df1d7113fa93f3cab0aa0953b14208d84d158b4a3acf2836926be10a38177154

Analysis

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/08/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
01wu65yuv7.html
Size 4KB
Sample260822-e7j8zavybv
SHA256 df1d7113fa93f3cab0aa0953b14208d84d158b4a3acf2836926be10a38177154
MD5 a0f687035ea36370523e094c882b4e95
SHA1 bb05db0e16586202030b8bb2b8611db86b36251d
SHA512 abe139a4ef64815c1fcd1fcfc96109a3fa13314c200b7d988f30874177d8740f3a53a54358eca8b8acd50b580a020c1920f043ddb22cc86d056e5d4f05590640
SSDEEP 96:nItDJYtoAJS8ffKH1NPIX4rDJcs01cq4o5nZqtvrIgepKED7B6YI:IVJYtoA1ffqzr/Jcs0Bbqtvnego7I
TLSH
T134A11A757286303E9BE411E9A47B9768763E931138074062E7ACFCD13C20A9F40DBE99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134318468994591759"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{C1B5E470-D866-4A28-A275-69A297C62C71}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4372 wrote to memory of 2012	4372	msedge.exe	85
PID 4372 wrote to memory of 1576	4372	msedge.exe	86
PID 4372 wrote to memory of 1756	4372	msedge.exe	87
PID 4372 wrote to memory of 1756	4372	msedge.exe	87
PID 4372 wrote to memory of 1756	4372	msedge.exe	87
PID 4372 wrote to memory of 2392	4372	msedge.exe	89
PID 4372 wrote to memory of 2392	4372	msedge.exe	89
PID 4372 wrote to memory of 3508	4372	msedge.exe	90
PID 4372 wrote to memory of 1548	4372	msedge.exe	91
PID 4372 wrote to memory of 3508	4372	msedge.exe	90
PID 4372 wrote to memory of 3508	4372	msedge.exe	90
PID 4372 wrote to memory of 1548	4372	msedge.exe	91
PID 4372 wrote to memory of 1548	4372	msedge.exe	91
PID 4372 wrote to memory of 4348	4372	msedge.exe	92
PID 4372 wrote to memory of 4348	4372	msedge.exe	92
PID 4372 wrote to memory of 4348	4372	msedge.exe	92
PID 4372 wrote to memory of 1812	4372	msedge.exe	93
PID 4372 wrote to memory of 1812	4372	msedge.exe	93
PID 4372 wrote to memory of 1812	4372	msedge.exe	93
PID 4372 wrote to memory of 3800	4372	msedge.exe	98
PID 4372 wrote to memory of 3800	4372	msedge.exe	98
PID 4372 wrote to memory of 4624	4372	msedge.exe	97
PID 4372 wrote to memory of 4624	4372	msedge.exe	97
PID 4372 wrote to memory of 4456	4372	msedge.exe	100
PID 4372 wrote to memory of 3496	4372	msedge.exe	111
PID 4372 wrote to memory of 2552	4372	msedge.exe	112
PID 4372 wrote to memory of 4232	4372	msedge.exe	113
PID 4372 wrote to memory of 404	4372	msedge.exe	115
PID 4372 wrote to memory of 404	4372	msedge.exe	115
PID 4372 wrote to memory of 3848	4372	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\01wu65yuv7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x210,0x7ffb6771c188,0x7ffb6771c194,0x7ffb6771c1a0
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,12230544517981163967,7215092959761589238,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,10144730845108239622,15856175631117737689,262144 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,15641331610806978121,4146334680915033212,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,18133705959323647821,15849408186247279137,2097152 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,2861818458259711745,608796552957883381,2097152 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,10149603079256435073,6951145032108576081,2097152 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4140,i,16816148123331242763,7505354299222275248,2097152 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,2890734672837513364,7985274240779668564,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,19529168954982472,1918490211192375448,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6768012976233290325,9384688366517263011,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6768012976233290325,9384688366517263011,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,16853812334957324350,3862821974298039386,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,17884015896366672333,11161812979864627465,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,17344279913064979011,8898465909225479787,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,5852261868645424480,7966629734184929331,524288 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=780,i,10408831246231359860,2293166260070075660,262144 --field-trial-handle=2236,i,5202497396365676375,13982216103413199569,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3848

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d95e31664c9e75ec475e153548764f8aba39bb1634a0588f68a409dd2361309f
MD5 8079c4e5560a9000096ef1c1914cc4f9
SHA1 5fdedbabbe047b341b0ebccb1f310d6fbb8770b9
SHA512 8623bd13ead541089eedca199dd34dac6db09e02f79f2da9fd91ef0ca5c123891e1c8aedf60a1dd927819c61813e4ad0f769a6a20d82a9a5b076e1644b1f03ae
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7g:fwUQC5VwBIiElEd2K57P7g
TLSH
T15BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

