0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 13:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample260728-q2grfaan8v
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4316	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297203170675756"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{2FF5386B-E5E6-43B9-A8A4-3D3A72A25E24}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5576	msedge.exe
5576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe
2272	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 4668	2272	msedge.exe	85
PID 2272 wrote to memory of 4316	2272	msedge.exe	86
PID 2272 wrote to memory of 2032	2272	msedge.exe	87
PID 2272 wrote to memory of 2032	2272	msedge.exe	87
PID 2272 wrote to memory of 2032	2272	msedge.exe	87
PID 2272 wrote to memory of 1500	2272	msedge.exe	88
PID 2272 wrote to memory of 1500	2272	msedge.exe	88
PID 2272 wrote to memory of 4920	2272	msedge.exe	90
PID 2272 wrote to memory of 4920	2272	msedge.exe	90
PID 2272 wrote to memory of 4920	2272	msedge.exe	90
PID 2272 wrote to memory of 4184	2272	msedge.exe	91
PID 2272 wrote to memory of 4184	2272	msedge.exe	91
PID 2272 wrote to memory of 4184	2272	msedge.exe	91
PID 2272 wrote to memory of 2188	2272	msedge.exe	92
PID 2272 wrote to memory of 2188	2272	msedge.exe	92
PID 2272 wrote to memory of 2188	2272	msedge.exe	92
PID 2272 wrote to memory of 1700	2272	msedge.exe	93
PID 2272 wrote to memory of 1700	2272	msedge.exe	93
PID 2272 wrote to memory of 1700	2272	msedge.exe	93
PID 2272 wrote to memory of 2948	2272	msedge.exe	101
PID 2272 wrote to memory of 2676	2272	msedge.exe	102
PID 2272 wrote to memory of 2948	2272	msedge.exe	101
PID 2272 wrote to memory of 2676	2272	msedge.exe	102
PID 2272 wrote to memory of 3204	2272	msedge.exe	104
PID 2272 wrote to memory of 5508	2272	msedge.exe	116
PID 2272 wrote to memory of 5516	2272	msedge.exe	117
PID 2272 wrote to memory of 5524	2272	msedge.exe	118
PID 2272 wrote to memory of 3676	2272	msedge.exe	121
PID 2272 wrote to memory of 3676	2272	msedge.exe	121
PID 2272 wrote to memory of 1604	2272	msedge.exe	122
PID 2272 wrote to memory of 1604	2272	msedge.exe	122
PID 2272 wrote to memory of 1188	2272	msedge.exe	124
PID 2272 wrote to memory of 1188	2272	msedge.exe	124
PID 2272 wrote to memory of 5576	2272	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffb7637c188,0x7ffb7637c194,0x7ffb7637c1a0
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,2045150844192599141,8922312632904124622,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,11268483578696621104,14734082521082831815,262144 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,7956152628969769519,10835374447383168980,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,7953899385810321672,18081960258014484740,2097152 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,15532938968845609137,1971615844490890061,2097152 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,4543799048925758678,15217036051691936157,2097152 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,17570712694900137722,16794894259279883525,2097152 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,11027551219491740450,10534703892460953473,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,10987893589398833834,5907619287145491996,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,389216203280221183,6956981049502118606,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,389216203280221183,6956981049502118606,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,9111902444195139805,3679554146262363413,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,13249512163113203508,7302084529171699617,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,3589579165824871321,13172202627829067375,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,17514292233666943197,8785562937069422469,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,1631011020417002891,10799123674032996024,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,8088040352309446025,14147324303542565931,524288 