c9952f40f7a23d7f7d5f9b2b1754339a0660eb318c79c560012db363bd078153

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 21:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 531B
Sample260730-1hkn4axfpg
SHA256 c9952f40f7a23d7f7d5f9b2b1754339a0660eb318c79c560012db363bd078153
MD5 f5f629bfed86110d8b9920ae9b29d15f
SHA1 eacc5233ca7f44a338524e46de543a14b7960e7e
SHA512 736120039650ded02407c5178847b77bc4d5faacb50afe1f56d4b62eaba5fbabfa17b7cf8e298e7943aec2e9510152198bd670932e9cea8238fd814ae5010bd9
TLSH
T184F0ECE21C540C18867DD5B90C745465C99253170A0CD2D3F1FCAD171F60374BAD27DC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3364	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299211465882953"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{F7271F0D-4149-4627-BCC9-47ED2454C5A2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2132	msedge.exe
2132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe
4104	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4104 wrote to memory of 4492	4104	msedge.exe	86
PID 4104 wrote to memory of 3036	4104	msedge.exe	88
PID 4104 wrote to memory of 3364	4104	msedge.exe	87
PID 4104 wrote to memory of 3036	4104	msedge.exe	88
PID 4104 wrote to memory of 3036	4104	msedge.exe	88
PID 4104 wrote to memory of 4136	4104	msedge.exe	89
PID 4104 wrote to memory of 4136	4104	msedge.exe	89
PID 4104 wrote to memory of 1088	4104	msedge.exe	91
PID 4104 wrote to memory of 1088	4104	msedge.exe	91
PID 4104 wrote to memory of 1276	4104	msedge.exe	92
PID 4104 wrote to memory of 1088	4104	msedge.exe	91
PID 4104 wrote to memory of 1276	4104	msedge.exe	92
PID 4104 wrote to memory of 1276	4104	msedge.exe	92
PID 4104 wrote to memory of 4140	4104	msedge.exe	93
PID 4104 wrote to memory of 4140	4104	msedge.exe	93
PID 4104 wrote to memory of 4140	4104	msedge.exe	93
PID 4104 wrote to memory of 1192	4104	msedge.exe	94
PID 4104 wrote to memory of 1192	4104	msedge.exe	94
PID 4104 wrote to memory of 1192	4104	msedge.exe	94
PID 4104 wrote to memory of 220	4104	msedge.exe	95
PID 4104 wrote to memory of 220	4104	msedge.exe	95
PID 4104 wrote to memory of 220	4104	msedge.exe	95
PID 4104 wrote to memory of 968	4104	msedge.exe	98
PID 4104 wrote to memory of 968	4104	msedge.exe	98
PID 4104 wrote to memory of 968	4104	msedge.exe	98
PID 4104 wrote to memory of 4388	4104	msedge.exe	99
PID 4104 wrote to memory of 4388	4104	msedge.exe	99
PID 4104 wrote to memory of 1536	4104	msedge.exe	100
PID 4104 wrote to memory of 1536	4104	msedge.exe	100
PID 4104 wrote to memory of 772	4104	msedge.exe	102
PID 4104 wrote to memory of 3600	4104	msedge.exe	110
PID 4104 wrote to memory of 1776	4104	msedge.exe	111
PID 4104 wrote to memory of 4624	4104	msedge.exe	112
PID 4104 wrote to memory of 4204	4104	msedge.exe	115
PID 4104 wrote to memory of 4204	4104	msedge.exe	115
PID 4104 wrote to memory of 2660	4104	msedge.exe	119
PID 4104 wrote to memory of 2660	4104	msedge.exe	119
PID 4104 wrote to memory of 2132	4104	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff9d66c188,0x7fff9d66c194,0x7fff9d66c1a0
