7dd29109ca5e4006ec73f5e4b8e51b1d4c67ab1864f3d7b69b65a9ff702cb744

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
retrieve.html
Size 5KB
Sample260820-pegbqadb52
SHA256 7dd29109ca5e4006ec73f5e4b8e51b1d4c67ab1864f3d7b69b65a9ff702cb744
MD5 feec6bda9807454c211a19be2f76e295
SHA1 0ac72b9c92b70895556c25f1ac0f7e92cfcde925
SHA512 62e42bf1a706fe76c47fce8a733e5dda5809b28ed4a82a1fa5befd4a45deb19f5830ec1dbd7f3937ccab3a3039ffcda8ab8ed47936044f1399b74344d53cfa0b
SSDEEP 96:GyBJ+tJkNrFuH3CwdqzoQrJm7MuemANRgLqvrliW+oy2Q1o1bWYwW0Y96oOSv:GQJ+tJkNrFuXvdqzoQrJm7MMAfJvJiWn
TLSH
T104C1350E3C8FC419433204C2E5B6AD18C15EEA61F361DD99F6E0037BB2D5A94AE4B78D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4640	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317016670177160"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{3D555F6C-8B86-4DE1-B943-A1DA02256BAC}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4232	msedge.exe
4232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4512 wrote to memory of 4936	4512	msedge.exe	85
PID 4512 wrote to memory of 4640	4512	msedge.exe	86
PID 4512 wrote to memory of 3440	4512	msedge.exe	87
PID 4512 wrote to memory of 3440	4512	msedge.exe	87
PID 4512 wrote to memory of 2088	4512	msedge.exe	88
PID 4512 wrote to memory of 2088	4512	msedge.exe	88
PID 4512 wrote to memory of 2088	4512	msedge.exe	88
PID 4512 wrote to memory of 2200	4512	msedge.exe	89
PID 4512 wrote to memory of 2200	4512	msedge.exe	89
PID 4512 wrote to memory of 4396	4512	msedge.exe	90
PID 4512 wrote to memory of 2200	4512	msedge.exe	89
PID 4512 wrote to memory of 4396	4512	msedge.exe	90
PID 4512 wrote to memory of 4396	4512	msedge.exe	90
PID 4512 wrote to memory of 2140	4512	msedge.exe	92
PID 4512 wrote to memory of 3828	4512	msedge.exe	93
PID 4512 wrote to memory of 2140	4512	msedge.exe	92
PID 4512 wrote to memory of 2140	4512	msedge.exe	92
PID 4512 wrote to memory of 3828	4512	msedge.exe	93
PID 4512 wrote to memory of 3828	4512	msedge.exe	93
PID 4512 wrote to memory of 1240	4512	msedge.exe	97
PID 4512 wrote to memory of 2096	4512	msedge.exe	98
PID 4512 wrote to memory of 1240	4512	msedge.exe	97
PID 4512 wrote to memory of 2096	4512	msedge.exe	98
PID 4512 wrote to memory of 2572	4512	msedge.exe	102
PID 4512 wrote to memory of 380	4512	msedge.exe	113
PID 4512 wrote to memory of 1140	4512	msedge.exe	114
PID 4512 wrote to memory of 2360	4512	msedge.exe	115
PID 4512 wrote to memory of 1060	4512	msedge.exe	117
PID 4512 wrote to memory of 1060	4512	msedge.exe	117
PID 4512 wrote to memory of 4232	4512	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\retrieve.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x2b8,0x7ff9f3a4c188,0x7ff9f3a4c194,0x7ff9f3a4c1a0
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,15890711968934727098,7606337271944938672,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,7502727798019827144,11442627949058199495,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1776,i,4381994251996052731,8786559176616292609,262144 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:2
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,14537145057394170851,12636548970195161144,2097152 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,10218537515525721733,1476207920340284029,2097152 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,10246414422648011877,18061243992554610293,2097152 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,3588515200136356245,18020528945809934990,2097152 