7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 05:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df.html
Size 5KB
Sample260803-fxdtwace65
SHA256 7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df
MD5 a78e44d9c36a4aa2d67d6a5df69aa7da
SHA1 6e2d6c2123bb10f25710d399651cfa952ade12cb
SHA512 5290ea37f84ec8b07b0f61150a6259721aac955d32910e86d179339f1debbdefdbf5f3fc05ba169af27b4b1deca3d8119f7209b2c8da7ab9ad644a9a4da6184c
SSDEEP 48:hSxDAyBB6Pp/TVlaM/l5u9Z/xH+ur7Iq1KppTnjsstyJKHmWnE0MzR7YHIV6kiXj:YDeD56ZYdq9SyJKGAcBQkuFKxVY+csM
TLSH
T124B1531A88F20242688244A56BF73B9536559017CE46C958BEDEE748CFCCB51AEF338C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302076956206467"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{1101135E-4826-46FE-B1A5-82AE8BEC8CB9}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3512	msedge.exe
3512	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe
1380	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1380 wrote to memory of 3308	1380	msedge.exe	85
PID 1380 wrote to memory of 5116	1380	msedge.exe	87
PID 1380 wrote to memory of 4492	1380	msedge.exe	88
PID 1380 wrote to memory of 4492	1380	msedge.exe	88
PID 1380 wrote to memory of 4492	1380	msedge.exe	88
PID 1380 wrote to memory of 5016	1380	msedge.exe	89
PID 1380 wrote to memory of 5016	1380	msedge.exe	89
PID 1380 wrote to memory of 3864	1380	msedge.exe	90
PID 1380 wrote to memory of 3864	1380	msedge.exe	90
PID 1380 wrote to memory of 3864	1380	msedge.exe	90
PID 1380 wrote to memory of 5076	1380	msedge.exe	91
PID 1380 wrote to memory of 5076	1380	msedge.exe	91
PID 1380 wrote to memory of 5076	1380	msedge.exe	91
PID 1380 wrote to memory of 1768	1380	msedge.exe	92
PID 1380 wrote to memory of 4152	1380	msedge.exe	93
PID 1380 wrote to memory of 1768	1380	msedge.exe	92
PID 1380 wrote to memory of 1768	1380	msedge.exe	92
PID 1380 wrote to memory of 4152	1380	msedge.exe	93
PID 1380 wrote to memory of 4152	1380	msedge.exe	93
PID 1380 wrote to memory of 4916	1380	msedge.exe	97
PID 1380 wrote to memory of 2136	1380	msedge.exe	98
PID 1380 wrote to memory of 4916	1380	msedge.exe	97
PID 1380 wrote to memory of 2136	1380	msedge.exe	98
PID 1380 wrote to memory of 516	1380	msedge.exe	100
PID 1380 wrote to memory of 3348	1380	msedge.exe	107
PID 1380 wrote to memory of 1632	1380	msedge.exe	108
PID 1380 wrote to memory of 4068	1380	msedge.exe	109
PID 1380 wrote to memory of 3352	1380	msedge.exe	113
PID 1380 wrote to memory of 3352	1380	msedge.exe	113
PID 1380 wrote to memory of 3512	1380	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\7edbc73fe830550937c2e4c5eec390256fdd2344fe1db845a3533903ffa371df.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff0ed9c188,0x7fff0ed9c194,0x7fff0ed9c1a0
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,13218544529037647876,4964609013032356539,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1864,i,3583935958385395804,18038549544898693259,262144 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:2
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,13553591676080517143,5892479212282377292,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,11912263834785362289,2326833468198965484,2097152 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,3094081899028678048,6718597935699184969,2097152 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4104,i,6887936148445812825,3216411736308808787,2097152 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=4108 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,16105777631825693164,7028808499902603951,2097152 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:2