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,6642573819835422683,14234419978752311108,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,14648630447906382788,870746662979744371,262144 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,6100340216917291108,9998205504137496827,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,6934004395427111055,6817960992913501877,2097152 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,15511341665803077776,18006305293159753389,2097152 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,5600654310177476986,13150431952169897040,2097152 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,9748554277153993714,12387274668187901544,2097152 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:2
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3612,i,14837209043984848220,11074450207815988670,2097152 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5252,i,10018446630312074723,12986979854414529280,2097152 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4296,i,10912407106656979958,12178923639685652093,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,11405639083841658273,578086651019345684,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,18019386909318399154,4883771474356401241,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,18019386909318399154,4883771474356401241,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,5454620781314913057,1033848753011532479,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,1888101240754724437,8506469320513763806,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,9964077303728962253,8208113229146530753,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,3844049761669830844,16919210849973369431,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,10548800396790697930,895432804607781672,524288 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,1549456512335650943,5010877489644473949,262144 --field-trial-handle=2284,i,10618110249902218555,4199392906365778731,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 35eb67a5d2758b83afcaffdd8ad1e0b9ba46e1ecbd9a8deaab90a9ce2f8f150a
MD5 4d31e9865c9a86ebb1189802e198d43c
SHA1 3bb0e6896404755772b73ea1a75aa5d5a6dcd996
SHA512 9f28ade4d7a6626dccefe55a863479c8f55b3bb6dd77c14d5b5c7e8657f8e30bbee3c7344766af60d3bcb145c40985fb471c8b78cf44a8ac65731043ea726caa
SSDEEP 192:ajImyMOUJJ3Ass3JJEVziidjnnGGGGLLLLLEEMuLO:ajImyMOUJJ3Ass3JJEVziidjnnGGGGLA
TLSH
T1E4E1774682D5C7FADB1621CB89A1539C40B03709EFDCD908178D8EEA318E4DEB5A56F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 4f5edf789193847311dc703df67db0fb9460e2e73b04841e3385c00798319528
MD5 33c561a6089c68c3af5c29e7b0a58fa9
SHA1 5e6a5eed4f7a34e030a5881fb4a2afe4f686f842
SHA512 198d9bc8106adda6dad360cd980bc26b492857fb604b1e81f3a9164e5918c805044bd8896c747448a7e2e1359aa0b199986536dea323d89a5cc890e4e5812ba9
SSDEEP 48:72crZq5pGg/jfZ0BoOa/jCWucvherCSGWgWt2jr1U29kJwRU0P+1:72c0pyoV/9Vvr1RpRU021
TLSH
T135817E3715064E20E75008B295EDD220B83695EFFE8FAFD42184C9750603FB2B6E2E79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 349d1ee09c93526740b5da3ed028cf9d0979057ac358076ef94aa2e75f2b4758
MD5 fbd9e8dbe24263407a6da388dbc73b55
SHA1 ffd69a225bd5b404fa8ace0fa23b684c932b7f44
