1b0f2a044a723d7090951a01e392e69bab35085242d4f2a12a820224be3ef919

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
about.html
Size 10KB
Sample260729-ap2cbadb23
SHA256 1b0f2a044a723d7090951a01e392e69bab35085242d4f2a12a820224be3ef919
MD5 3550063db50a33b61633697ddaaf43d5
SHA1 9331a9c3467dbc8bf5fa5aa82afbf2935ab2203b
SHA512 81cc3d77c00ee7d083e463b9b817be18270c80ebf6d158c6748d662cca0b122a10e8410d05c365195bd0c8f3ad9feef584e357a1db0f743cd4c291aea6710270
SSDEEP 192:MjhFD61bGx+x3PinmeVodrNHhUP+jlPirtTFTEiCY7BcRQ7JiRO7hNo1QqymW3PQ:MrDSg+x3PeLVodrNhUiPirt5QiP7DJhO
TLSH
T1D132D823B340012B1F6756CA71B7728AF663C45BD2860C606EBCC46E0BD9ED45A3B35B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4972	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297587793394234"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{DA0B5CEC-2C52-4C81-B339-07D9C94E6A14}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2456	msedge.exe
2456	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe
1284	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1284 wrote to memory of 4756	1284	msedge.exe	84
PID 1284 wrote to memory of 4972	1284	msedge.exe	85
PID 1284 wrote to memory of 2648	1284	msedge.exe	86
PID 1284 wrote to memory of 2648	1284	msedge.exe	86
PID 1284 wrote to memory of 2648	1284	msedge.exe	86
PID 1284 wrote to memory of 1548	1284	msedge.exe	87
PID 1284 wrote to memory of 1548	1284	msedge.exe	87
PID 1284 wrote to memory of 4768	1284	msedge.exe	89
PID 1284 wrote to memory of 4768	1284	msedge.exe	89
PID 1284 wrote to memory of 3736	1284	msedge.exe	90
PID 1284 wrote to memory of 4768	1284	msedge.exe	89
PID 1284 wrote to memory of 3736	1284	msedge.exe	90
PID 1284 wrote to memory of 3736	1284	msedge.exe	90
PID 1284 wrote to memory of 4340	1284	msedge.exe	91
PID 1284 wrote to memory of 3540	1284	msedge.exe	92
PID 1284 wrote to memory of 4340	1284	msedge.exe	91
PID 1284 wrote to memory of 4340	1284	msedge.exe	91
PID 1284 wrote to memory of 3540	1284	msedge.exe	92
PID 1284 wrote to memory of 3540	1284	msedge.exe	92
PID 1284 wrote to memory of 2920	1284	msedge.exe	96
PID 1284 wrote to memory of 3728	1284	msedge.exe	97
PID 1284 wrote to memory of 2920	1284	msedge.exe	96
PID 1284 wrote to memory of 3728	1284	msedge.exe	97
PID 1284 wrote to memory of 3652	1284	msedge.exe	99
PID 1284 wrote to memory of 4984	1284	msedge.exe	102
PID 1284 wrote to memory of 968	1284	msedge.exe	103
PID 1284 wrote to memory of 2924	1284	msedge.exe	104
PID 1284 wrote to memory of 3240	1284	msedge.exe	109
PID 1284 wrote to memory of 3240	1284	msedge.exe	109
PID 1284 wrote to memory of 2456	1284	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\about.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x248,0x7ff9e9a1c188,0x7ff9e9a1c194,0x7ff9e9a1c1a0
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,2062070715125625803,17857738309214407211,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,6983627393970348672,11527027617579001729,262144 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,1486918652125896582,4468468776018518625,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,10724922574478067278,15794692610494817602,2097152 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,15243250245492656717,2458108862787990231,2097152 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,7549349646674201253,4158121758756348207,2097152 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,10733745665987222945,8798817675044476332,2097152 