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,3685528875844777359,4793537901904585684,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,18160627766248538341,9433286675864876269,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,11980512354564883524,16589492222788246044,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,11980512354564883524,16589492222788246044,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,9832848966337878065,579044717521489686,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,12245127447745185989,7962464316102638750,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,7760119353909350749,11200732215498592840,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,17764098548437209108,10472198266706976239,524288 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,13813196506058312079,14445705856994380770,262144 --field-trial-handle=2880,i,2078650999520183698,9108046865780827413,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4232

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8b518cc4421c5378643bd130fcafdd16cf5510be04e28777acdc48008baf4b75
MD5 838f79643836e53f9a3ce9481f3b3d0d
SHA1 6ad8af3576534044699b9980aa616b31acb75fa5
SHA512 d6ab2131d7539433289dca482b6a43f5cb0c1d42b925f9d88f99ac6a548d5fc36df3964595d9b1006a18a315c8f3630772905d6357457ac1978a3d978f6e2e5e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7g:fwUQC5VwBIiElEd2K57P7g
TLSH
T164B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 fe6006024d10b31392ffa3e93f807023df0f01f01ef51b03751f2fd0f539fc3b
MD5 997ac8914dad2280136fa08ad773bd36
SHA1 ac05aed2522b9782fa2f754fe79e9c6ab402cd6d
SHA512 1bfb95f68e69feab9975bc24e99ee5ce57bcda80cc66c61f8cab40c53512d418326cb30f7b8ae0e5c3c62e5643fd3d5e6776771310b83536d1b8522b0ddfb4fe
TLSH
T169515D24C3520D91EB915233C0D02754367AD6D43BD76F94F29868F91E0EF2E5E7E119
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58f20c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f20c.TMP
Size 2KB
SHA256 236dd963fe90682c6921fe4937eb850e7e312122a03fe142c963a4bb7ccbabef
MD5 b6ed5f2ada60dad4c8e774a55bd437f6
SHA1 c9bc0d0208b04dc71e7456696a18d8285be10888
SHA512 ca2b49fc86247ec23e7ab9ddc7ac7dd4dc05c36cc7dea8e1ef4a125742b1532bf87a4e17683ce0592d4417d047d48239cc79bda93cc5fa30a4342cccf194db5d
TLSH
T19D514C24C3520D91EB911233C0E02754367AD6E83BC76F94F28858F91E0EF2E5E7E119
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4b43648a761d036f6d401eaf4a9905932b6a2de21615507072744fde969f971b
MD5 20a488aa67aa5441fe7da7583ab7d5b1
SHA1 94aa7f92ffa02a6d00c63726065da333e0623657
SHA512 19326027da288f152cf06613a74390faf5c53bb98159c58a9553e7b466e18f650adbdedc68fe13e2dd5a77b88bed1e5dcdc966186e8fc0be2f17f6a7e440c44f
TLSH
T1A2219EF7C3E596AE890156F06A24AE1BCE2D0A46821C7C16C9E4EF2B93F3475E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 783be514ef26c89cc546e1bb9063286c3dc3979a3b6b6de49087fbced1c9dcf2
MD5 254d5831f5b026675d5b9b49a5289e46
SHA1 4d3ac848f11557dfc71ac77a17a0e7a36cb5104b
SHA512 c7e7da524be9a029ad7a8eb0424b74f5b0b0f86455aeecbe591abb527e7f2fba9200ce4e3e9d0ae385453819608665bcb794454551fc1c5738c7564fd2f876c7
SSDEEP 192:sxZwRSyM/jK1Ml8Mk9/flsc8+ZbIdpddHW6+WNGY9IKoKFjIgrJ:sxZw0M9/flsctmTHbG659
TLSH
T17442E7116A34A977CCDBD209FA55BF53D6F91473A2900E44A9FCCA1C04E7AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bf2019a8995a94a7b968d76359204e913553b6a9103e25904063589540ca4a6c
MD5 7ad869005434d387ceccd7f3c7b1a2c2
SHA1 ae254c9ce5aa55c71fadea74da4d3075db609088
SHA512 8ef8c5aa1d9376160be9acda00fd9b17eb940a8d06793dace3e7943ae40bb4c88fb8e3b3b12196ea237b7c62daf0e164b188830f791f71fc8846ef8b1f15e92e
SSDEEP 192:sxZwRSyM/jK1Ml8UQFk9/flsmq80ZbIdpHdHW6+WNGY9ILrtFjIg5JJ:sxZw0qO9/fls7rm9HbGt5R
TLSH
T1DE52E615AA345977CCDBE209BA45BF53D6F5147392900E48A9FCCA1C00EBBED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ac674c40ca50ba7695d91a020189686544bb9bc166fa9d6b497310b70f8b68e8
MD5 29f1a873963eda3f61a71c915a72d05b
SHA1 4c2639b3e9679447df86da929896668115a311e3
SHA512 efd2f3ab9f3c01f0e7b249a8f5e9da67567676f6fddfb839308bc45b84abcedb973f61438bc30fe3e528e59aa50e7ef25843b5b6836efdbe059d19ebe8ca3424
