05b536d4fba8ee38fb190efac9cadd78ead1620c3c62ef65c8e1aabdc91866fb

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
privacy.html
Size 21KB
Sample260729-ap12jsda96
SHA256 05b536d4fba8ee38fb190efac9cadd78ead1620c3c62ef65c8e1aabdc91866fb
MD5 c2dddc0d91c91b9ced60421f3338256c
SHA1 9086890bc38e0f55c5ee1aaf74e9da03e6455787
SHA512 170695bcf40ad8890ec5b775cadf1da51208ba7d884fbac88e272770f59774fac7ab324fdfa8920a46cd30700c9fede913b464232ba99e4d9d30565f27a6e095
SSDEEP 384:lmiDqlFqKObZnMogGip+SmWECcgnmsP01Y+YRtYh0buAzCXXRNAA1ld01:oexMNG8Eo6aYh0uAGXjAALk
TLSH
T1E5A2B71FF698123525D303903B92EA96F71AE01C37958A322C78C16813D6BBD97377DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1524	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297586823594315"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{6F2C3F62-7A36-400F-86B5-DF2A178686FE}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1608	msedge.exe
1608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe
3284	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3284 wrote to memory of 2364	3284	msedge.exe	86
PID 3284 wrote to memory of 1524	3284	msedge.exe	87
PID 3284 wrote to memory of 4848	3284	msedge.exe	88
PID 3284 wrote to memory of 4848	3284	msedge.exe	88
PID 3284 wrote to memory of 4848	3284	msedge.exe	88
PID 3284 wrote to memory of 1188	3284	msedge.exe	89
PID 3284 wrote to memory of 1188	3284	msedge.exe	89
PID 3284 wrote to memory of 2824	3284	msedge.exe	91
PID 3284 wrote to memory of 3312	3284	msedge.exe	92
PID 3284 wrote to memory of 2824	3284	msedge.exe	91
PID 3284 wrote to memory of 2824	3284	msedge.exe	91
PID 3284 wrote to memory of 3312	3284	msedge.exe	92
PID 3284 wrote to memory of 3312	3284	msedge.exe	92
PID 3284 wrote to memory of 4760	3284	msedge.exe	93
PID 3284 wrote to memory of 452	3284	msedge.exe	94
PID 3284 wrote to memory of 4760	3284	msedge.exe	93
PID 3284 wrote to memory of 4760	3284	msedge.exe	93
PID 3284 wrote to memory of 452	3284	msedge.exe	94
PID 3284 wrote to memory of 452	3284	msedge.exe	94
PID 3284 wrote to memory of 3424	3284	msedge.exe	98
PID 3284 wrote to memory of 3424	3284	msedge.exe	98
PID 3284 wrote to memory of 4648	3284	msedge.exe	99
PID 3284 wrote to memory of 4648	3284	msedge.exe	99
PID 3284 wrote to memory of 1968	3284	msedge.exe	101
PID 3284 wrote to memory of 1548	3284	msedge.exe	113
PID 3284 wrote to memory of 1164	3284	msedge.exe	114
PID 3284 wrote to memory of 4440	3284	msedge.exe	115
PID 3284 wrote to memory of 1204	3284	msedge.exe	117
PID 3284 wrote to memory of 1204	3284	msedge.exe	117
PID 3284 wrote to memory of 1608	3284	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\privacy.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff715ec188,0x7fff715ec194,0x7fff715ec1a0
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,5751161180139692936,2994977695902858723,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,1487749396617192727,6251455638162858657,262144 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,3600560494228850141,2774530371029633270,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,13310932003776443873,17712845210226480465,2097152 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,16789716375760348473,6106667699192802381,2097152 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,11612702804601855025,13766978668945938062,2097152 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,4353478912700286391,11259776452318206710,2097152 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:2