SHA512 8999288b2ff95698535191e7e83c0cc36cc144f74b56eb6a923a00c37431f9fa1b8b07fc032fb018bb6a1df9bd9d12a47a5e3f656902da5c34faaae425cf2a00
SSDEEP 48:l2crZq5pGgyjfZ0BoOa/FCwucvherCSGWgWt2jr1y29kJwRU0P+g:l2c0pdoV/BVvr1PpRU02g
TLSH
T191818F3725064E20E75008B295DDD220B83695EFFE8FAFC42180C9710613FB2B5E2E79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c4c6a4a2c279367475e9f4597a92fe1bee85a0ec19427ed588c759c94c9edb98
MD5 f7487ee1bd7ada1742650250bd29779f
SHA1 27897eddf377e39a755ec4203bb9a35f076ae853
SHA512 9a7dea7e745c1946381d7f10ad28b98708f132578b39c2e097d48bb371580456819341faf27a13c44ac2546f38c8b0e186be265a6b3bb7a29714d4b96b402cfa
TLSH
T11521BEF783B5956E8B2297F09A18AE1FCE5E0412875C783A85D0AF2393E3471E001B0B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b10656acf9bed97dd10c02abbd6f9caaefb9886bfe84b08f7883031266277c5e
MD5 080bdd79a29db2c2779829ad60a946b0
SHA1 9404f8a9d0f256d3b554270209cdfae41746f4e0
SHA512 04b6723681dcf508d2ad0323ca9683ce387b59ab443698ae61ee9201d2f831a65e22fc5df1c109221bcd8d65b54eba15d5b029f0a730de907066dff5ce6f2ffc
SSDEEP 192:sxZP/yM/jK1Ml8MkY/fcsHbSVOIdpd2yHW6+WNGYvrlddIIgrJ:sxZP7MY/fcsHbebHbGiO9
TLSH
T19552C516AA34A977CCDBD209B945BF53D6F51472A2900E44AAFCDA0C05E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ef39b0504f6a1ae5c35d77f135f5dc29c319e3b4b56a7600dc55c5de3fd1f7ef
MD5 637ff77b15fd2ee1b4311839c458069f
SHA1 d23a215975f5d3fb45d7c7e79ad343ab7ccbcfb5
SHA512 ad15a5b742bfec9431fe090b7f40052805d35dbc4c6d7273f4a9753e522c59bf2df23eadbedf948a61fda0be2c54ba0c2c88cd17606e68f5acc0dd34fed27f0c
SSDEEP 192:sxZP/yM/jK1Ml8UQBkY/fcsILSVOIdpH2yHW6+WNGYv+cXdIIg5bJ:sxZP7qSY/fcsILeFHbGGOn
TLSH
T18C52C616AA349977CCDBD209B941BF53E6F55472A2900E44AAFCCA0C05E6BED2317C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 38d3aa3365e21ba693fb52c0a4970f4b6da74b1b2edd2de97393a6050f2dd105
MD5 da5ad540d95753968ce4d4d05a5877dd
SHA1 2ae16add0aa71f7dba43b78c8ec68dc39015371b
SHA512 0aa089d4cb45082161ebc1fcd90cec116f98b187d5eb341dcd419e675223bc6ba74869841a780aa1af988f0a3b3ab2e93be5f2fadf7a7cc63cd388a68d9441b9
SSDEEP 768:ywseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppuroQL:ywseJ3xWvhfynu1jaVcL88plM
TLSH
T157D20B2B680CCB7E4F844E6DEC266F966EE801CB57984D5487EA880C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 73b89ab4f2c28f4833a0189927051e47c8f827210cf56fe826486d58a94d00d2
MD5 5f9379e123c377c6d8343c6dc0678f40
SHA1 4e0660aac7c7af8c1a3f00e42789294f50bd1113
SHA512 5203345ab5479c0f9c6a522d4e70cdac4d151b566e9b63623581d595fd010f340c7fcc1929751ec3fdb9b1006fb197b5e50bc1487756a17c6c85c7fe7bae93c4
SSDEEP 96:KYH+KggmG3GKIY+iGEKr6+2fuKoAy6JuKQ8r:49VNPjdK
TLSH
T198C11606353B061329BD2989B39695364F4232B73058A87FBFB904961E6BE111DFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 5c56f848c4af6bb8997d8956f177b79786cee335c063f80b62df1fb20ccc18a3
MD5 ef130485800b6ae3a7e8ebc36a37d3b4
SHA1 ee3d3569ef0c0171b87480ea77d172be053b4631
SHA512 784815a823f0c5471fb6db30a15ced9b43d98e53f05374a91e6e2b8961a8337f1e50afe91e31b840f28b71985d469cb8e87bcf39afa40183e7f7b2ffa10f9d8c
SSDEEP 192:u9LsNh4YQeCDM7LDrQmiU1dHS4MTCz+FdLlf7T8z13qW1+:GsNhZ6w7fdjdedap1+
TLSH
