c9952f40f7a23d7f7d5f9b2b1754339a0660eb318c79c560012db363bd078153

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 00:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 531B
Sample260731-awkcdahk5s
SHA256 c9952f40f7a23d7f7d5f9b2b1754339a0660eb318c79c560012db363bd078153
MD5 f5f629bfed86110d8b9920ae9b29d15f
SHA1 eacc5233ca7f44a338524e46de543a14b7960e7e
SHA512 736120039650ded02407c5178847b77bc4d5faacb50afe1f56d4b62eaba5fbabfa17b7cf8e298e7943aec2e9510152198bd670932e9cea8238fd814ae5010bd9
TLSH
T184F0ECE21C540C18867DD5B90C745465C99253170A0CD2D3F1FCAD171F60374BAD27DC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4440	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299316273980337"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{348A27E2-9A31-4900-854A-5DB50AD4AE54}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2004	msedge.exe
2004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe
408	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 408 wrote to memory of 4880	408	msedge.exe	87
PID 408 wrote to memory of 4440	408	msedge.exe	89
PID 408 wrote to memory of 3052	408	msedge.exe	90
PID 408 wrote to memory of 1192	408	msedge.exe	91
PID 408 wrote to memory of 3052	408	msedge.exe	90
PID 408 wrote to memory of 1192	408	msedge.exe	91
PID 408 wrote to memory of 1192	408	msedge.exe	91
PID 408 wrote to memory of 2384	408	msedge.exe	92
PID 408 wrote to memory of 2264	408	msedge.exe	93
PID 408 wrote to memory of 2384	408	msedge.exe	92
PID 408 wrote to memory of 2384	408	msedge.exe	92
PID 408 wrote to memory of 2264	408	msedge.exe	93
PID 408 wrote to memory of 2264	408	msedge.exe	93
PID 408 wrote to memory of 888	408	msedge.exe	94
PID 408 wrote to memory of 1704	408	msedge.exe	95
PID 408 wrote to memory of 888	408	msedge.exe	94
PID 408 wrote to memory of 888	408	msedge.exe	94
PID 408 wrote to memory of 1704	408	msedge.exe	95
PID 408 wrote to memory of 1704	408	msedge.exe	95
PID 408 wrote to memory of 3580	408	msedge.exe	96
PID 408 wrote to memory of 3580	408	msedge.exe	96
PID 408 wrote to memory of 3580	408	msedge.exe	96
PID 408 wrote to memory of 1720	408	msedge.exe	99
PID 408 wrote to memory of 2488	408	msedge.exe	100
PID 408 wrote to memory of 1720	408	msedge.exe	99
PID 408 wrote to memory of 2488	408	msedge.exe	100
PID 408 wrote to memory of 2204	408	msedge.exe	102
PID 408 wrote to memory of 4640	408	msedge.exe	103
PID 408 wrote to memory of 4640	408	msedge.exe	103
PID 408 wrote to memory of 4640	408	msedge.exe	103
PID 408 wrote to memory of 4540	408	msedge.exe	109
PID 408 wrote to memory of 2748	408	msedge.exe	110
PID 408 wrote to memory of 1736	408	msedge.exe	111
PID 408 wrote to memory of 2228	408	msedge.exe	119
PID 408 wrote to memory of 2228	408	msedge.exe	119
PID 408 wrote to memory of 2636	408	msedge.exe	120
PID 408 wrote to memory of 2636	408	msedge.exe	120
PID 408 wrote to memory of 2004	408	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff81ad6c188,0x7ff81ad6c194,0x7ff81ad6c1a0
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,16298602425963691029,9742415485359794702,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,4024111979959552241,9232540721159830599,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,10470336686248588292,12459301207374610766,262144 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:2
