bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
application/language/english/index.html
Size 142B
Sample260730-pdvgys1vbz
SHA256 bbc24cf0260b7c1dd0f7091fc4044dba4791902414003ee699f0ba031a6d5635
MD5 d92311600f6632e0f98c0e5777acf431
SHA1 e799bd5ab234730a641b034fb62d5f7ca0461c50
SHA512 0f6c1d055daf7e1ddc565fd70c9a98f38fc3ee874141494cb2c4f3ed41f43b2d4304167592ae7e41ac95af257b92e2074f5ac82a8f4286624878ed402e1bd09f
TLSH
T1D3C08C66220C2C0C52F233B01AC02260219323C002032B255B8451233A1111DCDC218D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4444	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298872336601443"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{06614DFE-38A9-4E72-AE0B-BE7CBF862A8F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4140	msedge.exe
4140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe
764	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 764 wrote to memory of 2644	764	msedge.exe	86
PID 764 wrote to memory of 4444	764	msedge.exe	87
PID 764 wrote to memory of 4536	764	msedge.exe	88
PID 764 wrote to memory of 4536	764	msedge.exe	88
PID 764 wrote to memory of 4536	764	msedge.exe	88
PID 764 wrote to memory of 2704	764	msedge.exe	89
PID 764 wrote to memory of 2704	764	msedge.exe	89
PID 764 wrote to memory of 1868	764	msedge.exe	91
PID 764 wrote to memory of 1868	764	msedge.exe	91
PID 764 wrote to memory of 1868	764	msedge.exe	91
PID 764 wrote to memory of 1596	764	msedge.exe	92
PID 764 wrote to memory of 1596	764	msedge.exe	92
PID 764 wrote to memory of 1596	764	msedge.exe	92
PID 764 wrote to memory of 5096	764	msedge.exe	93
PID 764 wrote to memory of 5096	764	msedge.exe	93
PID 764 wrote to memory of 4640	764	msedge.exe	94
PID 764 wrote to memory of 5096	764	msedge.exe	93
PID 764 wrote to memory of 4640	764	msedge.exe	94
PID 764 wrote to memory of 4640	764	msedge.exe	94
PID 764 wrote to memory of 3712	764	msedge.exe	97
PID 764 wrote to memory of 2656	764	msedge.exe	98
PID 764 wrote to memory of 3712	764	msedge.exe	97
PID 764 wrote to memory of 2656	764	msedge.exe	98
PID 764 wrote to memory of 4840	764	msedge.exe	100
PID 764 wrote to memory of 4824	764	msedge.exe	108
PID 764 wrote to memory of 2592	764	msedge.exe	109
PID 764 wrote to memory of 3816	764	msedge.exe	110
PID 764 wrote to memory of 540	764	msedge.exe	114
PID 764 wrote to memory of 540	764	msedge.exe	114
PID 764 wrote to memory of 4204	764	msedge.exe	116
PID 764 wrote to memory of 4204	764	msedge.exe	116
PID 764 wrote to memory of 4140	764	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\application\language\english\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2dc,0x7ff92152c188,0x7ff92152c194,0x7ff92152c1a0
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,16386631541204515348,4690186347687861396,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,14117263640173658623,17963864884033269835,262144 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2568,i,7909618945721974747,1072662417225475278,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=1900 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,15278745148395772466,4051999643219546821,2097152 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,10130108511881089037,8841033851653455635,2097152 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,4283881214997008050,9324318143374158288,2097152 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,15467090992114479484,1062523890636235392,2097152 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:2
