2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82.html
Size 81KB
Sample260809-gqqqjasale
SHA256 2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82
MD5 d64aa0c8bf4a6d73fd4ffc29ad1e3911
SHA1 af8b14d762e6649dbecd83ad32a2aef8c8d9cdd1
SHA512 50195df9f3d064512436d819edcf7d32c1c483ac62dc3dc7608b1a9ccc0670f72912d47cfcc561b3cfb9ce141ba252670ca941c61b98196dfb287d05a07e3fac
SSDEEP 1536:KmA0oT+OrQf4OktqnkkbWpHXZ/hbGLm9BQOE2J07:vOYbLWimU
TLSH
T1D883F9B9F5A170725E23F970402F500FBA7B646BE40C0AACF154DCE0AEF65898566F2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4344	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307288538364837"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{E4F09665-AECB-4E57-836F-118FF2E5E501}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4260	msedge.exe
4260	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4952 wrote to memory of 4576	4952	msedge.exe	85
PID 4952 wrote to memory of 4344	4952	msedge.exe	86
PID 4952 wrote to memory of 4884	4952	msedge.exe	87
PID 4952 wrote to memory of 4884	4952	msedge.exe	87
PID 4952 wrote to memory of 4884	4952	msedge.exe	87
PID 4952 wrote to memory of 4420	4952	msedge.exe	88
PID 4952 wrote to memory of 4420	4952	msedge.exe	88
PID 4952 wrote to memory of 2504	4952	msedge.exe	90
PID 4952 wrote to memory of 2504	4952	msedge.exe	90
PID 4952 wrote to memory of 3484	4952	msedge.exe	91
PID 4952 wrote to memory of 2504	4952	msedge.exe	90
PID 4952 wrote to memory of 3484	4952	msedge.exe	91
PID 4952 wrote to memory of 3484	4952	msedge.exe	91
PID 4952 wrote to memory of 4888	4952	msedge.exe	92
PID 4952 wrote to memory of 4888	4952	msedge.exe	92
PID 4952 wrote to memory of 4888	4952	msedge.exe	92
PID 4952 wrote to memory of 512	4952	msedge.exe	93
PID 4952 wrote to memory of 512	4952	msedge.exe	93
PID 4952 wrote to memory of 512	4952	msedge.exe	93
PID 4952 wrote to memory of 60	4952	msedge.exe	97
PID 4952 wrote to memory of 2508	4952	msedge.exe	98
PID 4952 wrote to memory of 60	4952	msedge.exe	97
PID 4952 wrote to memory of 2508	4952	msedge.exe	98
PID 4952 wrote to memory of 3276	4952	msedge.exe	100
PID 4952 wrote to memory of 4260	4952	msedge.exe	107
PID 4952 wrote to memory of 4292	4952	msedge.exe	108
PID 4952 wrote to memory of 4300	4952	msedge.exe	109
PID 4952 wrote to memory of 1284	4952	msedge.exe	122
PID 4952 wrote to memory of 1284	4952	msedge.exe	122
PID 4952 wrote to memory of 4260	4952	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2807a5d5ce421b93140dd2a8bdb4c2ded449c97464356963cac0f94e0e3f9b82.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb4f7ac188,0x7ffb4f7ac194,0x7ffb4f7ac1a0
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,5578832585332253041,12492066523877686442,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,10913025017320741020,9692593470953362538,262144 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2392,i,5685436482222598350,13219446192055002821,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,10619998722544203261,10332809800094073561,2097152 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,4983965081718722043,13031978569440527281,2097152 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,6317643988905451127,12346890330049984910,2097152 