288022bb-db73-43fe-b480-5cd543455bb2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\288022bb-db73-43fe-b480-5cd543455bb2.tmp
Size 12KB
SHA256 cef3eb8b28e5da604a254eef9aea71fffafd089bd5e20da0961a93b6a7d9d823
MD5 3572e8a4909c5717391902f004d56dc8
SHA1 84348eecb149ceae78651c6c34dacc755153c7ba
SHA512 ef99c2db8011b969cbbd9c186ee8a8cb3c00bb192aa1ff90954a61d7538b93accb22040f2b9d450affeb843d4db9c2d4ade552f12018a242c00abd84404c2203
SSDEEP 192:sxZ8RLyM/jK1Ml8Mko/fbscRNIdpdkHW6+WNGY4wsKKIgrJ:sxZ8RMo/fbscRuCHbGz9
TLSH
T18A42E8116A3469B7CCDBD209FA557F53D6F90473A6910D44A9FCC91C04EAAED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dc2681efc079353b5e3186b9a2313ba59b05e5fdfc12e1f5a65a460410b8adde
MD5 6bdc8c27b92cabd131cb00ffb45a1166
SHA1 5cd7474a43add92bc723b843a7853ca1260d68c9
SHA512 9329b5a74ad0cd54cb43af960e38cf2f539601a23c7dc479b352bc8aeaf805e6c4f25336102cb4a33b727f8e6bd005e7e592c1041eab0b95e7ff6f2836ee2c93
TLSH
T1D471D815017380B3EB243C32E1C93E9335FF84A83E9F5FA656D1457F9A0A7A6E021834
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5860c8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5860c8.TMP
Size 3KB
SHA256 de092bd7e4bce0e581e0a789b12ecc3fca5ec52d93d4a077575f7b4249b7f740
MD5 9c6e1203248f69fc1f125186d78e6fd3
SHA1 41d5a20dfd49b70026424248083c371b50eb2f83
SHA512 d7b5e27baff3a007be6e3702807a38d51364705723c8093bfee8b7498d30812e1b596e9a85027a7d0d1c3b795cee0d7bda9e1c1eafa9b05c2134e3f083eba4f2
TLSH
T14E71D815017380B3EB243C32E5D93E9334FF84A83E9F5FA615D1457F9A0A7A5E421834
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 61d29178ed449d95613c73c89b62f653e474f598d80c28ef09eb5b25dc138d9f
MD5 4075c4763d19b421494f7885f752dd3b
SHA1 ac1ccb997b655f9ab652a2487a4825a34616e600
SHA512 544cbde857dedef7e75ac866d15f3783e7cfb550c3542bc595e189417da0413e17d5188b3807a9dc0611935253042800de21da6b002ff08c1c31466af5f19b7f
TLSH
T12E217CF783E5866E890156F05A24AE1BCE2D0516422C7C6A89E4BF2793F30B1E00166F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 52396bd2b558d3dd5ef0804d19fc1109edb46b767481a5f928f5d98b3cbaa6a9
MD5 4f586a8daa5a975705c29187ceb35edb
SHA1 42ec460f2008a3232f5381d09045656e520ef631
SHA512 f19582c4fd157f3511976d971268dfc6d5a9a958d576c27cc92fc5775e00f59e2952d46a92e948e8373f1bdf5fee85834c958285bbe426dae6e770200bd065a6
SSDEEP 192:sxZ8RLyM/jK1Ml8UQXko/fbss+NIdpHkHW6+WNGY4Op6KIg5ZJ:sxZ8RqUo/fbss+uEHbGwV
TLSH
T17652F9156A3459B7CCDBD60DFA457F53D6F8047392910E44A9FCCA1C04EAAED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 983a69dc263da019aa6174ac5ec69a719e5673d85b6d2068d257fa391d4e454f
MD5 16ce452b964175450eabd7e93ecef78d
SHA1 58f973bb3add067a93729556cc23866e50a801e1
SHA512 3a0b334db5a649e74b261cccffc7db5bac12cc583577be942b61a9d7d73bd43b0ede8d75014078a679a09a71b6378cab49b0e0eb27d4564773d6a83efa5546a3
SSDEEP 768:Pr8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdQrozkcUn0:Pr8iJPNWvx76ru1jahALocd7PU0
TLSH
T1AFD20B3B680CCB7E4F844E9CEC266F966ED801CB5B948D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 9a5853424d3ceaf32d6a6d1b966486024d99ff2e118e86b7f230b33184b8804d
MD5 0a1ba65d0468f0f5fd817d6f1a294fd6
SHA1 303da04b1d79a3baede053ebbe9134daa626753e
SHA512 1b76e638180bc8009fc212b8dc56beab440548f6f7bc176612f52ac500cb650a8fe1e01a35daa59c744cc5ef75f3747fb830e972aa613fa8d77e7a956b725766