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,17757952953598825648,11101794894164756075,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,17467190431310569914,5831777239446096828,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8663553547898340017,10677774740535454803,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,8663553547898340017,10677774740535454803,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,14249074466734105319,12394903688894275864,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,13003432123639152230,16405956852289491842,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,9005159636879864712,16565116769434797383,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,1767086608267412116,691803375194895128,524288 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5812,i,3405887320257172974,15502894531832743731,262144 --field-trial-handle=2232,i,4076427269917549845,15437188832084128538,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2456

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f9e003d2abf7aa81df7d36f46a6fda4e87f0444cd1054ca0f0c75c64d5339fe8
MD5 4691e41b673faaa8b2256240901cf5ee
SHA1 8d735e9b5a62d32031652eeba9b5043054e539b0
SHA512 6eff26d012d45743209de9f687bc36d57d7707dfb9744042c769ad5b85e03438e074f2ae437596bd9e5509db05b1161eca237a7397131ae9e1da45de24076fcd
TLSH
T1E5710A3538B204E1E3B3493196D10B2676A28EEAF12B1FD10A2014F5B6113E24D5F779
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584e3a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe584e3a.TMP
Size 3KB
SHA256 f0ffee07114ef073e00793599786977d552609b3750e2d2b078da661deb4a456
MD5 4120f17501a36e298b4dfa646196b5f7
SHA1 3cce7b3e1a9c613c243768e88a6776a61fff195f
SHA512 4ac6d41628d4a55970c44efba2960f74d3e6bd9e35f3b25670121137f334ba48e291b7d8757ef2350c519a7055f8091d6bf8a2d64935a71eb838e40a011dc470
TLSH
T14971093539F204E0E3B3493296E10B2676A28EEAF12B1FD20A2014F5B6117E24D5F779
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6e563d51a66ac35ef9bee7b6e5f0a76fdb33fa7d3b0f937d3eac189b5ceeb82b
MD5 11293b100c9424033b22aeaa4f79502d
SHA1 91040df8c30893eee49d273fe7a80bbbdca186a6
SHA512 41816443be8b7c950865bcf44f7db8a757f3c87bf130e52787f7f6d17e4de7f927f74682669f1ce71c1bd0edd35acfa1e32da6a9217b2bd3ae5588545a7cc03c
TLSH
T1113179B7C3E4866E891156F0AB246E1BCE2C0506832C7C1689E4EF1BA7E2475E24159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 47eca8af8df69c79fb035af5aa19ae1309f6aa869c9bee41be7aa4f50759f85e
MD5 41648132cf4a0fb9d95aec8fd49bda35
SHA1 62736c26a684a8d9f80143545bb1bde96c9ceb12
SHA512 71cd15a4b3c611f4805a6d48f5f763d323d7bb3e7c55fd599719dc6afd25516283ff97ba21669bca698c2efb874f3ce512b61308466749c2969d9bcee424693c
SSDEEP 192:sxZNRByM/jK1Ml8MkLk/flswBJKIdpdtHW6+WNGYIkH6jIgrJ:sxZNnMLk/flswBJDzHbGh9
TLSH
T10542D7166A389977CCDBD209FA45BF53D6F50972D2901E44AAFCCA0C04E6AED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 384a7e8a93e98b05951e3eeb74e5a1bac3530501fb298e9c5fb7707e486f20a6
MD5 1b962ec97c58e42f3cbd0ab2da7e4d16
SHA1 e96c660ae8c61f7c8c7097cd1ef966763cf9e915
SHA512 4bf0e9adf69e438055577c830c3c89e0d92ff52253794d66dbe3e0aac290b653d9d8812bb9350bbc3d8d58556e47373213b46e91230b7a022e42ecd1ca8cb1d2
SSDEEP 192:sxZNRByM/jK1Ml8UQtkLk/flsxhJKIdpHtHW6+WNGYIgea6jIg5aJ:sxZNnqGLk/flsxhJDNHbGS4g
TLSH
T12E52D7166A3899B7CCDBD209BA45BF53D6F54872D2901E44AAFCCE0C04E7ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9c1cd9ecef11dc85c0a0461974ccc957eaf19e534067b890bcee9f18af238e4a
MD5 ce7c7d2470636ad21cfa59283649e100
SHA1 86d35d3fa18ceeec879c7218359daef86c4bbc86
SHA512 8daa6e27dd542be46c691816c05fb391dbf4529bdb3ce5310db1010e11b23d48a3a63cb924af6e7c4d45c94a6a63d6a71a18b017ec9f0c034d755a7bac967cc7
SSDEEP 768:CYsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9XroZ50fz:CYsqxXlWvJD6Tu1ja54LAs9EZ5c
TLSH
