75eb868a5edeff37d68d8c941e1a50b8207d78e9c5d94f4a98842d1caab7f1a4

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HadithAp/index.html
Size 7KB
Sample260814-ameqjaec63
SHA256 75eb868a5edeff37d68d8c941e1a50b8207d78e9c5d94f4a98842d1caab7f1a4
MD5 0a532a14c09d7c76e1f585f93df8bd0e
SHA1 fdb6ee4adbb1419ad0b140c77e5431786ae93144
SHA512 69a2e255f8440eaff08e8f449fb6a87c47815d3733a9deb5fad524b2a985d2c4cfa0f3cc65bbbefec705e2bfcc1c7621c99109b40e8101247551d1de4cc02c13
SSDEEP 192:cLRzTEeGnhYKRgffhFpI1nSVNjkhn5qshIlJB6KO:E3EeGAhFpI1SSn53kB6KO
TLSH
T177F164B5A242512122B3C9855B42974EFF5180138E0797597FFC618B7FA2D6EC913F8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2712	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134311404842676264"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{AA9D14AC-9563-4678-8ACD-6CB948D67BC1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3720	msedge.exe
3720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4032 wrote to memory of 4644	4032	msedge.exe	85
PID 4032 wrote to memory of 2712	4032	msedge.exe	86
PID 4032 wrote to memory of 2388	4032	msedge.exe	87
PID 4032 wrote to memory of 2388	4032	msedge.exe	87
PID 4032 wrote to memory of 2388	4032	msedge.exe	87
PID 4032 wrote to memory of 3144	4032	msedge.exe	89
PID 4032 wrote to memory of 3144	4032	msedge.exe	89
PID 4032 wrote to memory of 2056	4032	msedge.exe	91
PID 4032 wrote to memory of 2056	4032	msedge.exe	91
PID 4032 wrote to memory of 2056	4032	msedge.exe	91
PID 4032 wrote to memory of 3500	4032	msedge.exe	90
PID 4032 wrote to memory of 3500	4032	msedge.exe	90
PID 4032 wrote to memory of 3500	4032	msedge.exe	90
PID 4032 wrote to memory of 1616	4032	msedge.exe	92
PID 4032 wrote to memory of 2792	4032	msedge.exe	93
PID 4032 wrote to memory of 1616	4032	msedge.exe	92
PID 4032 wrote to memory of 1616	4032	msedge.exe	92
PID 4032 wrote to memory of 2792	4032	msedge.exe	93
PID 4032 wrote to memory of 2792	4032	msedge.exe	93
PID 4032 wrote to memory of 3300	4032	msedge.exe	97
PID 4032 wrote to memory of 4944	4032	msedge.exe	98
PID 4032 wrote to memory of 3300	4032	msedge.exe	97
PID 4032 wrote to memory of 4944	4032	msedge.exe	98
PID 4032 wrote to memory of 5024	4032	msedge.exe	100
PID 4032 wrote to memory of 4956	4032	msedge.exe	103
PID 4032 wrote to memory of 4036	4032	msedge.exe	104
PID 4032 wrote to memory of 1432	4032	msedge.exe	105
PID 4032 wrote to memory of 3948	4032	msedge.exe	112
PID 4032 wrote to memory of 3948	4032	msedge.exe	112
PID 4032 wrote to memory of 4416	4032	msedge.exe	113
PID 4032 wrote to memory of 4416	4032	msedge.exe	113
PID 4032 wrote to memory of 3720	4032	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\HadithAp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9557ec188,0x7ff9557ec194,0x7ff9557ec1a0
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,17668354690941179510,18367437274547916475,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,11336168319270188468,12253762796116865081,262144 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,752344151991887109,9704069226370536978,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,5345752589910449049,5553095691682155894,2097152 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,3124474753922906989,11071713878092716112,2097152 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,8827517626433989452,11244559009254905459,2097152 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,3788572146367339974,3546366360990507395,2097152 