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,10494968150508521706,18215701272844224319,2097152 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,3620015778593138159,10158963971030359013,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,11335583724749640287,7931143411053595358,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,13950363217984255028,8550369761202712558,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,13950363217984255028,8550369761202712558,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:8
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,13647091640206938701,6042138401965023583,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,13258036710836059215,3794340618146863950,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6288,i,1073884169201702668,3333623040583002947,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,14405305880104583208,2099316090355515259,524288 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,3591741296027076623,1996062338787521265,262144 --field-trial-handle=2352,i,7686601266845752015,13305263365630439202,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4260

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8c5b1a407270ca9ae8bec8f20cc56244f3bde6f042890a4cabcdf4df3d21fdad
MD5 16f782e6f4d4592598936b2f29b6b339
SHA1 5c8c22b7f56af2b2e0d9978418f077cc8fd13c41
SHA512 28b2f7186b910539fa22408b47131fb16874b4c2192a721a69393efd7812da561ea9977b8af678cd3a9e37c23f186f876d7086a20afe28b16659db70955cf16f
TLSH
T15DD09232B7C9E241E14232BAA81447826E2A4A68259AC2176478844CEC6984AA79D28B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b28cb7be2bb68a6cda7ff7689f0ec4acdf8699e4818545d4dd692148ce1d64d2
MD5 a712889d00fb4f0945d13b925681156a
SHA1 1448cbfbc2c620e016aa5e6fccd0ac75e74ef2d1
SHA512 65f51cf451d5f77c9e695462e66abc873922db3c3999c172526727c2356a5a29052ce4b77ead44b02780ca80f6b290696b7633f537570254f36e7374ce0d04a5
TLSH
T12ED09B3277C5D541D5423276A41447816E164568159AC2175474444CDC69445579D147
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 69bf0f5618bcf58b343bbe53fbebe8b3a0d09fb1090d4454b907e43b0f9593c6
MD5 ac9266c6f5d5b727bdf525afa64e4414
SHA1 90af2ad1dfba892427b7c9ed71dc396b4cb392bc
SHA512 6fe1c327bd7d4d0652ce22b214dd3cb2aa4619f9f11f70ce8bc575fac2129782835936d84a44453cecc734e526ead2928d1fa918b50f632966802296452b257b
TLSH
T1F271910B06693E96EFE71170F3ED420D38F283F50D632E661D6CD83D652AB274492308
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5903ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5903ee.TMP
Size 3KB
SHA256 b3921c12eeaadc4ec0c879aea83716dc8f47940fbe489c05d2ea18f395c3bf91
MD5 88a57162258d60a7de826d848df89519
SHA1 2ace11331655cb93a6fec2d812dfd09e60533441
SHA512 64b4781b5934d55f60ca21c8ffaa186689fdb24958b83aa4d27d213628167dbe5af0e3fd01b853444112e32c4f44365bb657170e9fe7414039771a734744a01b
TLSH
T1EE71A20B06693E95EFE71070F3EC420D38F283F94D632EA61DACC83D652AB274492308
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 25814d503a8b25352f0642c34e9fe508b462583cbf0efafeedd7ba58e7690dd7
MD5 2a4a5383387e751477a7dd8246b18fe6
SHA1 05f274394271e1dd18fec9786d03dec0390f5fe6