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6544,i,7131211909832481460,7661740680860658938,262144 --field-trial-handle=2324,i,16945865887848987971,9753609902098129351,262144 --variations-seed-version --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 1fc50f48581221708e43a3230168bf1c850b4d4503ea4da1df86a9e172288c8d
MD5 25da86f8796158fb7341737269ccee3e
SHA1 ffd0d55535738ceaedd6cf38241d1b3415a1d854
SHA512 4c2affa92d4a57fde98e8b502f8e3b8a6df0de725ff4f6350a831900a9edec11230542947e3f16afca0f08c1216d4390947651daf4a2c0d550c8073b7ff6afef
TLSH
T115E02619F7E2C1A403009497C08EB3DEC172798F96CCBC9EB60EE5D43406640B3BA1C0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2c164ef021fa8bea5760296768357aed585cab856b99b30f3eb203286918210f
MD5 c67475abc41af24673c0b174d99f2780
SHA1 938e6a4d755ad0b84f8e1a55754c6ab3f11231b6
SHA512 23451c3a75b4f860870df2139b05815276d0579adef4272686babb49b2fadb722d65f4c7b80a863d69af2c678759e8a4f6f3bcfec71bb4acdc3b3175f9305472
TLSH
T107615F5A03C240FEEB301378D5E00E013571CFBA2ACBBD9452A498FF7D06B634D6952A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58e308.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e308.TMP
Size 3KB
SHA256 b1ddf742e750429bb48c26b62cc2a33c2ff96948971484c381f38ec17a4fe847
MD5 c26cff23cca32629f46dcbcb95f303e3
SHA1 253046c7d6ce047283f71b016fff19ec2f568047
SHA512 aa9bfa55b8dadff0a45284b1a8af27c973187299236669c71a6e4c05c9bd141ae14e9b35503922ffeb116df763b7ffdd6fbca24e50ffa312069cb5d941505ea1
TLSH
T11F615F5A03C240FEEB301378D5E00D013571CFBA2ACBBD9452A498FF7D06B634D6952A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 794670666e9bcb878b5f1a82c6beefe14dd024374e2e36b58997818962181a69
MD5 d4d55c4189d34bababbbeff363237851
SHA1 0b69fb76347a3ee29c64de838f4b0861c0a89edc
SHA512 6dacbdc4b2967c3cf8f79ace05e9fa47fea6ebc3c5cb3f708f0bac7c292f21649c672ba2e654a784b4e7a57ab3c076b29855aabfb8c33835295625a2ce9ddcab
TLSH
T1DB117DF7C3D5866E8A0156F06A28AE2BCE1D0606831C7C1985D4EF27D7E3475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d79d4af34e9969290c3e8b42b9d82603612e2e283ec1b1bf2b1243efba9013f0
MD5 1ad1acf8bbd4f5da90892e83eba9facb
SHA1 265b939568713c572ed683473d2dcd89870437fd
SHA512 c491ee134db07dd427cf260cdd2d0d573834f45468a0e9e6b2c9b33bc656c370a95ce203472479b7dac1ef002d9e6e311fc32752f61876693b41b90c979ea3cf
SSDEEP 384:sxZxNdaoq8K8d/fcus8MoRxZxRSHbG0fiwA9D:sFqDK/fsUaHbGd
TLSH
T16B52E816AB3859B7CCDBD209FA417F53D6F5547292900E44AAFCCB0C05E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2f33128950def5d91bddf669ab8c5f37517f13436303bd1c11fc34e28773add4
MD5 60972f30bc33a90a69e3804fb8d07dd5
SHA1 3f63c53829be8a0f92a38e547f5c0509e23614b3
SHA512 cfad1aea4c322a05511d9528a69bbbaaaf4bd68315a45d63989ff31222373fa3a4beb89db8453627ed1f230661875447590649efa1b8e6a2e4b7b0300b0b7f03
SSDEEP 192:sxZxNdRsQyM/jK1Ml8Mk8d/fcus4RxZQIdpdxSHW6+WNGYwKxNfEmxwcIgrJ:sxZxNdaoM8d/fcus4RxZxXSHbGEiiwA9
TLSH
T11342E916AB349977CCCBD209FA517F53D6F55472D2900E44A9FCDA0C05E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ccc28e52f7edbb27fc9a4b812a67fe3380e6f82a43b9717b5d99f11d5e2c9efb
MD5 18cc499e84b9fbb3f13037efc36e7d87
SHA1 73ba016ae1e727ee92c0a851dd3aa02c78ad72b5
SHA512 ca3f1f45b9b25e599af21f9fffa49cbaa0e3279c368111b9992a47d29f4dbf67e697a3bec39bb9d320995d93e2520460bd7522bd261b4388cbe5522bc857e7c6
SSDEEP 768:Lw4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d4rohocua/:Lw4jeXmWvmKLEu1jacPLZQdDdN