T10D422B32AC78AC2B9AA7A146F04637036FB4906BD6C46F94A6ED5F1D05DA3AC1317C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 13fb3c747f635236dc81e9493e15304e4968b983641c3b32e55ee48b2efe4122
MD5 eaf9586b4dac5c16c13f56dc7640fa98
SHA1 c8e160a2f467871fd4cf5eb83246028503e4ba58
SHA512 f3224546ae81d2402db2eb169a55509ba70c9f21ba4c0b1bb55b5199a274673f326fcacf0ff5bd5c27304cdfef140ae284d50fc2ea6c2944c6638a0cd3b86d2c
SSDEEP 192:u0s1zsNgvYQeCDM7LDrQmiU1dHS4MTCz+FdLlf7g8U13qWY+:mzsNgQ6w7fdjdedipY+
TLSH
T178422C76AC74AC2B99A7A146F04637036FB4906BD7C46F94E6DD5F0D05CA39C1307C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 5340e686c6aec96a01bfc93981cde181c0455d3fecc87f634aa0d911941f966d
MD5 e9d0063572c5d42fd9e5380cc68f2ab3
SHA1 0b95bde02fc9a293f21a0e5e569b9b7bd3342555
SHA512 6c78a98a92f8b48c2c7032098f3a19578e8f076018b530a424701eaf9b7b3ba9721b6a6dfc174518a3834071c237de2da89f3116c013ff97959247145bff9d48
SSDEEP 192:u0s1zsNhvYQeCDM7LDrQmiU1dHS4MTCz+FdLlf7f8v13qWY+:mzsNhQ6w7fdjdedipY+
TLSH
T16D422C76AC78AC2B9AA7A146F04637036FB4916BD7C46F94E6ED5F0D05CA39C1307C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 487acf102ba0d597938c8b49efe29716d6fa2c06a7006e380cb3494ec3935c67
MD5 c8afd53c3208a87b5c80c78ffb1f02fc
SHA1 7d3406b6ae9820ebbbc7a05cf7688460119e3b35
SHA512 bf65a16c081373e898375ddef7ff821c38395700f4b3281afa4b9bf7f4ca1fe29ee86009e23b24f665e2bdc19c5506d528a4ca046479a2bf94ccda0b55f51175
SSDEEP 192:lONZ6vMtPQmiUykNThTCz+FdLv8479fU/u:lONZ6UtRFTNdT5U/u
TLSH
T1BD02F835AC786C6BAAA7AD46F48A37175FB4217FA6D05B54EAE82F1C00D764C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e90d200eaac1626da2055a7d5f7e33263ea16d2ac33e612c2cee35dbf31b9de1
MD5 31e3317995ca2f9b9537f5eba66d1469
SHA1 9cb3a77b28abda95e9d475cc8413869088eeb027
SHA512 ce0983711e5f663df5bd412218132ccadfbcda721d534d225a0af9438ac3b95dae59d16b5845aca78e98331f37bbfa2f6945a64c305251af065caeda1f16afe3
SSDEEP 192:uZLsNhvYQeCDM7LDrQmiU1dHS4MTCz+FdLlf7T8z13qWY+:6sNhQ6w7fdjdedapY+
TLSH
T129422B32AC78AC2B9AA7B146F04633136FB4906BD7C46F94A6ED9F0D05CA39C1307C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 67ea70adab4324a991a469ff68621cd8756f94e502ae153c546b56b179a57ef9
MD5 b4c5419a3f56b6761a72f6125fae2c93
SHA1 141b171a43232b95ec51775ea4ead61de529b21c
SHA512 21735697ee60d6b6f9db3d24876ad3c93f936504b046e2424e2a2be3753d3e2679ca82b42b734785f2ba9d1c2624efa25281592aa1026026d214dc682948adbd
SSDEEP 192:QONM6vMRPQmiUy4N/hTCz+FdLlf7r80I3qWU/u:QONM6URRT/NdepU/u
TLSH
T172121A36AC68AC6B6EA7B546F08732071EB4912FEAC46B90F6DC6F1C01DA75C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e8bf2be-d056-4bed-adcb-082992e7bf20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6e8bf2be-d056-4bed-adcb-082992e7bf20.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cbaabd7cdcb0f6785c36610ce1c44da7900995375dcc458e453715173cbdf25d
MD5 5d8c41cb50dd9182236b70f36d7adf48
SHA1 8b691a0356f9916f30cb7b95f6ffdff802440ee4
SHA512 01dc3963024b1e7e7aa213d5db261bf252cdf94b7d5b7f083eaed332fad16ab653e6d6432f089d00adfd1b93fec5139a133760393df22054a9ecdafb02656c00
TLSH
T18C412B98A6E91148B3B76E5AAFF2B8AE487BB9772F07D05D00110D4F0A26A00D871737
MD5 SHA1 SHA512 TLSH

Submit Download