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,2984443105260570304,4342753940686924570,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,2185681239090781086,1951119557680747652,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,8230516529482405980,405922873745337984,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,8230516529482405980,405922873745337984,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,12461087373910606833,17673188089738498078,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,5399117171733394971,16866194056750728981,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,3604211420438653035,5859406685278500051,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,3223780608819613026,15842792645581786297,524288 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,13524113520841947079,17754008520906819552,262144 --field-trial-handle=2804,i,247819525563538349,7818355931481508498,262144 --variations-seed-version --mojo-platform-channel-handle=1676 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e85b0ead13f780523006ec78ba1f44cba1401bc2d7d23b7891be113cfeb9b806
MD5 84399925537bf33809bfbe648a5f30cd
SHA1 3ef36da0379cc54303aa77ca9b9a75ada5a30a98
SHA512 4ef99f0287e57485571c21bbdc1b9791c36660ad06085389dc5eb1684207048b183691af54aaa9e7a0a61dc9d362b6d1e352ae41e7a2d3b2e9da8f568b26fdac
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T19DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 52e39a24e8ed03b7aa60d7ad11890fb1575290f2bbc980d9f7c01ff10141bfbc
MD5 313b5f57255aecefa533b162ff0d52ad
SHA1 bb0d94066d417ef1d1fe4b7b6d94e0623c20bf12
SHA512 da16001ea0fee4f57485614c0a27570d191ccb2e3974f1d587262f7f3471b8753f9979a683d23371d68c3fe68396e82e5f88d8f22ebfdb480a3290e928737c7d
TLSH
T17C615CB9066349C4F3210238F3F1720075B244A8099FEE1A38177FF8A5C2BBE6111A1F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586992.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586992.TMP
Size 3KB
SHA256 37198be57d7fef7d9afc2904e380c52c570b7b40dc5968abd70919dac4f20d9d
MD5 0de5f8c3aa0a0a681c1abe8fda6d2d79
SHA1 6b666a8bdcef5c682fdde2a7d841e41cbabbdd12
SHA512 a0a6c22e6d8cdc2317492cb8a6fb619941607b53f25a0d1be2597035782dccb0d54dfed310b9496ba0868817a502198b1544b494a40edcdce6715323b6abd9be
TLSH
T11B614D79066315C4F3210238F3F1721475B14598099FEE1A38177FF865C5BBE6115A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 efff3ee4be0cf8696e8744977b1e95ae1b177706ee27fd655440ec33f550c430
MD5 23a2bfd949b7e90acf5c97d3f0637aa4
SHA1 9cae221abcfe7290cd858ed689785d9fb1851d43
SHA512 044b3d5b5f3515ba8dc133e777dbaa1e13d4cd8aed27d335beec249799b92645a7d1049591f8bd8e6c3e867d37f5f72896252285eeccacb7ae099bec69f7ef1d
TLSH
T1C1116DB7C3E5866EC90516F09A14AE1BCE1D0506421C3C2589E4FF2BD3E3075E101A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5bf85d3440d0f5a159b83dafffe0c76e63ffc58f8dc05528ad251e0e3ec227fb
MD5 69e4ce0d848c91374b881fe543f3d982
SHA1 f97938d531b74ebd2dc933b4b05043c7402f8a7f
SHA512 b359f9abdf9853763d0a2f5b131c0a75e25feaafc9f670e8821736bfc3038f38a46b6d890455a2f98d0c6a63c530629cfb8f5059a1e6d877f1c5d418cb405de1
SSDEEP 192:sxZhR4yM/jK1Ml8MkX/fOsTmswRIdpdwHW6+WNGYHjg3sIgrJ:sxZheMX/fOsTQaGHbGm9
TLSH
T11642F811AA38A977CCDFD20DFA45BF53D6F51472A2900E44A9FCDA1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9c865f08ba2c57239dfe2c1f3c1a8fc5173d6c042e82500279ed1f5dfc5b946f
MD5 6b758eeecf998f1dd314021f650bb52d
SHA1 670c2dbef9e13015009cd186a8c91dedb9058458
SHA512 f71fe3310d007c8e2ad7b220468cb7792a8837ebb2c434a63762477893b955bc4a1e9a5abcf2d7d1c41f92a92e5da56103809b25763c246b7ff72bfd6f3d69e1
SSDEEP 192:sxZhR4yM/jK1Ml8UQ8kX/fOsI3swRIdpHwHW6+WNGYHsXUsIg5TJ:sxZheqHX/fOsITaQHbGtb
TLSH
T12452F816AA385977CCDFD20DF941BF53D6F51472A2900E44A9FCDA1C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 bbca9185a8ea582e3d34164d802222c613b5d80f38cc689aae2f654e35c51296
MD5 1be2512d55115fb59c08258bbe962310
SHA1 92a138692cfee8d149a1d31e194fd8de7466fdfd
SHA512 5efb17b15182510c2845272244015a33962b1acfc6d41d9406c7a65826a1ef695d1cbfa0454f28b2613bb8d2721623cdb88a4de751b0098df27a88e46eebac3e