TLSH
T147D2F93B284CCB7E4F844E5CEC26AF976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bf9333380335fc7a6936d52dee79e1d19c0c845b5f5c66af1740192c12624d00
MD5 7196f56c13784f194731dd11adcc3933
SHA1 494c60bd8b5fdb41f3546b2ed34fe919325e65be
SHA512 77d7f401cec1d4d42d661a16b7dfe7f84dcbb8ccb08ab44c7876f5bde1fbb1ed1908d624c511014322754b700be2636c1ecc6843f04f6df6cc2a288e81fcaebb
SSDEEP 48:K8mIfKji0vyWmTKGQ44+GItlInm+KYLA0+suu1FkROI/KPa8jyNHAz3lZNkdH:K8mQKjiWe9eKmwFOwKPa6Cd
TLSH
T1D991630974BB46012C7D2A089255862AEAC1F2673568B42B7FED00B70E6BF509DFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597f0a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597f0a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 a36d05c9bc363a774fcc46046573b847ef665a3d3ddc7d59e8bbd3a63841be6c
MD5 d79a14032af48871327de6c7ad243e4e
SHA1 613f73aa01dc0b831d0cc5197c96a291f82f034c
SHA512 28283b6461f59e412dac2639a84f12ac03798cece100e949fa475f4f99bb33e41abf077c4d3b6d29934f251853ad82cfd04bcce4da24c816c0128021a9d92ba8
SSDEEP 384:H14vJiFiZcIaBzsN798TUNTUlIl1xQl5TVHdqX5Q5SzLGf+g8GYZX4+2f9FONOOJ:3FQKowg+5QSU4lPW29MZ
TLSH
T161A27D339C68D97BADE7AB55F48A35238EF45067D6D5AB94E3DC9F0C049B4AC030AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f16f3c751191a54cb11c93642b8568a10773f50a56c36a46111c22bd1f041765
MD5 f6536e6d6f84b19f6a596b9f52ce4018
SHA1 8b075765212892aa49682d75ee9ad9d33f27cdef
SHA512 0a91d65d9efee9316ed33dac9e631c8e41700faba0122ee9af3686a697a7f0e0deca4e76834bc8b4d264eb32d5994af374aab42659c9ab30c20231c57c40f491
SSDEEP 192:EONl6hZ0QmiUyx5gx5+pc/+jVWjzorGYW5wOZOxlnU6:EONl6oW5U5+pu+g8GYV2OXnU6
TLSH
T16F02EB35A8786C779EE2AE45F48737235FE5112BEA952F84DAE81F1C00C769C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 91a84170637165c35177f093203bf4ebedebdf33b8476861c8910853bf8c184e
MD5 024c327d5670c9a3df30b5b5e56a5b87
SHA1 5075be927a9433e71c480b9d0525eb1c384f2733
SHA512 16aee79b03f4ab5b9b8c03992164abc53c7eb38201c6af522834bd6ae1f842b90ec28a99a23d105331f0fd7be0a31ec117d235996f7caf839fff591285709a10
SSDEEP 192:LaONni6hZ3bQmiUyx55x5+LSc/+jVWjzorGYZX4+2fd5cOqOHqqU6:LaONni6bNW5j5+LSu+g8GYZX4+2fo9OT
TLSH
T179120A36A868AC6B5DD2A645F48735235EE55117EEC67F80E6EC1F1C00DF6AC230AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f682dbb57962c7153262b44cef80ad16cf2c8d2defdc5b6df3c8aa016fedd83e
MD5 d10afbbdcf0472d16cf3510296587e4a
SHA1 46f4cc6261b815d803c37327f02926a80e7eade2
SHA512 7a6f1569605fc20ed50d32f5ced1d385f64d8ef2189aed5be930a0ca597357e56fc3afcf2848820a56ec7d7f77700196c0057229c146b4eb39f53a5ff9254ae0
SSDEEP 384:ILZcIhsN7jWxQl5TVHdqX5Q5SzLGf+g8GYZX4+2fLFONOObjI9G6w7eHkxJ:Chm5QSU4lhW29MZ
TLSH
T1D3929F32AC3C9C7659E7E611F48B35235EF89167E7D92B88D6EC9F0C049E5AC030AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4f2fafcdca7e4ee87af1da648aa7d9e111f321d80c7aad8172ce524027a931d1
MD5 8d8049eff5522448bc0fbd60745b980e
SHA1 e57eda763c43cb070f1af223b2945f5879945ded
SHA512 113e6f6fa64a7fff54ee27266ea98ea7c73797459ad64f9d99088e329a10b3805964a15bffb492da4a9dc61234fac337979889d061daa878da73cd54eeb2a998
SSDEEP 384:v1LZcIhsN7j1xQl5TVHdqX5Q5SzLGf+g8GYZX4+2fLFONOObjI9G6w7eHkxJ:FhL5QSU4lhW29MZ
TLSH
T18F928F32AC389C7659E7E615F48B35235EF89167E7D92B84D6EC9F0C059E9AC030AC21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5e9ab901d64540c36a925eaf1718d68911cbbb1e5b4e82ee99e938d6d7a13d57
MD5 03bcda02b2a91401a909d0fe12ab993b
SHA1 68ac414455abc5f68560282f9da644ef7de2c802
SHA512 e9a8a201c4ce78364dbc2f7e4905af4c70d318d79c3bc3241cd41c96ddd0ff0615040470871923135a4f2e41fc6ce71b69b8c1251b85ec0e0211fd53be1a8c94
TLSH
T12A412A89B6F91158B3B76E5AAFF6A45D48BE79772F07C05E10110E4E0622B40CD62737
MD5 SHA1 SHA512 TLSH

Submit Download