SSDEEP 768:mHcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN5roTg6E:mHcv21wWvu+Z+u1jaeFLeRNyTU
TLSH
T1ECD2FB2B280CCB7E4F841E9CED2A6F866ED801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ea58ccc137b37ad8ffc3365442d6dd9aefac61db7f687a87da58856e6fe1a8be
MD5 67b7f920df344c1197e97388efdc913a
SHA1 07cbdc335912741ed3575b0954843da620a5d8d4
SHA512 2c816575172994513f6ea1054e41d4720ec27e817690653559646f98475a2488dd3077c42d79c726b7405f8b94e13bd416773401061694ede24f1d11bce6d531
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD6aEKPaGO1WKO06C4AKFe5:mTfLRl7y
TLSH
T1B5C12016B13B4642287E780CA79286374F4531A7781CB4AF7FB800A69A6BE115DFE4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe598eb9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe598eb9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3eee614d32669e2bedd109a5f2bda0956de25d0319935d052e412ac35be82f36
MD5 a629213abcc489fa0d0fa3580f823737
SHA1 b9e911851a5197edbab0f6288c99f71b34a4e910
SHA512 1549d14f2985a76c77fa1d2314c4000632f0b208e606c797bb94b39d340d3d55a8a4dafb2697ae0034e2b636cbf3676a0675c54e8e496f917d758f56552a4aa5
SSDEEP 384:RZcIhsNHUWsFziXeoZvdue+CzO4eyfBxivm6oD:5hRavLrOXyfBxi+6o
TLSH
T1A6828D316D742C771DE2E680FD8736179FB89067E6C96A80D9ECAF1D02DE69C1306C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 66c8b3a7f8a0bae807a87df01940c7928c333017ca9a6cb311a0406eaa19fc85
MD5 55a13c6d81fb9b4ad00077fabe5a1565
SHA1 8af5830ddf036b6beb97f46f6cb2fbb25773c176
SHA512 fd868402b97ba88585e3ee7ba83e57e898c577ca102e59aa829cb62a884ca850295598448dfbba8af65b016fcbbf1c760904a45bf110645bb126e325b2b5e373
SSDEEP 384:RiFiZcIGsNHc8TUNTUlIlnsFziXeoZvdue+CzO4eyf4xivm6oD:4FQGVwgmavLrOXyf4xi+6o
TLSH
T1ECA27C325D649C7B6EB6AB80FD8632178FF850A3D5C5AA90EAD8AE1C01DF5DC1307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8515832eaa0112db06cfc42ab773ba75cddb54ab377f3c61d40e20d7021cc4bc
MD5 63027d260c207fbb8a5547a601c2739f
SHA1 d5c044a1ac30affe422186ff207e645192facb70
SHA512 ba411d67aa65e8dbf539ed02ed1b6a0e0d8cd58722d756432d1028b977bafcf7070a72f677e1172f415ea0b1647a880151b540291c58cee481c5eac2dbaac8ef
SSDEEP 192:JONW6v+YLNQmiUy0j01Zh+CGSO49oQusVtU6:JONW6vz/fI1Zh+CzO4eGfU6
TLSH
T1FA02E93579381C7B9FF2AE45F98737275FA81177E9912F40D9E82E1C01D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 eef3109f2b35f4d4289d6f8fd1901fc483d3a2d7ec39ed5dbd9341352afdd98a
MD5 be93de5ccfe0ede93d13b988fab915bf
SHA1 f4998423f13d1930d3929a673c2b1a292389dc52
SHA512 29ea1e101544e2a4b2a4f109a8458dbd9f34d6dca981a0538ca9feb2634fded7276960acf0ffa0d303dc87a593205e16c71b437127e395cbc461440d9b4e7abf
SSDEEP 192:3ON7h6v+YLdQmiUy0j01wh+CGSO49oyfhCHjqWU6:3ON7h6vzPfI1wh+CzO4eyfmxU6
TLSH
T1A4123B35B9385C7B5EE2A984F88332239FA95167E9857F80D5DC3E1C02DF69C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 452e1798e4ae2b1ce4687859e5fd532e1e523a48f10195395f0af5f0a3671567
MD5 da503c30524e6a777c89af5a27b355c3
SHA1 e5068a72d70bb63f1cd43911c957d9437c75bff0
SHA512 fe55b787a9c8b9b4fe6806cf20748cab6fea659ed0d7d452ec25525191e3650fac554c742bea3d1bd35d28aee9fba7531606482cd9895da15d2effeadd830749
SSDEEP 384:+ZcIhsNHUnsFziXeoZvdue+CzO4eyfBxivm6oD:8h0avLrOXyfBxi+6o
TLSH
T134828D316D742C771DE2E680FD8636179FB89067E6C96E80D9ECAF1D02DF69C1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68b6bcd4-b5f7-466a-bbb0-e447f2ff8f17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\68b6bcd4-b5f7-466a-bbb0-e447f2ff8f17.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2db6c43a76f7fa82ca296856c8d6727281cb0328cfebcd292d795292ad7e038f
MD5 687548bd7ac60fecf1d009715fce4a39
SHA1 36708b13b2aed39c4052b90885557be38a73a701
SHA512 1daf6a4f0ebd21873a9fbd389d670a292a1666ad28776c38c8a03bff08ed3d4d6744a4e9d82b2a9ef853d5e711b2fd033d06fdd5693bdb3e9f56321dfe9c6aaf
TLSH
T15141295CA6F91148B3B7AE56ABF6686E487ABD372E06946E00510E4F4623A00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download