SSDEEP 48:KUQILKlCcTytFIxK20ceBIBKaEUTyd9IRKu0M/:KUQQKlCS2FqK20hBmKaEaW9SKu0Q
TLSH
T106C1071230BB1A472DBD6F0C9691CB1A474175A33018A82B7FD940795DAEE380DFDAED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58fe12.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58fe12.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e9765467e55cf848cfe734f2477d6103f5e499b14d53d461a0f6a692810d6d3a
MD5 f391302b4af3f3fc8e06e2c18197c4a1
SHA1 7c89bda908f7945bbaf75aeb3d3426c883f9b810
SHA512 ec2ece9162b1aece5db125646b525035afbf69fdb747b90c4d0c06b14f14cb39e571e359aaddeb78dc76f9d4cbadad29415b6f9a905cdd4ac83f15eaf34c9ad9
SSDEEP 192:uMLsNYaQQU0smO/QmiU11nN4k03HZ/N6LI/q/LqyX:DsNYaLU0hmXCk8lncXX
TLSH
T1E6424B7268785CBB6EE3A555F00633139FB48167DBC92F94DAEC6B1C01DE2D8130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 d87948a5e51d4e5066756de3a4b58f3244230fb8b43b64473eae5f659d53b554
MD5 f6b8f06d5a464c87dcb5d9defc552968
SHA1 a03fe42f3bbba0e591b41d4caf764ff1212c78ca
SHA512 26d27eafdc600951bbc21df1107a439d19649d1e5f4e715e62bb4b5e5ef791e99a169f142b60be368841c0e4cf8d3f6a4dad4d644be32a843e3bca097c0fe004
SSDEEP 384:/iFiZcIisNI8TUNTUlIlbLU0hmXCk8lkciv8u2oM:KFQi1wgmpciku2P
TLSH
T1C0A27C734CA4997B6DBBEB84F54632179FB44067DACAAF90A6DC9B2C00DE1D81307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c253d772978fb8ccd80b85f6282035f2a4e55983774c56e0cbeaeaa3fc9b13a6
MD5 d03ff1c53fdcc679965c614a17a0c137
SHA1 514070531c13503e144e54fc28886a03c742c545
SHA512 29ca8a4b169f02f0351ee6b7f6d7a69d32cf59659cde08bfb05b673d4f8259b113a51b37c2db638e2b7e403658b8b93c933ccb2f9606ddcaf697c69fae9e0084
SSDEEP 192:uwm+xasuheOwQxMGsNYbQQU0smO/QmiU11nN4k03HZ/N6LI/q/t4/tyAdfKxI2Cc:YZcIhsNYbLU0hmXCk8lnciv8u2oM
TLSH
T1EE828DB15C746C7B6DF7E644F54636179F788027EBCA6F9098ECA72C00DD698130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b6d56cd84089ed2a5018527187f6e7aa13701a2ae6c69e98ef12bc78d2f70818
MD5 5433857b2ac20660ff407081ab7ddd5f
SHA1 dd14f5551acae96fba20480b9588b6f6761b0287
SHA512 43c2bc21d2c3ddbb72b070cedc6094295c9cd378b80b13457fa9f8d799c3d51d20c24893effad0b10bbcefe4b010bb76f4f38a9ae357efcd092ddc656f4b17b3
SSDEEP 96:ZqONkTQsjpfmUTmDK5ih/cIPURHl8h4otop5E5DEBhPwivh50xy0SFYKsAxXeYzi:gON/6kDfQmiUy2oZ903HLQis0U6
TLSH
T1AE02E93568782CBBDEE3AE49F48637275FA5212BEAC52F84D9E81A1C00D764C1747827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4ec893631833d3aaa15338f37cff44a7e8c8bea6df12b52b1b980dc192588de3
MD5 0b04801bfb6441e9da6b13b09f421a3f
SHA1 72de9f81fbe05ae0cd3e321cfdd5a86e3303d119
SHA512 1310f86148f9efde3c64be85ef992d83aef939005cef481310285611855b895d53611c831c8ddf3aa5f5e6791e665b32722dec4b4c30c53649c0f50323ce220c
SSDEEP 96:7qONk9QsjpfmUTgK5ih/cIPURHl8h4otop5ExDEB0Pwivh50xy0SFYKsAxXeYzph:eONR6kFQmiUyooe903HZ/NqcR/q/U6
TLSH
T1DC123B3268B86C7BADD3A941F08332139EA5812BEFC96F90D5EC271C05DF69C170B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 76bfc9d5bc3cf94d393f216edeb4a50fe8ab9ec02f66b47f3adeb7cd4ca514c6
MD5 ae82e53e28d58082b8e40d00942d97c3
SHA1 8bcea983ce139e3bad2d7e7f9d2463b882ed6489
SHA512 6579d6f310256e27dd5ebe353bea56c51fb208efc9eb422524928c9dab8dba5b966a2aa7ace1e0592abca4065d16413ee587b61614e25c0267d6954d975045f6
TLSH
T1A941394DA6F61108B3B36F5AABF6786E487FB9372E0AD44D10110E4F4A22B40C961737
MD5 SHA1 SHA512 TLSH

Submit Download