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,9762605937961787188,7376819688183061120,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,14776384461392112411,10552032857442484610,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5489405912848242264,1385690723619770935,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,5489405912848242264,1385690723619770935,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,13225223088871235209,9942304765809733869,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,15714919954397897737,9820486223762259814,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,7758935148565254867,7517326000074792048,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,2147469900154158160,14137975978919000870,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,10113031839877571384,349183003186516139,524288 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,10132651513783746156,13616099198478214098,262144 --field-trial-handle=2292,i,2446924089806136272,3676832513224788134,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 337373c4da28ee3002914faa7f66bd64bd0d39f2478ab28111896aef3d732e8e
MD5 1538b94629725dbea32dff25f55639b2
SHA1 133e292c7d10ee2edc74eda507e40b826be644bf
SHA512 ace9ab652f654068c864bb79cea4a34770b9e3e2dfeab9c984cbcd6625ccf3ed273271281737948f7076a7204abb9af1697268a6d42c8b81e2eed910356306c4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1DFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

9276ad85-1a0d-4847-877e-dbd2554eeefb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9276ad85-1a0d-4847-877e-dbd2554eeefb.tmp
Size 12KB
SHA256 b4c71ce51648a61cb4193902e7eb68f67c6f7df6222126bacc82dc58d5a49122
MD5 7e4aac66fc7e877b0cb3c5c2feb1a986
SHA1 fa3fa713468579f02a0c1313b9bd38e858dbe543
SHA512 ae9171ee761075ce2ca69fb8408d423cb2ef414e1bb2fbda1c5029c9881d5e94e5bb01d7b7df7eb14e840d52f46822c9fcd89c42a06794a978a80647e4919247
SSDEEP 192:sxZrREyM/jK1Ml8Mky/f0sFw/IdpdNHW6+WNGYHjTVjQnIgrJ:sxZrKMy/f0sFww/HbGesn9
TLSH
T1C542F8166B34A977CCDBD209FA557F53D6F54472A2900E84ADFCCA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3118c63331a5655ed99d9224e3bcc86a390c06bfdeab61f59c75ba5c5319e40e
MD5 6268bdd84c8932d2df307b2d725562c2
SHA1 4915a67033fe41bde51bff9aed41215a3d9c6874
SHA512 d7eb9dc38095dd4529f27e837bff11c1cdb02fb22afe2176d414f5b2dd9f696029df7ceacc560a61e3175c1cff8a4fa12837c39d311233b8cefda192a7bd3874
TLSH
T1A971816547523861F3DE3131A2D202CD7BF38C850A9FDF3742236BF92B267218A79818
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe585fce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe585fce.TMP
Size 3KB
SHA256 b809ff7c30264745be9aa59656ae5ffb98b382017eb91f50939739ed42b0ba4a
MD5 7a790f6aaba894344d277fd89efe0cf1
SHA1 0cdb5173b846a6140636d5e55a1bad8f6bfe4e3d
SHA512 03e4f6bf22a67445ea7d1b7ea042518c71c39038a8086ff6b2073cb889e3aeb34f3b90d19c73569008ff44f12516305561dbbfd0dcea6571dcdb5a03b4408fcb
TLSH
T12C71526547523451F3DE3131A2D206CD7BF38C85199FDF3746232BF92B267218979818
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 743c5147625bcdd997c0167de757e7f824008b15e2054b569f7d4c84995b4a10
MD5 a0ef42cebb0821c7db5777d3b453cd4e
SHA1 ecceb0471e4841b337ce75dc43f29821fe663266
SHA512 973ef01ce32a62dea6a381e5df20360b72c06aa7a1457cc6ae98cd6b90b5a7dc3241ef01d08763417377fcd88ba4dcecb7a7fef923e848a5ee1548044abe48a9
TLSH
T198317BB6C3D4966E891156F09A34AE2BCE1D051742283C26D9E4EF5B93F3471E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fbb7d827004ca343868d5de06912e7763d21a523b73df8ff15e8f4dad0fca5ad
MD5 9fdb8aa1010aff0b8b99621414a81db6
SHA1 a3fe021aed116c1578f6269228d934f4dbef96b1
SHA512 72b3464b70daefb5e1b62c262800faf8a748ed1c9d8a1718c5aa13508f6bcf956fe9117bdbf4fb3ca6acd730d97a8fdbe1c9b819e36ecc5c5c1551658b643b02
SSDEEP 192:sxZrREyM/jK1Ml8UQXky/f0slJ/IdpHNHW6+WNGYH8B6ljQnIg5gJ:sxZrKqUy/f0slJwtHbGbMsn2
TLSH
T10D52E7166A349977CCDBE209B941BF53D7F5447291910E84AEFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2d9ea3104d96a8b622df1bfef25c44ac90f5cb55823d71d0fa634281cab8d8ba
MD5 47d695dbf18402ff9167ea7388f3c245
SHA1 59767d4c6ccb207778b11a08716a660841bfd5b3