SHA512 ea46e4434c3ac2c6df4267fab9c860692a95a81940656dcc783c664414d9cf32499414fce8f4c7821e4003f6618aefcc30ee4d17db2ccd8b96e5f089611afb22
TLSH
T1BD31AFB3C3D4867EC91156F09A246E2BCD2D0546432C3C55C9E4FF6B93E24B1D14159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5681f329ba7bcc7f3bad6e5c853d97e2ac221ef3fb8a74704254bf6502db0e51
MD5 69931ec6b7328b62e4338ccda293150a
SHA1 f8367c4219c55d8b21619b3ed3b6be5e931d680e
SHA512 ab7b567ee889c71155a5f382d2786fe309d85ea989c3dfe24d0455be71f7bb95c79c2ffd6d31e3d2833a147261b8a8e3116c2517711e2a108be28083ae0ce431
SSDEEP 192:sxZ1ERMkG/fxsXNNGIdpdMHW6+WNGY4wx4jIgrJ:sxZaFG/fxsXNNn2HbGb9
TLSH
T10E22C7566E38A9778CC7D20DBA25BF43E6F95032A1941E58F6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 0111809c5272e54863b1be3fc797af33960d1c18612cc41da7fe488effcc0a0c
MD5 39d5ad7a08f63b75ab4fa1a22e360299
SHA1 dab62e7799e26898e291afbe56067ed32bea6eb9
SHA512 cd6eb1fefea33170c8fc3799e7d6704cec765d130911a55ea2af7a099d60cdbfaaaf2da02c79d8e77cd401e968d8be38362ab422cabda8e5cd56abde7a407dac
SSDEEP 192:sxZ1ERMkG/fxsGN9GIdpdMHW6+WNGY4Y54jIg5hJ:sxZaFG/fxsGN9n2HbGtl
TLSH
T10A22E8166E3869778CC7E20DBA15BF43E6F95032A1941E58E6FC9A1C04E7BDE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9941b194b11c885664abf8cca09c36fffb0343a9d0590e57ee70f1e39cad6378
MD5 936529d33a11dc89371adab9e1475490
SHA1 36343bb521c47e765fc2758209a0425c5cbeb31d
SHA512 c3d68f0632f1dffe7a9e12e4e333b18208f65162a134953a50e57cc703d8c5759d213f69f0aab7fa5a491c24e2f6d4f9532cc7f02a2fe63e50e321abfeaf8968
SSDEEP 192:sxZ1ERMkG/fxsGNNGIdpdMHW6+WNGY4wx4jIg5TJ:sxZaFG/fxsGNNn2HbGbz
TLSH
T10F22C7566F3869778CC7D20DBA15BF43E6F95032A1941E58E6FC961C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 42921e942064fbaeffdb06a567f2256f1b3a1d36da83f0e6d379b85193af6976
MD5 41c857d861977a02266479fd1fcda06b
SHA1 eb5fe97628a3f49ceddb178cd43d7b52cf17e5a1
SHA512 a9daac1a58f66c6dce27af3d541d2b666a3f94ed50f289fd451186911e8b4554aeea37105d9cf08538844c856e91b33b90f7223caaf7f84df6d58092bb92cc57
SSDEEP 768:Pp4qirTNWvx7jr8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMALl6opTpCroL/3tUnK:Pp4qirTNWvx7jru1ja5ALocTpZLlUK
TLSH
T167C2EA3B640CCB7E4FC01A9DDC5A6F963EA802CB5B588D5087FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c789a6b5b0234d093bdd9d1e7f9eb023ee36c3a1ddd538ebd13fcefc920a4d54
MD5 21f9f0cc3dd5c144b4f2c70b32afceda
SHA1 6292e51c0298184346542676aee6bc3f3108dc72
SHA512 4f8aaaa4a6acb6910aa3635d14fffe67c64075b319f5cc0c13dd2a8d9525efe8f3dbcad3786457efa8cde0685cf4d0eccafd63aed981711e19203b226a59bce1
SSDEEP 48:Ki/27vhFpk5FAPIAXkKzBbJkHP0GghP5yJAIHKBGMVBI5Ka8UTy/:KEIgK9WK6A4KBG2B6Ka8Kg
TLSH
T1CE910D1232BF02013C7F660C9296975B9681B167311CA83A7AAD0172CFE7E650DBDEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59da0a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59da0a.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 8e284bed6b34ec70d9ec6f7661699de97670c7195464329a89dde31dcd7695c1
MD5 e48690e063303d77bb7876c9b80d710e
SHA1 0196d6d14e7db54fcc4030e41ab6a328a1505e49
SHA512 a487080fc78786079f8a2655de7adf71308e276dce10fea9e7fd03dca2bab360c62f68b1cd3ea143abba88a9b46cc3bf91cf32ac9d7d30268e99446fd653a1f8
SSDEEP 384:miFiZcIzzsNT8TUNTUlIl1gzKbq0ukvMFrnTKwBODNZOCDKDR:NFQXOwgQFrnewBKZOw2
TLSH