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,3943400069259030282,14752858269331965028,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,2430381236077535172,13293754854736448675,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,13302037861435953875,11085335051701011734,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,13302037861435953875,11085335051701011734,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4588,i,1437466212857713656,16545245254266444782,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4592,i,12357867091365415822,9536162282823153602,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,480967163643136009,1831335566815628317,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2096,i,607273817007742718,7565926365268824735,524288 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,14878949894555712793,2347571682379715370,262144 --field-trial-handle=2028,i,6113972721871256713,9774223114341894000,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3824

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a432e655ecaf337bdd8fb64eea442f88f8996a744adf2134daa87f28d9bfe6fe
MD5 80995409f3a721de6c65a3ce8d618f86
SHA1 f6fbe5c6d4f8c41087a74fed1644dc6e645a2c7b
SHA512 1ae020481baeb542c7fefbc2d7eef66083892daae13aedc03cd37fb381817719599236edcdd2ddc5b7054a8bda6bdc96db9d6d0786694abe39dc353cf10c83fd
TLSH
T1727151354B4200A2F75203B162D0D2067DBD81DBFD23EE01D3B0A9BA5BBA3538D29387
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bcf2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bcf2.TMP
Size 3KB
SHA256 471ff8013dadb51fe29995b8704d789a14c2fc0b8ce9a777b08b1ffa6749d64f
MD5 0adf0b9ad9b86402c3d29d91ec433cfe
SHA1 781e17ae0204a6e9c945a28deb155e8b45b1a4e9
SHA512 a0661136e93342b2999dbf3f71d5fba6546a752ee7cbaacd1fdddb9fa30b26aed3e50fa6676fbd38aab1f287520b4a7250d3af0ad55730f239aab32b7347d1e0
TLSH
T1657151354B4200A2F75203B162D0D2067DBC85DBFD23EE02D3B0A9BA5BBA3534D69387
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 846be5e8012ff18439f41301a04b2c5749f5c3d9b33b4e42fa240cdba8552142
MD5 a8360d0df99781212b26c742296d7d21
SHA1 db14372bca87c212c51036f449e391054b6525d0
SHA512 c128b09df30a23b9257783814583903f128ab847b8d2c0e252968b80edd86db5447b78121764892fd44b66d673d8124826f3492e29f1993683b02e756d7627bd
TLSH
T13321A0F7C3D48A7E890156F06B24AE2BCD1D0616431C7D5589E4EF2B93F2475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e1ceb8fcc93575a43f0290a213fb3fc493745b55a90aa34974890e38fbca80d6
MD5 694d28c06c9b84f260fca2d4d84a6453
SHA1 d628f3960fc65a519c6ee5e096e2c5dd78ce6ff3
SHA512 60f8270c367cb4d8fabc1a74f31684ce19a738cec0858cac2b2ad1d197a9c01d0d5631292b2078e451b107e8eb03205fa884c517819d339bbb880551fd74a67a
SSDEEP 192:sxZwReyM/jK1Ml8MkH/fns75a8aIdpdEHW6+WNGYzQg/xvIgrJ:sxZwwMH/fns75aMKHbG89
TLSH
T19842E8166A3899BBCCDBD209FA557F53D6F90472D2900D44AAFCCA0C05E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 1ac9649bdb31f84eb312fcb93a683f89f809fb023e12800f285df07c586467a2
MD5 e1a5156db8768d7b9d82d83f008c1494
SHA1 1dca0c59b4e63b84951b984290a9b2305aadd80f
SHA512 b06dea269488d72586c1bf77e782cc49b78843a608a49fb6f52e3bed070033c5cb5d47338b92d0983a6a3e199535d556ed252854e37184724aef4c6bc1baacf7
SSDEEP 192:sxZwReyM/jK1Ml8UQUkH/fnsI5J8aIdpHEHW6+WNGYzmL/xvIg5d9J:sxZwwqvH/fnsI5JMkHbGnrH
TLSH
T1FD52D7566A3859B7CCDBD209BA517F53D6F94872D2900E44AAFCCA0C01E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 84fca729e629768d013ea7ad4f23bbbf8fc7e2b4756eba180000d1aa0654075e
MD5 fb15c0fec64f4ee22d8ba3b19f14f5a0
SHA1 ba0a916ad60610314e0c2ce4ea235f1874048879
SHA512 d9b80dd967490513fbcc57fb628cc03e4496927bb228d88a1bbd6db5d1d2cd2dd697e2d1454f5c5a0a787a798d8d560396b64c69f80063225231f4ddc2713be2
SSDEEP 768:NQW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSj+roIHivY5:NQW7kf0Wvqidau1jaa5LA3jVg5
TLSH
T137D2FA3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d839e617e6bf9e18a3011402892aefbd33846e6444052b48132c4db4337c5a26
MD5 ec3da0c08c1239096ad8b3c4b5f1056a
SHA1 a558feccd7acb20fc150ab17a5412ab77571f237
SHA512 12d1fba73b2ccce7ec203e74b342b8eaf277cde73a7e0a90c6106afd6d059b3613fbf7b21900fcf05389f895cf2383a37fa3b0a7b1e0e086f64cda3de9193753
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTnnIFK8sgHyNzIhKowU0MIbKF/:KIbCKcnnGK8siGziKowbMQKF/
