HW6+WNGY4qv6+aIg5hJ:sxZf2qGkJ/fjs8OYdcHbGNxN
TLSH
T1AA52E816AA345977CCDBD20DFA557F53DAF95472D2900E48A9FCCA0C04E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9e34b38b532753d12ed826dd52a01ce84c1a99e61b74a29ce672a7b2d1a0edb5
MD5 4d604cee4e7a3b5057f8e55bc1e6bd76
SHA1 40491367e735954dcf1db493fd5c64ab51679e00
SHA512 418fe332c48e3eca165398db093db1053aa933e76e5c7cef23a0101d0b7e207bbd36e7e18c58425b50350201c6e63ba49f247a1a9de56519f77298bc024ebeb3
SSDEEP 768:378iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdAroskCUnJ:378iJPNWvx76ru1jahALocdLaUJ
TLSH
T1A5D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B948D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 38c301dea0706bec74e539f88e703b10ceaf9fb38c81fc6f3a8e5eb3e5c84544
MD5 2f1bbc5d5c83c9ca50829aa33f666e58
SHA1 29a3a5e910b0deb7d596c4f29293a86adf3ff72b
SHA512 2d040d7d260a4414556dac29ffa3ccd3ed5a3b0f6cf186c50ad48622f7cb672a927233c1175e41a0f07c025f98912d99a6a0beec019b1933d35d5d0bee5a890f
SSDEEP 48:KsgIvKBWMPyNPK7/1pNkdpgPIgXkKDBbtkHf0aA1T7IlKoUo3yt:Ksg4KBW2qEgKNCu7uKoUae
TLSH
T1F191213230BB27112D7D2C49E69186569681B6A33115E56B77F940B24E3BF260CFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2e34b760-e0d3-4dde-9fa2-9ee3de3f9d55.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2e34b760-e0d3-4dde-9fa2-9ee3de3f9d55.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bf54de3aca7792a23c1091402bdbfbb175d79459a9cbd7e97b60ba7976332bde
MD5 ce5f5c85284ec69d66d9fe37da512d0d
SHA1 e33340ea88f9a5d5c15aff90797f7bd221fcf36c
SHA512 c4459eb2d9922c4590193c35902ade33b8f81af0ee01a9d1fc18a09444f3b5d6894bb8fce30f6b62926ade2fd94946f6c452d354b2acabeb67ffbcf82175b2ef
SSDEEP 384:NZcIhsNMUMqoxvba2FUF3BkkTiM/OObjI9G6w749:VhKoZ+2c9/29M2
TLSH
T19E929E36AC785D7689A3E511F4873A135EF4903BE7DC2F88E5DCE70C05DA4AC0316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 f36a8d19ced4f44fbc70363fe6223d76a1afb8b561abb041e743e05da1d0f420
MD5 dfa1e50f7cde7fd1291f0f38ce628812
SHA1 04b478d329ec2a3b457558fce9d8b07717560dd7
SHA512 1fbad9b569213460a5cac7281de03798bc9951570e166aa39befefd6d5c73dced0b3523955174eec9b8c9e737e3bee2180f71a885b7dfaa26c8fd85b9d5f4e4a
SSDEEP 384:SViFiZcIazsNN8TUNTUlIlFqoxvba2FUF3BkkTiR/OObjI9G6w749:tFQyowgyoZ+2cG/29M2
TLSH
T191A28D339C68997B9EB79E55F48A36138EF4907BD7D86B94E6DC9B0C019B0AC0306C21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fdbb0d81df3f59a5b125d8b3f8c5cea6d6dfd8b6cf53d0a63b6e31d45ebeeff7
MD5 6f5afaddeb26bc2651c8a9f8749f0cbf
SHA1 b5e367177555b93388e82bda761a4c9b02d83461
SHA512 e1a243a7a6162880ed551ee18decefd840add0179c064d60dd725ca0877a8977e749ea103f2e6beb80524bc8f75f75e5431d89578a9d7cc160bbb7c7d2bd51c0
SSDEEP 96:ZqONk1QsjpfmUTmDK5ih/cIPURHl8h4otop5yq5Dy/UBhPwivh50xy0SFYKCAxTM:gONl6kDfQmiUyy0y/YZ903plQiQctU6
TLSH
T15902E93568786CBB8EA3AE46F4473B175FE4112BEA942F85DAE81B1C04D764C1707837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8631e0cd02330dd5f6afc6e3aef41b4a85adb2b455a52adcbf0dbfb883b5d66a
MD5 1c97dd97c3b3ce5d5df285739ef1da15
SHA1 e499709a3a2f31f171034d8a43278a03e942524a
SHA512 9ca62c9517954e2dfa90a018d6e65a758b6c7927b483db745d268d22c49a87761354dcafebe20e315daf519d783236ec8237cda43cbe67f3477ca910588c6dd0
SSDEEP 384:qqZcIhsNMUFqoxvba2FUF3BkkTiM/OObjI9G6w749:jh/oZ+2c9/29M2
TLSH
T113929E36AC786D7689A3E511F4873A135EF4903BE7CC2F88E5ECEB0C05DA4AC0316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e4231b4e71907225f0f2db41ea0d76984488918b83c820514fb12f4fa64693ba
MD5 94032b5e0e00e5645509c36666912fce
SHA1 4c9eef7de3f9dfa0e5c75060550c7a09e5df1f7b
SHA512 771acccb31ac2831c3e43f4fc81d4f3fcfb2873c0d96b30a4b486b4da210014f3c161e31cb33aea0941e5fa667059f096ff928bf1ad2bf99c2e7fc4b1c07f2c8
SSDEEP 192:0ONu6k8QmiUyywy/Yz903pTeF3CcRnqwU6:0ONu6R6z9kTi//U6
TLSH
T159122936A8A8AC7B4DE3A951F48737135EA4412BDF883F95E9DC2B1C05DF25C170B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b0777b76cc78626a2ce365fe6939fd4eaeca70a4f64a7fe4546659e26354f012
MD5 f9cd2862d32cb2bcba1819305f34e320
SHA1 516aa5285659d3b39a58244c0e4f263cad5a63af
SHA512 e7aafcadd5a0b2b29b66d06303034428b83ea74667780536d5553782f0136c50cad0498b838b9f2424b4025b7d6c14043907be5a0f94c67ef64ffb97640204e4
TLSH
T14841395CB6E90048F3B7AE5A9BF7A86D087FB8372E07D45D10110D4E0A63A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download