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,16717403672128970861,3125369350004320119,2097152 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1616069749528415250,10505309686578774199,2097152 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,17269148118728983598,16405284209113634017,2097152 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,16279625556020944198,13912524627401126014,2097152 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3500,i,15193437959573992655,6206725272988499061,2097152 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,12017751139274068155,5536730436807682699,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,17086595040139828381,1354062804933743775,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,18021916383628014210,7088613780987420120,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,18021916383628014210,7088613780987420120,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6220,i,13533446419913739228,2452796090314476233,2097152 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,14174674520643036520,15814592866759317342,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,10958351713842606296,11672324679935104864,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,12756987636687964134,16402558040994224504,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,13652850960641650120,454269364214143689,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,5876314824414643897,5132388075929904203,524288 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5388,i,11182920586670048704,11497258720738061055,262144 --field-trial-handle=2724,i,10326013977005577866,700229235364760165,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 6dc66f87d8155cdad30784571d3fc1bc78ccb6d77dc5c2db8c55562e8aff7ca0
MD5 b9c68d405089a6e069084a6a5d90f7c3
SHA1 262f0f85a1248007f1a482b73813ef5bf276c6d4
SHA512 1883fc0cc9406dc8b8edb4a75d838d88221babda1cbf5b1483729d0dbd03d7338761ddc427dd99d055fa5c17ec645bf8e85510bbf66b3965179c2040f02f7a44
SSDEEP 48:L2jtsSdqK07kF5S5HZa3fSFXC2yQgFsGXGEBHbx7fy05vCAH+3o5JJK/Wsvynw61:L2CSeU75fyr0nqhDwq5EJU0u68U2aV
TLSH
T1E6914CF4112E6299E3965F31C0DD4AA13335AAFAFD3B2FD7DC9261BFD5167900829028
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 354efdc61eef67caeab313a599e3f0d6b005c6049a2bf66699b846b09a67dd7c
MD5 179626b251de664caee02912938fba27
SHA1 68fdbc6a52067a792aa66d3eb9b01618849c8880
SHA512 25c127682171d92d7b0e3353244cd78e99017efc2b7dea8db8503e079b43f6b9154457475b8d3f957d7caab495a2df39e72f4406440ba536ad9e46eadfc8b180
TLSH
T1C641BDF7C3F9956E8A1297F0AA18AE1FCE5E0511835C7C2A85D0AF2793E3471E100A4B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7a2a580a03973347d5ca45b74ef91ee35868c7d269cfffbeabf57ea00dae04f3
MD5 2f1db46d2b539bdcf8eeff09b7204ca5
SHA1 dcddb0b90dd5512061aa267a3896852422540fd6
SHA512 3c90f703d82abc46d7f6dcf9bc963880f38989e0ef3cf6391acf03c3bf37bd23fb05909c2fc9dd23f41000e1b4f01acb322c785b13dde9526d53e7f03752e396
SSDEEP 192:sxZrRUyM/jK1Ml8Mk8/fYXsywKVCIdpdBJHW6+WNGYvr24JLIgrJ:sxZr2M8/fisywqNHbGYN9
TLSH
T14052E7166A345977CCDBD209F945BF53E6F51462E2900E44AEFCDA0C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fb542b56446acfd72c49efc81d2732bcc58bdb517b3573d31efc8e687b9da3bb
MD5 d98089886a62e5df5374b019c28864b0
SHA1 b44b33bed74db04d1e86222714b2926713016ec8
SHA512 dc457e98bfc334481331613c37f1eafc076164073d9a494c03f985b82a51f1ca36156b692409e37f8e5f9c42edb185388a0c199c421b272817cb26b349e2f3e7
SSDEEP 192:sxZrRUyM/jK1Ml8UQMk8/fYXstOKVCIdpHBJHW6+WNGYvW5VJLIg5SJ:sxZr2qX8/fistOqHHbG1N0
TLSH
T1D052D616AA345977CCDBD20EB941BF53E6F55472A6900E44AEFCDA0C00E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4d0562f09179f95865d7496cb9f92813adab49d01329f1d87028b18b22fa57ac
MD5 41299fcfdcf2df9cf7d8e8dee71bd912
SHA1 61dd0b24c9e995f52c9ab1592696b61938a319c0
SHA512 b473e82a57ce5aaf4b4026e2b179d56d7c9ce0013add8ff3a7055015d6c060f82f3542377934d9818ab63c8fff1465465809207ee727c5d1a649e38d4e1aab86