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,9488460870165483211,1330908284392680955,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7702843606457951474,15110082948730946290,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3327063303432785501,11138891164663523438,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3327063303432785501,11138891164663523438,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,3345669657766551425,7214641235264794660,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,5074289401400088296,4691235849321212386,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,1157247876193696591,10972839810708700610,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,8086868834197621264,12573989535142622737,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=2004 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=784,i,14424135030911279151,7756114573735922753,524288 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5248,i,4971518867799312593,13405731343755194343,262144 --field-trial-handle=2160,i,6152969110393597485,14691721623309564147,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 32c2ec0104ed3fa615a91853fe2c81c0689296eb81a0da6d8aa71657f848ac00
MD5 1492e1014d46c04e89ee5ff361361196
SHA1 c6d687dc2fe9c743429711bb771d12ef6bd69919
SHA512 64643894f3083c5e2f7eb682bec1f8a02868bb23fb7f3a534bbdc6caab5e63ba375fa1e67337b7d5f74abf80f81d5bc49b195364906535032493c21eef050b2b
TLSH
T1CC71910D09D20492F3E51E31F4D336D7753284B94A470E720680ABBDAE16F2D1CB52F8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588cf9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588cf9.TMP
Size 3KB
SHA256 7cc62c0b1d78e8778133f0830c21cd7f40c9516dd78eef4998524365630a631d
MD5 35908ad99a1e401e71a410bc42a33c17
SHA1 9df380c327646aee3f5fc8afc891f3295577c3c3
SHA512 b2d0cb5b219efe0163357f5b8552dff133f5e984a97bc364ed3f9740e11e2ee97375952d7bb7aaa5b951fdfc823ec187f253614c546bd030b59b6874caeb885a
TLSH
T12E71800D09D20592F3E51E31F8D236D7753284B94A470E720680ABBDAE16F2D1CB52F8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f7bc25d8e9ded9e866da727c34592d54748abc28a4210d19c3206f8be32f165c
MD5 5384d94d618adc69347fa34d2b232e0e
SHA1 1eb6f5233341e33d39c2717ceaa8391d1432d71f
SHA512 f271256a8373f6d0e2441eb4819386ee59c43b09d45960a73b5c3111feff99cc1ebd8aea94666bc963c47f262b4c56bb48477788e93d0e88ae743fbe11d7e65a
TLSH
T167115BF3C7D5856E8A0116F06A24AE2BCE2D060683287D19C5E4EF27D3E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1b851ae143d76c67138b625561e7ef5e8fd40e6a0b1080fcae5891987fb4d916
MD5 d1711d78048a52e696167bbfaf63e313
SHA1 fe62401dcd5f521d85936b4f16501ba2305d5180
SHA512 7e1c4322f0baf0aaf18cacf0e643f54515626be189e7f5d6d87d9e468726df80dad8ad96fc230483a0598b3814bc6cfd430648288cdf035fc10eb3a7d0aeea85
SSDEEP 192:sxZURdyM/jK1Ml8MkIJ/fRs1ZDIdpdmyHW6+WNGYwK8+IIgrJ:sxZUjMIJ/fRs1ZckyHbG59
TLSH
T11242E816AB345977CCDBD209BA55BF53D6F94472E2900E44A9FCDA0C04E6BEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 90214b3392a1f6890983b5ea9e67181e73e02c0dc3a3f9371d8f9a3a9984bdc4
MD5 3476e11b86a3d7fa4da6d22a32d6d97f
SHA1 5910d948bb68d59cca6faa149e9e74a3d09b78d0
SHA512 a535c742490858982ddb6f16c38e968682195ff06431e942f317c46762efba4548f66662d4fddb749f17c7d29169957227cd659bd2e942d22ca0cfb1776a4f33
SSDEEP 192:sxZURdyM/jK1Ml8UQ1kIJ/fRsrBDIdpHmyHW6+WNGYwA8dl+IIg5DJ:sxZUjq+IJ/fRsrBcGyHbGa8zH
TLSH
T1EC52D816AB345A77CCDBD209BA51BF53D6F94472D2900E44A9FCDA0C05E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6b6c269f8c9ada73d0907e734ac061f039ee8760ab9b99fd3fd1d382c6e175f6
MD5 c9e2bc398f35361a0f01b322818e9441
SHA1 abe43b6700cb834e9911c87b81bcdb6f9e9bdd59
SHA512 056546ae933a3a2a6652879a8e0fdadb8807c0865f70a7081ae4162aadddf4d48dadc629cfb8795ebb2c2d7bd73df7ccdb79bad7fa81c2b74fd0cb7e97b9e1a1