TLSH
T1A3914615723A0602383D2D58A2ABC5375F8372E33459A9AF7FB814610E6BE524DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b356e2d5-d433-4557-a3e4-d7d82384f836.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b356e2d5-d433-4557-a3e4-d7d82384f836.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 07d2287c7ed19d7d0b69dcdd2a143a83a4f20fcccf5b0095b86e0a315952ef5c
MD5 6dfbb3026a863475adbf86795f1febca
SHA1 6a2fd28bb20968cafa372ee064a7e741efb7bb0c
SHA512 6cbe5a9d9b3022a3266ba3ee8fac58358ca76f120b855294fcf31c2b8f5ae33b5e934bc3db7fb140292367967b183b73c47d18ed0060163888bb4f9752819d26
SSDEEP 384:6ZcIhsNZSol6A6vanbIzzuLdXm0CEJrelScjmwFMd:4hfA42oIvhel1jhMd
TLSH
T1DC928E72AC745DBBAAE6E156F4473A138FF89173D6C41F84E6ECAB0C01DA5AC1306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 510258cd608fe5c4acec008e60ebd005e793d3e4bb98bfb4b91a25b5e8a24c34
MD5 8576c79cf1d0a14b312937ab60d995d1
SHA1 1f3cb5a77b8f8bb71f55eafed412e480884eaf3e
SHA512 9705a436095391ae18a5d99af43c5e2bcb6f7cfcc712c7fbb6d1948c6af3bd8c1a32be13b80f8792b25bb5ed8ace4c8532cb7f49e0128e8bd70c51f02cdfb67c
SSDEEP 384:UiFiZcIxzsN88TUNTUlIl7ol6A6vanbIzzuLdXm0CEJrLlScjmwFMd:vFQBjwgJA42oIvhLl1jhMd
TLSH
T169A26D739C6489BBAEFA9645F94636138FF841B3D6C46A90E7DCAB0C01DA5EC1307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 2c3ddc049ff44d07a4c7391299a9a23230a83e09e858e8cb83131d776e857b03
MD5 58429a383577321c49214c5723c294fc
SHA1 80acd6d6489a65245533333ee7d00059c02574de
SHA512 b27a2ba4e6dfbd151038a6a6b9a3a94def3cbd185c12abaef3539997ebf3443028e43c4007c109d9009733336a58e36192b56731b7e0a30f8a7808d28c4b826b
SSDEEP 384:QqZcIxzsNZ7ol6A6vanbIzzuLdXm0CEJrllScjmwFMd:zB0A42oIvhll1jhMd
TLSH
T1AE927E72AC745DBBAAE6E145F44736138FF89573D6C41F44E6ECAB0C01EA5AC130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2c20a185a778adb362b731c201846f927b5222b1544071511555937a4af6db56
MD5 ca1c870712dc93ee11f3e73320c9c43f
SHA1 80b27061b42ef7f3f302de88038ae92ffc9e8a72
SHA512 f4f4c5bc2b08808203a584ca6120ec956c082ad5b3cf2b806fc59ec298a4ccba0cd0f1db6295c96eb9f5eec0de8ac8e34655671f8f1f512c09989363b5741b19
SSDEEP 192:MONq64BAQmiUyQ1/W5GBPKnX+FdG4m0+aDqOU6:MONq6eALxWMdXmghU6
TLSH
T1CB02DA356C786CBB9EB2AE45F4873B175FD8113BE6941B44EAE82B0C019774C230682B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 fa16a165924c833fd4ac4b4082cdb3020764e04acc783a2678b6a9275531673e
MD5 6c36983e0bba1006710db84284494a5b
SHA1 d7adae241a3b317823910080322f0d6b47308c64
SHA512 d29bba005b68be2bc520f90057821fd63bd304557a0a32f20d0ccc7ff3528eb230e56db39ccc2641665c5711bb158d51a5e320e820f1e7e19b0360b9295c21f6
SSDEEP 384:SZcIhsNZ7ol6A6vanbIzzuLdXm0CEJrelScjmwFMd:gh0A42oIvhel1jhMd
TLSH
T13B928E72AC745DABAAE6E146F4473A138FF89173D7C41F44E6ECAB0C01DA5AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6c29dbe56c4c83099bf6df8a045703f8fd83760aeb847490710ef0c374d83871
MD5 60d43d999055ff0a942a5448d3ebe424
SHA1 4714b10d827bd8754a1a91c3ffc9a7f302f8ca17
SHA512 646f185fb4851813f745e4cb034e3a67b8ec263a5d1dce80027a1da4f026261cee55639e6a538c21a78b76f1148ff94a16e8a8cd059345c0379238d525d608e8
SSDEEP 192:BRONU64BxQmiUyy/m5GBPKnX+FdG4m0PbFC1SJrEtWwVqUU6:rONU6ePBmMdXm0CEJrAlU6
TLSH
T1B3121B35A8749C6B5DE2B155F4873A135EE8412BEA856F44F6EC2B0C01EF76C6306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

98a590fd-3fac-4440-8381-a4ce723d5853.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\98a590fd-3fac-4440-8381-a4ce723d5853.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7299c8a75187e68e871defe48a5d34d65e0d0c87241e2e75fd62191fb734eb84
MD5 96d8a23f2e68064c07e195bad2ce04b6
SHA1 b483e6a52a0aae947989523b6e288cbe59d92d5f
SHA512 ba4f313ca001bb16b2017b2f144d97f40cbf7a0609cea9e761accf249cfa33f8402f07a32309b909e1fdd1bd476727d0244d28540b371905c535f74592bed153
TLSH
T167415669B6F91148B3B7BE5AABF7686D447B78772E07D46D10110D4E0A22B40D8B2B33
MD5 SHA1 SHA512 TLSH

Submit Download