SSDEEP 768:vqUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R8roVo07:vqUZYTMWvg0Pou1ja7eLZmRnt7
TLSH
T1FCD20A2F280CCB7E4F844E5DEC2A6F967ED801CB5A984D5447EA894C03CB3EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 448dfaab4f31f5866391bccf4afac514c400b0a8653481779ffbf9b4aa5a09d0
MD5 c06b5408404e5f07616abf115d4503c6
SHA1 4d8d58e7ac157d65c8d38d07a8ce17c284dd4bd4
SHA512 c167ebcb53e45eaa9eb8519921043f95c8aeefd22a040bc0771631fc1ff8e29fbbee69e4fc761f750cbd9d8a287ac950729e0892c998136e8e7d6c25642ca2b8
SSDEEP 96:KA1eK2AEsIKZSi6cgKNiOvaKAsWje9+cK/qT:E2PncJjey0
TLSH
T189D1274670FA16023C3D2A088364975B8E52B1A3301DE96F7BAC15B58D66E249DFFCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4fd336ef-d7d8-4db8-9828-471e55e57ec1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4fd336ef-d7d8-4db8-9828-471e55e57ec1.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 943d4fe63ab280be4815686e34f7cfb3a457114c686804bd7ef000910d19cb8e
MD5 aa72a4eae5e1dd7d1ad0b2928572734a
SHA1 db831621d5b0eda68c03c1a7e06657442ac78c05
SHA512 733b6d0576b019a442b472897d92a776fa9c9f8354630895df5b6c121365f86f638030a0b1d51069e01ed7bc171344ea9b28fb8fd5a633c6ab9e6ec105b1e739
SSDEEP 384:fZcIhsNVdp81iRIOUPzX5od+08y91X286HlytEDq16WP:3hH9OUDOr28oy6DqUWP
TLSH
T19F928D31997868378AE7F145F44A39134FF95027A7D86FD892ED7B2C00CA1A8131BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 03359103fb6f0bcc488fe38b5a15ddee451f5777305d241afb59cf104e03b180
MD5 7e1a79341e913209fd7e4dc368ca6d00
SHA1 21d2a2c18587ea8abda1dc9168aad6bf059f855d
SHA512 2d7ee9fcc390e883ac951cc2a0701836ab621e39da766d12a7609fe1722fb8db2f3ad1fcab7ccd86c1a0d783fd424e19d5e0d0b0623be36d948b4d630c3cd0aa
SSDEEP 384:SiFiZcIizsNv8TUNTUlIllp81iRIOUPzX5od+08y91X686HlytEDq16WP:ZFQq+wg09OUDOr68oy6DqUWP
TLSH
T110A28E3289A8983B9DF7A645F44E35138FF54067DAD4AFD4E3DD6B1C009A1E8130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9abcab3ea63b7301b46b4bf33fa167a375ea775086c8c6d6e3fb5e9d77ab6b4e
MD5 0579ba87a94f7b6e216abab8ef9c399a
SHA1 c293ba3b1fbeb00e3a51d34394469407bfca7e6b
SHA512 b08244111fd20f19dd12548cafa65663db8c528c8c88c294c9844b3e31173794a02b0fce1c988e646e0173cb37cce416136eaf560e730c8ac39dc4545353d24e
SSDEEP 192:yONJ61VWQmiUy626vgGX5Obd+jIjzorynm2k/aP3oDLU6:yONJ6Wf7vgGX5od+08y9zQDLU6
TLSH
T12E02D735A86C7CBB8AE2BE49B44737135FE92067EA542F84D6E81B1C00D765C2306D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7fdbc8023dd1f1961c6284acb781b4fb008c3a5f576327ffb9a5502d922a34e9
MD5 8a6b2abfa690afa4b2f562a5762519b0
SHA1 e16c063c0abe4c0510da44e191c22e5488e747ef
SHA512 d7d30ace72294c117e713550b04c81aff30e44f6e2f2773d0c3ece4f26b2f1f802f32eb643c4b3a82cc341bb51867946b10ae0c78be55ef9dac0763f097906d2
SSDEEP 192:YONg61NWQmiUy616vNGX5Obd+jIjzorynm21XaDEjJ1qBU6:YONg6SfAvNGX5od+08y91X38U6
TLSH
T1A1120932A86CBC6B5DE2B545B04B32135EE55167EB886FD0D2EC2B1C00DF6AC131AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 9d818b38ed67ec7ea156b5ffa522028d96eaf202800d67c6aaf3f0871a4a5d4a
MD5 adfba16ad475bf2c43d41049b6a21475
SHA1 723b616559084a527aeb80825f763da2e1640586
SHA512 b9c143d2e3a20dcdddedafcfcca85fb5751d42473adb076ee82d27903f95d529a6f1589fc33ab4b98a4ea2f789938123e6f49fb4c547b2e259e1ec850c598f25
SSDEEP 384:FZcIhsNVlp81iRIOUPzX5od+08y91X286HlytEDq16WP:9h79OUDOr28oy6DqUWP
TLSH
T110928D319978AC3789E7F145F44A39134FF95027A7D86FD492EDBB1C00CA5A8131B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b66ed25eb2291a7cabdbca70712c7e6d0d9af8d64748d4babac85e488a01da61
MD5 2eabf8609fccd8d5f8774ce6e5e23b12
SHA1 e529e0cac4183c41c451a0ba27c36ad40ac9f44f
SHA512 6002ace289c39a185fe44afdf78f2bf9de0ba2e66ab223ae526c724fcbafe30d4cfe2940b699577b74cec147bb6e64ecb9151a93c8621e42b61a9a4ff87e811d
TLSH
T1C3412D68B6E91148B3B76F5A9BF6A86D447FBD362E0AD55D00010E4F0676F00C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download