T1D0D21B3B694CC77E4F840E6CEC266FD76ED801CB96988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 07234e86a7f22cba30cf1de8bb79a80aeaebec7666b6b3b585c1870c6b3570e5
MD5 b2fa06cf984a08c7997fc3b201af1666
SHA1 60fd88ab6f542abead520e42beb6375a005c4ec8
SHA512 b3cd28eeeff67a72ef354c91036639c0ea726ce16f57ffdcffba243304c081ed6838a18b775167edf8b5a9a232eea7040ae118f31faec5107bf5bdd28c0bd726
SSDEEP 96:KYbaKYIKmveKE0i2jaKQg/gxC+oOyLZCT63WLKJ:Ex5N12gxC+oOytCT+W2
TLSH
T129A13915317B03427CBE2918A2A69537DE4132B33458A86F3F7851E20E6BE221DFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6551ad79-70db-469b-8886-dd46a5e565a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6551ad79-70db-469b-8886-dd46a5e565a0.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 6c2b268fa6ca96c13493c48076502a9512c9068671e34cb7a93eae51f30ec350
MD5 8c4d726801d4405b66ae37517149169b
SHA1 033558961e2854e09c60e6a68b426e43932b17f7
SHA512 67837b9e48973f7c3ec0db35c00b8bbe5f4bf92d19d119a76eb7cecc71c8f4fd59ea86900273b21a59c08ef9dae9dcb1a990cc88fe7f282f6c53ec3400c2463a
SSDEEP 192:uam+xasuheOwQxMGsN6DQwzP0kRbWIQmiU1WTd4VRNQOmyOmHA9zOSR5qwAScjmj:iZcIhsN6DZ/bNWyVRNQOxM9BiScjmw2
TLSH
T13C928D726C785C7B9AF6A145F8872A134FB8A173D7C41F84D5DD6F0D01DA5AC030B925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1bfd0d7f0e7f46d47c378b23fac59401f5bfd3f623a1f4fb7eeabf366a521806
MD5 dfbc15ac203a9270172f3f87a0adeb59
SHA1 e766b3d0f47af5f535d7443e0f0a83ff4654f92b
SHA512 12e6d5fc768b7862cedb098b5c06837d2e17c60fbc4aff59b036451ef7578112dbd5f5c13f06e521f34d762a3f4edcfbc6c49c59b80e43c03e710509ea7ae60b
SSDEEP 192:tON86JkRtQmiUyf1W+RNQOmyOmWh3URYU6:tON86UryW+RNQOxK3U6
TLSH
T1DA02E935AC382C779EF2AD49B94B27175FA8213BEA552F84DAD81B0C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 a1839c5cb9344098c7f9d5afa24b1535f90a4c0cbd79a9a53d618424befb7028
MD5 6b2ea2d393ffb0d8764b4c1e7ee25c7d
SHA1 5dcac8a87560f2b84659e8776e04f5b6d39ab4d9
SHA512 17e8d67f4456b741f1c58889a8e8fa6af9a60d58eec9e697cc51e9077fd0630f19869b0e1092e45b1b8f8753c19558739e8c01c4a6a9f4eb3fdef19f6a0463ea
SSDEEP 192:uRm+xasuheOwQxMGsN6iQwzP0kRbWIQmiU1WTd4VRNQOmyOmHA9zOSR5qwAScjmj:dZcIhsN6iZ/bNWyVRNQOxM9BiScjmw2
TLSH
T1D5928D726C785C7B9AF6A185F8872A134FB8A173D7C81F84D5DDAF0D01DA5AC030B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 4fa54ecbbd21b8ca665d6daece51079349427762d50fc7c295815a5fbe84d784
MD5 1817e68f0ee1eddb2c4929d1a4f03a7a
SHA1 278c59dfbc5ecf046fa28bfa542bd8adf146cb5d
SHA512 526d2a6068172e1f4468ca3b9da7af1c6b5fd20c365b5fce0707413f440d02117be610dfdab742d60b2b9149e1486e52f2bf0dfaa6949274437baad52e736da3
SSDEEP 384:MiFiZcIgzsNC8TUNTUlIliZ/bNWyVRNQOxM9giScjmw2:3FQ8nwgU8AHQOW9gi1ja
TLSH
T181A26C735C688C7BAEF69A85F88B26138FB45173D6C4AA94E6DC5E0C01DB5DC030BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c3731627d00f5e311a6a344827fbe4a092eadc6d4c15df4219ce677cc83d3fb6
MD5 a4b2dd586d8430b0c6d4569624786ea4
SHA1 c28dbed04af79d70268650d6813df98a3652356e
SHA512 3d3604899185cf3dd74a2bb83ac2b43a4725c01e9c447efdaafd6e0c105c05e69c0ad9b2ecaaacbe226d1db4c96e4427c75bfd10a88a423e57afa07885d910b9
SSDEEP 192:zONr6JkRPQmiUyU1u+RNQOmyOmHA9zTVc5qwAU6:zONr6URTu+RNQOxM9GiU6
TLSH
T11812F93668385C7B5EE2A585F48736135EB95127EB897F80D5CC2E0C02DBA9C134E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 192d51ea87c10ffd41b5d9dd6a5b38203c1ea742399c2b8e1ff9eeb8b5d0c65e
MD5 49966f7c1d36e6ab9d48e33b3eca8036
SHA1 0ea130d8daf64fe4713b8045769ca9c5aadbfa8b
SHA512 78e4b2fee48b42df26730dcb5b3419158d03a19bb0617212f07b5b882967a09610de3e680c1b00bcf6ff699cc766b40735e16b3215c1c9e79d40699ca7b124da
TLSH
T1EA41F899A6FD1148B3776E5AAFF6A86E447BBC732E06D19E10110E4E0A72B40C871737
MD5 SHA1 SHA512 TLSH

Submit Download