SSDEEP 768:3Q4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dWroh9cIae:3Q4jeXmWvmKLEu1jacPLZQdt8y
TLSH
T11AD20A3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 24b9f45086f42b096a78bdf3f9a3478e1d092b8526feb48458dad2294b14815d
MD5 c95458e5dfc3140368e095eac14c670b
SHA1 995f253cafee9dc959b53449c5a1500636123dc6
SHA512 7e433f8e2724aa546b72b91acef3b8c231b8b9fc95d9fb1312de3a1a927200105bdf81992adc8687e9ce75cfae8170837ed8a5505ce38a2047a59da505bc8dd5
SSDEEP 48:KsiIfKnKQDyN1IRK+0M++IvKbCQzymOp2f:KsiUKnKW+1mK+05+MKbCeHf
TLSH
T1FB915657717A06022D7E2E0CA595961A9781B1D330ACA42F3BE944F54F2AF260EFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592810.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592810.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 962c0402bdeff50f9dc9f82f2de270b48b78e01f8cc587ed693381192cc3dc6e
MD5 f0727c082e682bf68ac4ca1ba5c9a8d1
SHA1 242f479f42936d1797dc26e89ae0834e5ec394db
SHA512 3532562fb10c04728f1f1f822a2e17df205823e04516c1976c0b1bffc52873740b59515a62bba470af2519bd89fe80daa7349032fcfce0740643ed62829ec21e
SSDEEP 384:YZcIhsNIWVl1gDBfZIif+xOE1hpxJrYtmFy8OObjI9G6w7J+:mhEqYOshLhny829MU
TLSH
T1CA928C326C788C375DE2A250F48736138FF8917BE7D86F84A1ECFB1D0496AAC1316825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 8f5377f0e2dbae25f00ad1b946cd95cecbe8406ea72a3bd1af6f04a8741a0793
MD5 6ca4f31f28acf6b124cbbc32f3a0be42
SHA1 4212251625e843eb70a15d25b232e9e9c4fa6e66
SHA512 7d25ed82be9125345f3d229ee851ec8b70556033d60d06b2fa99915728f263e0a13993e0de47a945f21e056718159ec0ec5e767dbf2febe3de1cbe5801898c02
SSDEEP 384:NiFiZcIYzsN48TUNTUlIlnVl1gDBfZIif+xOE1hpxJrYVCFy8OObjI9G6w7J+:EFQk9wgLqYOshLhZy829MU
TLSH
T14DA27D335C688D7B9EB69B90F88A36138FF54177D6D9AA84E2DCFB1C00975AC1306C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2ffa247ff636c9da9f27d9849addad83227805a096546e9a8cf94254136048f0
MD5 ce6938a0485cb79f9a8ef68b158a4df6
SHA1 81acfb322c26d3ee5c3f9aed87dd23a47e8bd7c9
SHA512 58593cd11e48b16fc2fad3a1db180c7ecda414c2cf7bd3f06cc225c63f12267b4cc5659d6617b8174fb9f0c65c3e73830bad7e018db373212efe51c8ff49acf1
SSDEEP 192:EONa6hZ0QmiUyhhpc/+jVnO1u1m5wOZy/5fvU6:EONa6ocpu+xOE1F2yxfvU6
TLSH
T1C402E935A87C6C778EE2AE45F48727135FE5212BEA956F84D6E82B1C00C775C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 1eef099092242f7e84aa8fffb95d8269ec3ff102e122b4fd2e915f44574186b5
MD5 c3dd54207a1371cab7480eb540dfb2ba
SHA1 9398c757cdae78fe5fe2e6896177fac58190f0a5
SHA512 911c71335e9f4571bf069bff6e522b6391fd8f76d861f9ec4bba1bf7cbedf559c8000fbe99b4d90cc8771ffb84cfd78e2b2da82131ef6e1c74c6292b23599c72
SSDEEP 384:IZcIhsNInVl1gDBfZIif+xOE1hpxJrYtmFy8OObjI9G6w7J+:2hNqYOshLhny829MU
TLSH
T100928D3268788C374DE6A250F48635138FF8917BE7D86F84A1ECFB1D0496A6C1316825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 302bef18e53ae2bcce7d2f55bf02b7786d92dccebc742e96cd6c4bb0347b9cc5
MD5 ba8e04a169338f276b366dbe4f3ec0b9
SHA1 660e3407500ed5410e464c13dec465ede67d9679
SHA512 27c2d274c61c0ea1757a602e39e3ae9fb4f942c965be0734966aef74dc974bfe1842f994a8200c68077f8b805887d831e0f9f05a318a36748dbc03d8948e50be
SSDEEP 192:8ONh6hZNQmiUyzgh+c/+jVnO1u1hjFuSJrYk5cOqyDqzU6:8ONh6fcm+u+xOE1hpxJrYX9y8U6
TLSH
T11212EA3669689C375DE2A691F48732539FE51227EA857FC4D1DC3B1C00DB76C234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0a32347daca351542a53382472d1ed2539916a1c3af6f5c0e8650c9ea68dac3e
MD5 5b06353f322610f02379bfff2bc0db18
SHA1 1f8fb09f6bb9b6ace8def482b87fc9c1f45c7a8b
SHA512 5438dd1c191617c5385ca9cb6b0e6b60ee8df3537982aa9fe52c059a14a5e7d6d81991cd12b7185b9e53cf70d4d6ab3870c88c508b279e66cb8253ced20c6647
TLSH
T1AE414D58A6FA1104B3B76F59ABF2A86D487FB9772F06C45D00110E4F4A23B41C861B33
MD5 SHA1 SHA512 TLSH

Submit Download