SHA512 08dc5414fc4d6a5dc4d2c30940a389f7f79b67d766606e0abaaf45e201c87046b07390cd0a94a43564589a6aebde7f0b959f2e61c7f6e6541bc440606d33a785
SSDEEP 768:c7UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RzroVW0D:c7UZYTMWvg0Pou1ja7eLZmRAfD
TLSH
T1AED20B2F284CCB7E4F844E5DEC266F963ED801CB5A584D544BEA894C03CB2EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 add2cd696ede8ff432600a09f73e3cea86c825267f8c4d1b920657bdac7d957f
MD5 68ed983e29b14783281bb27b46be76c9
SHA1 999fff7545b5c797e38f397b03b06ef7261cd8e2
SHA512 ad6eb5e42dfaf1355469b56b6e98be1902e2f5fd464f0545c53d625263af05dff2ce80ee652c9dca3c131c87c4ebcb406c9631fe700af96afb76b684ea484125
SSDEEP 96:KA1eK2AANKK2IKiSIK/KcGMKvqK2jWKcgA:E0RXs31h
TLSH
T18AD10A2270FA62423C7E6B08876497574E41F1A3305DA86B3BAC65B54D26E209CFFCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 6344f7141c274c70c025c9c2177f0fbe0078770b086f70a8e8afca3ce5758f48
MD5 240acf9bd06b3c6304d847d3034f960f
SHA1 e9c97a3400ea08f5289fd00c6d2893edd8c342e3
SHA512 3e7c85a1f6ad7262a6c81dd2fbe259260e6fefe493aefcdaf4d55fa9d7f166bc7e09c916a8234cfd7fd48f9b0d2399f60a7ce5d7e2e6e12b133d653a6fe20370
SSDEEP 384:NsNYvh/nRcgzX5od+ROwVMEROOPrXLpe8C/Qt87:NF5cIOwOEMEROi9P9t87
TLSH
T1EF726C36E438AD635DE2F999F44736039FB840A7E6847FC4E6DC6B1C01DE1AC130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 46a5ba08e88aeb2a3f0e130debdc8fe94985950382d921fe7d33a8b323d59f83
MD5 28d7a459897c5bc1dcf97fffbff71375
SHA1 c9058a4f951abe84fe5ab624a88ddfc554f98d2e
SHA512 116ba3907e27aa2456e9d87fcbee407ef04164453d113813a70cace38ebbf886e8faebe86a87f497e6fc7f6dedd9f703fd84e1b962a62b80dd186a0fa6d6e204
SSDEEP 384:dZcIhsNYQh/nRcgzX5od+ROwVMEROOPrXLpe8C/Qt8H:Fh+5cIOwOEMEROi9P9t8H
TLSH
T1CE929E32A8386C626DE6F995F84636078FF88077E6C46FC4D1ECAB1C01DA56C130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7662829dc45ff32cf4fc2b3531d63d30a85c956c4c2cb455f02cca82626c0f60
MD5 f09c9bc6238dcd53d60058fb0022b501
SHA1 379c58dd0a02e2a4cc74f107900b385f3da04db6
SHA512 c90451a4652c8e14817fb963eee1723ca782051344f0417cdb4b9702078ed61f702229aec6ee224329c0ef25e0c609be48e0f8e0de32bdc8e91350554b283a4e
SSDEEP 384:xZcIPsNYQh/nRcgzX5od+ROwVM4ROOPrXLpe8C/Qt8H:ZP+5cIOwOEM4ROi9P9t8H
TLSH
T179928E32A8386C726DE6F995F94636078FF88067E6C46FC4E5EC6B1C05DA56C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5e875690509913c977800f51756c13fdcffd80b2c6afa38d1d14d2984aa18bbe
MD5 8a6e5309bf1af231c4c4d9cc90534bda
SHA1 b7d473e5e0fc930303638d73857f20d41e3f74db
SHA512 647abc81a60c79378a0e91040b31436a52a7397a3c4e602d56b6fbad6717b7dac5a0989f9d6c167c7eb56d5972c3ba6e5ad21f831a8f2f4c53b1423b684a6e79
SSDEEP 192:yON261VWQmiUyAxgGX5Obd+jtOwaojD/ac3w4U6:yON26WrgGX5od+ROwVyH4U6
TLSH
T12302EA36A9286CB7CEE2BE4AB58737135FA5106BE9546F84D6E81B1C00D769C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ddffb74514e2696d57da4687c1e49b1481ad7cf74454d9288e8e1efca7d9d877
MD5 9617229ef45a32aa56ad5f0d39e67e60
SHA1 e9752f4d6db5f5aba910474ae0ec8ffb44839e27
SHA512 0b5a2a8237665039752fdd80a5991938c13b35d40e130aea0b8d44d566330142d12a339246dbc9813f7e5dc00f8fb7445e2abe64f8ef4d341a7812aa5fd31004
SSDEEP 192:VONR610WQmiUy3QxAGX5Obd+jtOwaoj4EKjJ0nqzU6:VONR6FGqAGX5od+ROwVM7RU6
TLSH
T197121A36A428AC779ED2B995F48731138FA5516BDA45BFC4D5EC2B1C00DB6AC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

90237486-f99b-4396-80c1-13ff28060f06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\90237486-f99b-4396-80c1-13ff28060f06.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e3bff8ed9d97e2df0d89be855de2779faf5668cc726fb4da20ae37cc7c2c584b
MD5 3a83c8e4e19324734d37f4e26c0c8cab
SHA1 19870a1f6d4d1df8f17faf0e02d80f0deff1a69d
SHA512 40dae1854946b8daa007028d0bdf0cb836845605489a7d5b151e2d858e2eba40dd570ac814651fac192ca5224aaabb93b2828380dedd05c9c15675617be92b52
TLSH
T129410998A6F91108B3B76E569BF7A86E487EB9732E06D45E10150E4F0A26B00CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download