9adbcedd3ab1aa8bae4f74911d7c0db6a07eb68345e0cf84db3c8787bb6383cb

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9adbcedd3ab1aa8bae4f74911d7c0db6a07eb68345e0cf84db3c8787bb6383cb.html
Size 82KB
Sample260804-gql3caea73
SHA256 9adbcedd3ab1aa8bae4f74911d7c0db6a07eb68345e0cf84db3c8787bb6383cb
MD5 e35fdea9e3e821b608510512c5988192
SHA1 1ecaf5f12199e730585bca2ba77afe8776abec88
SHA512 8701cf9007bf2b2d7002c7bea4c4f61bbc87e5102f1b609dab3ae88a26a9c6c2f8e69d721448f3dff5256257810349e39d8e1878fa62432bea4e3a5c96ad5e11
SSDEEP 1536:pDoUdBl0q47N/MFIvXuRO79Jz7UdI6e47nWV7qQOO3nQmal:JofvXuRO7a7WVs
TLSH
T1C0830ABAB1A174739E13F560803F400FB93B547BE84C0AA8E294DCE16DF69864467F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3964	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302969049247650"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{3A164EAB-475E-46B7-8008-925C771E7C21}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4696	msedge.exe
4696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 4864	556	msedge.exe	85
PID 556 wrote to memory of 3964	556	msedge.exe	86
PID 556 wrote to memory of 3788	556	msedge.exe	87
PID 556 wrote to memory of 3788	556	msedge.exe	87
PID 556 wrote to memory of 3384	556	msedge.exe	89
PID 556 wrote to memory of 3788	556	msedge.exe	87
PID 556 wrote to memory of 3384	556	msedge.exe	89
PID 556 wrote to memory of 4196	556	msedge.exe	90
PID 556 wrote to memory of 1736	556	msedge.exe	91
PID 556 wrote to memory of 4196	556	msedge.exe	90
PID 556 wrote to memory of 4196	556	msedge.exe	90
PID 556 wrote to memory of 1736	556	msedge.exe	91
PID 556 wrote to memory of 1736	556	msedge.exe	91
PID 556 wrote to memory of 4700	556	msedge.exe	92
PID 556 wrote to memory of 4700	556	msedge.exe	92
PID 556 wrote to memory of 4700	556	msedge.exe	92
PID 556 wrote to memory of 3988	556	msedge.exe	93
PID 556 wrote to memory of 3988	556	msedge.exe	93
PID 556 wrote to memory of 3988	556	msedge.exe	93
PID 556 wrote to memory of 3992	556	msedge.exe	97
PID 556 wrote to memory of 3992	556	msedge.exe	97
PID 556 wrote to memory of 988	556	msedge.exe	98
PID 556 wrote to memory of 988	556	msedge.exe	98
PID 556 wrote to memory of 4796	556	msedge.exe	100
PID 556 wrote to memory of 560	556	msedge.exe	105
PID 556 wrote to memory of 1720	556	msedge.exe	106
PID 556 wrote to memory of 5028	556	msedge.exe	107
PID 556 wrote to memory of 4060	556	msedge.exe	115
PID 556 wrote to memory of 4060	556	msedge.exe	115
PID 556 wrote to memory of 4696	556	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\9adbcedd3ab1aa8bae4f74911d7c0db6a07eb68345e0cf84db3c8787bb6383cb.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8924dc188,0x7ff8924dc194,0x7ff8924dc1a0
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,3916995828302206019,3900895717000156424,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,2291260693877036196,3709266887118208480,262144 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,16851362683052729554,2729523282069931665,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=3016 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,9761516307009353385,9731517039964102399,2097152 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,15923296505986732318,9033461901502654544,2097152 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,15920338555070745956,6192839008645382916,2097152 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,15276746890353533468,10707647024880873175,2097152 