SSDEEP 768:rXseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppwroEp:rXseJ3xWvhfynu1jaVcL88pbS
TLSH
T1B1D20B2B280CCB7E4F844E5DEC266F966EE801CB67984D5487EA884C03C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 59c0a76d2321ded3ef2d5c72a02292b13798980923b3cf60f30b4383d3200f93
MD5 2fa3d910f5560f3518d69762833034ad
SHA1 5d642cee7bd74c3056b226bd873e730b4c4cafca
SHA512 12e4680dbb760db6830a8d3845f586d69e8e7de180332b58a02196072e7551f3e2da6b9cc27d2eb6509afa71546baef07056e90a27e5c756bd5d0901630ca1c9
SSDEEP 48:KYHIhKggkXyR8IHKZW0DypKIPKrCYfytJIZKSc0p:KYH+KggmC8gKZWiKK0KrCq2JyKScC
TLSH
T1E7C11346343F0202287E2958B2A39D3A8E4275637458A4FFBFB900A15E67E111EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 28f3ccf3af6ec4a696c787994d9b06eeec985912de1e58683db28d5168d23ca4
MD5 0bdcd8e2c0d314c8534684c110407514
SHA1 9d14aa246f00f4c42b66448d692265230ac30876
SHA512 13e8a43e2ee4a853f916e558db6a98ec998d230fffc4df6f789efde04476c52f23bd3fdbceaa398b2907712877961461260799e786e7d451b112444df970b577
SSDEEP 192:uTTm+xasuheOwQxMGsN9UQJJUkM7yA2QmiU1FJEB4MTZS+FdLK7Fd3ED8z1fq8Jb:pZcIhsN9UGJUd7/SREuGdwdUAvJb
TLSH
T194626D725C745C3BAAB7B586F44636035FF4802BEBC46B50E5EDAF0D01DA6A81307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 bc0eed2d95115886814706f8ae3c792021849abf5beaa618b9d95e26a0d019c1
MD5 e345695ba05b34aeca197bf7faacac12
SHA1 1798c5a65ec3a560bcb90060bfa6068622068a05
SHA512 ca9fe6d03c1694f5c61a3481181abf123fccca06ed9b56636fdef58922b7eb0b4ec34426d3889784d7ca7ff142d4ffa3e876c0b994e11d7e78783eb9374296b4
SSDEEP 192:ujTm+xasuheOwQxMGsN9tQJJUkM7yA2QmiU1FJEB4MTZS+FdLK7Fd3ED8z1fq8Jb:1ZcIhsN9tGJUd7/SREuGdwdUAvJb
TLSH
T18B625D725C745C3BAAB7B586F44636035FF4802BEBC46B50E5EDAF0D01DA6A81307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 f7c5b3b053c5d416cebbc6c45bf61b924dac341b7833642adac6b743461e8c3c
MD5 c12cdbdb906a0b0ee01458ad2de00bf5
SHA1 8130e5007834795698cd69eed9841b63be0ec468
SHA512 4b688c8dd8e67afe863926974919318d72ae74e7475da53d3c76318cc779aa4f53dd554428248a1f259bbe59fae7fc69d1a4b6d4385f6eb5bd71fb2ba3e00eaf
SSDEEP 192:uhazm+xasuheOwQxMljzsN9tQJJUkM7yA2QmiU1FJEB4MTZS+FdLK7Fd3Ef8v1fR:cZcI6zsN9tGJUd7/SREuGdwdU4vJb
TLSH
T105725C725C745C3B9AB7B686F44636035EF4802BEBC46F50E5EDAF0D01DA6A81307D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 81548a9544a6a7e71193c1caf1af0a25d6df911304d9bb79f10c67a853d31eac
MD5 4bcf56d1927be773d035905faf23b246
SHA1 c4b9d2bf35bf2bf32bab5f9b760188c8cf179798
SHA512 ba0f852067d803dda7ebdc6b0f282a311f3fce2bbb0b6e0fa873a9a523029c78754a81e5b35f7828380789c02d4279256069ba600e161f974a60f375f12d6bc7
SSDEEP 192:lONnZ6vMtPQmiUyoJThTZS+FdLF847TSU/u:lONnZ6UtRtTFdJeU/u
TLSH
T1D602F735AC786C6B9AB3AD46F48A27171FA4517BEA905B50EAE86F1C00D765C2303C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 b84208177f1d52a04ce8863ece6434d1c477f0a3b48fec1205d4a1bde8d35af7
MD5 dbb61d36ae1db55593b0f03a16559760
SHA1 fea7a5e6467bbe7eac325a072e653b568cee6315
SHA512 6c8c323de93d69caff4916033865756fbfb756d06331de2a0b6fc0855e584649e5ec36140799c73f7c9e55834222d0c0e1666306da9ba08eb26b8b731f889d02
SSDEEP 192:PONQ6vMOPQmiUyIJPhTZS+FdLK7Fd3E/80Ifq8U/u:PONQ6UORvPFdwdUwvU/u
TLSH
T122121B32AC646C6BAEA37585F08B36075EB0816BEAC56B50EADD6F1C01DB66C1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2cbaba9ff1d2de7a4915c171c72e9253044216900c8ca98068f1423d2d2b906a
MD5 2756cbefbf87b875543b8d0b7baac28b
SHA1 145665e73a82cb551b1df2a41223c9f27d6967b9
SHA512 1c939601c0a6810e07ba5472f4e1fca6c029f0f9ad1f5bb59d6ccb58a25726e13dac2bab8e955072f063f0692305895b830ad388338a34fcff49be1386f88920
TLSH
T16A411A59A6F91108B3B76F5A9BF6A56E487B7C372E06C49D10110E4E0A72B40C9B2733
MD5 SHA1 SHA512 TLSH

Submit Download