T1C8A27D728CA89D7B9DF7AA54F94A32078EF480B3D6D86BB4E7DDAA1C00D61D81307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 79f6f3efd5f3c5406f30a0b794161e4f5ef7db935f620421f7c32ac7422333f3
MD5 85783dff1a4014798e105e13e0b741a8
SHA1 eb06fb06fa9e97a29fd056913e730382eac4e32d
SHA512 f9ad537ac25f4e20808cace5587fa28100f8309768076652bd111541a9c1c91b77b342739d39e46fb354e7603c3fad945cb6d65dcc779a0073afb03c2a656088
SSDEEP 384:DZcIhsNB1gzKbq0ukvMDrnTKwBODNZOCDKDR:bhdDrnewBKZOw2
TLSH
T18F927C755C786C778DE3B555F44636179EF88073E6C82FA4AAEDAB1C00DA1E81307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a2cccd3e4bf6f1b71eabe5bce18c54097fd2eb0c462f4ccecc9dd68bf718458
MD5 ec4e08daacab05aae7da3a5f0a1a6457
SHA1 fe50ae7e097cac102fc9b23e4142b9b108b1947b
SHA512 e0cbb228638f79c4bd74eca19dcdc36afb70515ad9b3bbf352c03d1da0c9cefc157bac35e8f26cd8e8f946b7b703c78964df6c5638fc87f2a60c7b215ec42683
SSDEEP 96:ZqONkcQsjpfmUTmDK5ih/cIPURHl8h4otop5T5D2BhPwivh50xy0SFYK7Ax6YLg4:gONc6kDfQmiUyFmZ903NIQi/EU6
TLSH
T1C602E8356C786CBB8EE3AE09F58737275FA5113BEA942F91D9E81A1C40D768C1702827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 c915fd366030c97f378c86192dc3a73c7898437e32922c908c19a829c14231b4
MD5 34222c90efd31e5be2f34429212390cc
SHA1 86931193f15cd5ebf3fdbf25f58c065dff0c33b5
SHA512 3c6f87cecb8c185712d5f67dcd50be8480af76910309e92bab820010dbafec02fb3029b0cb3496139745604407bc24b8d8ccff495e8a1e0eb8db8d6dc6a60373
SSDEEP 192:usLsNBhQGelShmApdQmiU10x0B4k03NoeNOLIAqVn/LKwBwngWTF8INZslblx4tn:PsNBhgzKbq0ukvMDrnTKwBODNZOCDKDE
TLSH
T17C725C7598786C774DE3A554F40736079EB445B7EAC82FB4EAED6B1C00DA2D82307D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 02ecbac13ef1432cf4c4cf80595a07f18d4175cf5d5e515dc9ece03c08b61584
MD5 df37480ce09f77135e9ba183a54a3074
SHA1 5ca88a47ee1ee07a2cd032ad7c3e8e647304852a
SHA512 233741086f4f7aacc76592472c3ea69616ef022f953413bdf52585e0156d3fd6f501a76d3c8bdec6e7e54b0d4a55aac5573232f9eb20d952a74af93bd8fd906f
SSDEEP 96:ZqONkMQsjpfmUT+K5ih/cIPURHl8h4otop5TbD2BXPwivh50xy0SFYK7Ax6YLgCr:gONM6kjQmiUyLmf903NoeN2cRAqVU6
TLSH
T15A121A35A8786C7B5DE3A955F08736135EA44127DFC97F91D9EC2A1C01DB6AC1307812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 14a3323446fdb8a061f4d2577a1565cb3e6339a00a28b25a142f55c7297da866
MD5 6f16fac3d53091ee5e18428a2e7eca43
SHA1 9f1fb21836024e461ca28bf053fac6babe313c94
SHA512 25c6b9b82134f42bc87bc328cbfcccfd8a0f8eaa4cab1d0515f8d9f3e7a7559392a1ab5ac005147d9f7944a69249914cd4d9a9d76b7b6d18f346311fbe824e5c
SSDEEP 384:wFiZcIzzsNT8TUNTUlIl1gzKbq0ukvMwrnTKwBODNZOCDKDR:wFQXOwgQwrnewBKZOw2
TLSH
T1EFA28D724C78993B9DF7AA54F84A32078EF480B7DAD86BB0E6DDAB1C00D61D81307D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

022a00cb-05bb-4b7f-b10a-e3bf3967c7c8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\022a00cb-05bb-4b7f-b10a-e3bf3967c7c8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 720834865b8716cba1fa438ce9edb333d936886a2191627f61c34ba1a756ffba
MD5 b8a45cb15cf63da18c2d4fef6d64e327
SHA1 46faaef7f8334c9c9ff9f338f7043d6d2b886ee2
SHA512 41a17c56b312d868d80558621c9f52f33c13cec80f80c55baec47b3970e8226432259c832f6d7f1ba3a1fb71d357d3bba40d2f940a8dfd7b289e9be085280e83
TLSH
T12641399DA6EA1148B3B76F1AABF6A86D487F78372E46C45D00010D4E0633B40C871B77
MD5 SHA1 SHA512 TLSH

Submit Download