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,13674432643268438109,16012209597907736692,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,9218740150037126608,2532764052546683878,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,1535540266294426336,1345116899531363074,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5580,i,1535540266294426336,1345116899531363074,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,758964183139239419,18435072992187481840,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,2624625992924161913,8005856448673586664,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4252,i,1367258370293791236,2229902309336397449,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,10047238922310222178,1197169008054716839,524288 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5572,i,16126701973425416604,8838432555158908007,262144 --field-trial-handle=2276,i,16981271354631173580,6425943731263104092,262144 --variations-seed-version --mojo-platform-channel-handle=1848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4696

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e895c713b499f7261f324b5fdd87824521729acef59d0f511383df5da893930e
MD5 855cd69f46ca80eb69346c8a580ca6b8
SHA1 edabd216a3773be95b50c047ece50793ca1b0403
SHA512 3eba5699e57eb3f6a05ab94cd60ae66b60f73621303363a5393ea34f2b8a556e243a128d41829e64f21b76f4c24cd5978cf832f4255309101adc2b7bbcb1babd
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P76:fwUQC5VwBIiElEd2K57P76
TLSH
T18AB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 58035c2e2d6548e5832048051d16db0349fab9811a932edf6f32ef982a19da86
MD5 d269802ba87c234800aec4265c251455
SHA1 72e7348eee7515346c2a5ec9ecad00ae0c0a7470
SHA512 76273e449e88da5e11efdda2846b112d5be197c03106c2aaeed83fa1e8449c6cbe69a5e215861b509496fbe67280a60739a386edcbafc63017d5024f438045f5
TLSH
T1547182D4F1769896E3A2837DC6E1C625343597AB0B8FDD470660863DE50FBE343AE118
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe590555.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590555.TMP
Size 3KB
SHA256 33bf51e7a493487f53457fb00ebcc1c06e36ec55fdf3eddc28ab2b4149849080
MD5 c3f764bf368a55d7cf68f88b63cd41f9
SHA1 5b1126cb8861a4f65c239efb25b1399413b82f57
SHA512 bbf6b96d435297e32c66f80d89af35f3671f5893dcf77410c0e66993ae7f2e64c27841552ae731ac4b6a8967da549d21a64baeb033436322f10db1bed401090d
TLSH
T19271A3D4F1759896D3A2837DC6E1C624343497AB0B8FDD470660463DE50FBE343AE118
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 530e138bf80161d0255e0b51dfb47fccff64553ba46d0f7e197e89badd031d3a
MD5 a9632fec86c990d74b4fb11ae6f7c84f
SHA1 1eed145d0220bc9c7e03813ae45703e47927d9d1
SHA512 7754c789c396c62681851e725615a175ea5caad362d057c40a197dd2a82287e59ed6e2743ba9628430bb4ac46bf06d845dec6bcc422db6fe0bcff4dfbc357c90
TLSH
T152318EB7C7D4866E891556F09B24AE1BCD2D0606422C3C56C9E8EF5BA3E2871D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8e797aad2e7eae22707824576467c81e7bcff51997a103d7c29600d226a9eea2
MD5 f56763583302f7d5e72ddbaaf94c0283
SHA1 8690c3da2b6cf7a43b628bda93bfbb1715e92835
SHA512 dbaa901a41596aac3b76d5347f69bb8adec5339ef7314623113d0664ca65f4481659cc950a088dcc45fa179def5577a7521c9956187afdebb73b99a3ef06d548
SSDEEP 192:sxZ52+rRYCyM/jK1Ml8MkoW/fIhsk4c5fbIdpd52HW6+WNGYwK5EUqB+o9lIgrJ:sxZ3pM9/f8sk4cimHbGTf9
TLSH
T1B042F811AA34A977CCDBD209FA557F43D6F9047292900E44A9FCDA1C04E6BED231382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 864602327be7ca40c17926f5c66f5c44d35f1e3606a06c2844f4be5294474653
MD5 c48b68da60c29580f26b96050a5e2eba
SHA1 057bd7364519838c5516f74bc4236b5ce539f130
SHA512 73bff5bac7904aaafe08f2d3d585e7e833bcb0f041b43d1f06aeec1b829b0e6fff64979b20e162c95d3a8913b5996b43ad0887608e28e4d3ea07e677a6186339
SSDEEP 192:sxZ52+rRYCyM/jK1Ml8UQhkoW/fIhsoz4C25fbIdpH52HW6+WNGYwU5tUVDB+o9s:sxZ3pqy9/f8sg4licHbGNf2
TLSH
T13252F711AA34A977CCDBD209FA55BF53D6F9047292900E44A9FCDA1C05E6BED231382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 cfe15e862e93688a56e02b48d9657873e98d802f1d684989b2edeb9304f07101
MD5 dde860aeb5e2c69a21c41735d3b28cb7
SHA1 b0840d6f03e8f39173e257ef71c339877f1f27ba
SHA512 c430201a569ef0b0c0dfdf4939d5183fa22a9b1401d91644507c5310e5ff56c9231ed2f4bb5b79ca512eb28d8494d52dce4721cabbc96fe9cdc450c54f19b094
SSDEEP 768:er4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dhrohvciasR:er4jeXmWvmKLEu1jacPLZQdaWWR
TLSH
T11DD2FA3B284CCB7E4F844E5CED26AE976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2f3be4ad5f1219d01db79d8abfb74bafcc6a408095b6bd8b806f3aa1d6d5704f
MD5 815cf851c75679378702e5d3abe98d68
SHA1 0517c55d4a15438417953bfbeea1b5f391faed7c
SHA512 59631699ddd95eb1cc74b9af4d0079c853094807e1bdcb05f67358f65d8721ded5bae0560895103dc3d6123f94ddc8c7c389bd16e66c321f356928afb85a513c
SSDEEP 96:KkHC7ntll+n1AldH+KFLdB+pfHoxXfm3uKQ4/y8KnqGSz:zHC7ntll81A3HHLdBwfHoxXfVHj6
TLSH
T17D915E4173BF42023C7E284C9690D7671646B5773528A42BBBAC01B28E67E252EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

39c095dd-0ecd-4bbb-86c9-17f1ed0ff5ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\39c095dd-0ecd-4bbb-86c9-17f1ed0ff5ad.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 13c5b36e60e88616dd677b3bf066564967a4ae0ebd021c543f95239a539fa96f
MD5 f8b2d536dc91e3a7fa77acd4d9c287e5
SHA1 56ad60d798304f1e50f046ee61234a19c0427a2a
SHA512 37a2f5cb961689cac6c5eb37e60cb66a30688ab6f5fd745f00c20f89858a6bf0fdadcfbad24091e2299576795ab2e669c48445df22fd18c383b8b28f06057cf3
SSDEEP 192:u2GLsNLKUy4QkDeEcaZEnUSoQmiU15c5U/bT4H/+jVEBO1Tm6//E85cFTquq866V:KsN+Ufj6Ec7oFYf++BO1/c/FrP
TLSH
T18F4228316878AC775DE6A585F41B36038EF8516B9AC47FD4E2DD6B1C04CE2AC230B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4e47ff18272a56b8061e661751ab70816d80d88cb8ccce2f0d8009d496840ed0
MD5 5602d4f4cc06979e5492523f325bf39f
SHA1 a90dedcbd419682bf7158c9befba0615f8d80ff4
SHA512 54803ce00ea8c1da0d1a473b31726652bc02d536daa87c57e9115214ffc358070265522ce1af85f45bb6254fe4e5fd46690d1231b976c86dac96af2931a54a0e
SSDEEP 384:uZcIhsN+UNj6Ec7oFYf++BO1/c/FrBeRs9JKgqijU3V:MhtE1ATBO1/c9rTjKgqmU3V
TLSH
T17E929F305878A97769E6A585F44B37038FF88027DAD07FD5E1ECAF1D048A6AC231B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 7d089161e5d9ecc26abd7b970a95de6ba2f69fd3760561cbdee240b4e09db056
MD5 0ca42c934cfb39a3cc17a1b05319ee11
SHA1 6dc9219443a8705a3d65b0b8026bfea93bf628a0
SHA512 1b762f74c45111b0fa08968b067c1d3784227c7517bfa4afc971a988e31be71ac4ec7a2828ad0670af5214412c5b95a9416d3e2faabff1355b0ede6ff8d2a5b0
SSDEEP 384:jiFiZcIozsND8TUNTUlIlNj6Ec7oFYf++BO1/cxFrBeRs9JKgqijU3V:OFQUuwguE1ATBO1/cLrTjKgqmU3V
TLSH
T1F7A27D3248A8D57BAEE6AE85F94A32038FF44067D9D0BFD5E2DCAF1D004A69C130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dab94b1a9557b5fd0be5f218077ed6b20ff6b0d62d073fbcf395101edb6b744e
MD5 dd8f9a21113b854a3963de4fb105c99a
SHA1 ac1070bec8fc27be0c3c85e85bade28e7aab145b
SHA512 c4f27929599ed57d310a8a84223358cb42c91b7e6410d240155394082a8be47178172dcacc080e5372ec84790a199c7397f67a1a9b40d99f61afaa8e57992b2e
SSDEEP 192:EONI6hZ0QmiUy5254pc/+jVEBO1Tm65wOZqVgfrU6:EONI6oSpu++BOU2JDU6
TLSH
T18502D73568AC6C778EE2AE45F48727239FE8212BED956F84D6E81B1D04C775C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c35a94dda881890add73e66de5a14ec2970a96d25f0aec5b5b8931e6ab80ab23
MD5 dfa92962122b598b0f9c05b681158f54
SHA1 0d0c2ecaa7e401c84caf75499cf543587a400374
SHA512 6a9053a80e8848ccc3adf2336d47bafb1c4918b40a1cbda79751aeffc0dd9f48d742a4ac93c72ae67910b7e912ca334683e677884d7f53b62f5e0e1ffff52e84
SSDEEP 192:c0ONHk6hZXJQmiUy5J54bMc/+jVEBO1Tm6//En5cOqquq8U6:XONE6r7ou++BO1/cK9rU6
TLSH
T1B212093268A8AC771DD2A984F48736138EE4512BDE857FC5D6DC2B1C04DF7AC230B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 78cc16b8075d313c122907cb25d30592c323f7ec27a04e87876a5aa9c6383a4b
MD5 61f9dae22843cc6e8ce46a7ecb9e4425
SHA1 b7de8d112e8de13cb12d4b49653cc2218dd7ed9a
SHA512 8a693995d87270b123559550dbc9be2fdae0e55974ecb0801ebc33db1dfb49b65a3a7de2c9ee394c0cdcee3589c0d267f0d96429a5ea050d35486377106dcd18
TLSH
T1FE415B58A6FA1148B3B77F5A9BF7646E487BB8772E07D49E00110D4F4A62A00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download