d2b6982fb25867f90eefd4df0782aa0a3d3e52504005a919007a7bec0ab1ce2b

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/08/2026, 03:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Public/Account.html
Size 1KB
Sample260823-d39sdsxtcs
SHA256 d2b6982fb25867f90eefd4df0782aa0a3d3e52504005a919007a7bec0ab1ce2b
MD5 05db3b84aa4cc507b3f8884553410900
SHA1 8a4ae011ad699cb4f8e079a87b887ea40d037138
SHA512 d6fa360363366c355f774a37b7ca892a4b163c3f4152b14dd54aa50b95834fce00de953667b99fce4f0943fde695dd2ad434e2426cbfcc570498543193cd6d03
TLSH
T1D631239FC698282B566B542CF5F1FACA8F5180F256194B74BC667E0FB1460782B3334D
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4808	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319296468541350"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{105F335F-9679-4DCD-B56C-6F95062E6A8F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe
4476	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 2324	4476	msedge.exe	84
PID 4476 wrote to memory of 4808	4476	msedge.exe	85
PID 4476 wrote to memory of 1148	4476	msedge.exe	86
PID 4476 wrote to memory of 1148	4476	msedge.exe	86
PID 4476 wrote to memory of 1148	4476	msedge.exe	86
PID 4476 wrote to memory of 2348	4476	msedge.exe	87
PID 4476 wrote to memory of 2348	4476	msedge.exe	87
PID 4476 wrote to memory of 4348	4476	msedge.exe	88
PID 4476 wrote to memory of 5092	4476	msedge.exe	89
PID 4476 wrote to memory of 4348	4476	msedge.exe	88
PID 4476 wrote to memory of 4348	4476	msedge.exe	88
PID 4476 wrote to memory of 5092	4476	msedge.exe	89
PID 4476 wrote to memory of 5092	4476	msedge.exe	89
PID 4476 wrote to memory of 4384	4476	msedge.exe	91
PID 4476 wrote to memory of 4384	4476	msedge.exe	91
PID 4476 wrote to memory of 4384	4476	msedge.exe	91
PID 4476 wrote to memory of 4512	4476	msedge.exe	92
PID 4476 wrote to memory of 4512	4476	msedge.exe	92
PID 4476 wrote to memory of 4512	4476	msedge.exe	92
PID 4476 wrote to memory of 2424	4476	msedge.exe	100
PID 4476 wrote to memory of 2412	4476	msedge.exe	101
PID 4476 wrote to memory of 2424	4476	msedge.exe	100
PID 4476 wrote to memory of 2412	4476	msedge.exe	101
PID 4476 wrote to memory of 1304	4476	msedge.exe	103
PID 4476 wrote to memory of 4440	4476	msedge.exe	110
PID 4476 wrote to memory of 4352	4476	msedge.exe	111
PID 4476 wrote to memory of 792	4476	msedge.exe	112
PID 4476 wrote to memory of 5004	4476	msedge.exe	114
PID 4476 wrote to memory of 5004	4476	msedge.exe	114
PID 4476 wrote to memory of 3928	4476	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Public\Account.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffa84c1c188,0x7ffa84c1c194,0x7ffa84c1c1a0
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,10797546767332363398,8783456764722713720,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,13177614671949600505,3269850877712652593,262144 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,7189580964572745443,9194884300142065373,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,3828441171748154331,3157280931763324694,2097152 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,14166855935768692306,14895967055547628666,2097152 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,10200632520054528220,11642112524198342248,2097152 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,17636079240570151544,15852788075369702840,2097152 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16529382489310067214,4569108549631654967,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,2283779822378815930,8430248793477742731,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,5704278574508133846,14996862039845043958,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,5704278574508133846,14996862039845043958,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,11201268902111036908,12918303717839591689,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,14152077213012078993,17171358203933461920,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,905950383153574589,3386137518622679549,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,1316254751220524430,1764981303277013471,524288 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6524,i,15745672416439069216,5553326539199230782,262144 --field-trial-handle=2172,i,10843950643736598233,15985332575919902151,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
MD5 f8a5a8774310485121aa8917052b352c
SHA1 78542cc17bce16f7d0117a4beed6ae29c39c3042
SHA512 94c06ac4086f7321e54c95657a2fc0769092ed3577572d27a9a75f404a57f6b0c02e9bb5c1e8c0c285a577d89a5801c60face4ebf1cee334d6be346c240f09ad
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1D5B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bfa57beba13599a185692b384f050891bc92d3d53f22943959338542ca10efd7
MD5 a0f2eb1a0a04228a68829f1330f3ae47
SHA1 2d74821ebb09ee0d4edc4692d459efc45d64315e
SHA512 fad7ff1b4112a78013151a45558320ce54431388ac6940fc623b16c8ab70e8daa9979bb8874a9de2ce35c184f680a7a8a99239b39f49cd77c3901f5a8159dd21
TLSH
T17B61D634C272B452F37107B0F0D21D15343283DEFA0B4CA14E9894B9D216F46DB295AF
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587327.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587327.TMP
Size 3KB
SHA256 53529dc5240f9618b77ab5981de5ad87a2f8e8b8c0796b4b3d5e7c2434e82c25
MD5 09bd24e9d3d010c1073fc6d1e5489972
SHA1 8eb1f7a0a978714903d54452a1d5ca3efa01fc31
SHA512 d85c12e5d0c17b91feaf677e748f854c37e0f784393a60ca053ed7d3ea66e54e925acd41af0b27ced806ceb82c5f246cb5da4f9e06a6dd21eab0ea4781d32dc0
TLSH
T12861D634C276B452F37107B0F1D21D1A343283DEFA0B4CA24E9894B9D116F46DB295AF
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 ca669ba6ce25589af793f23c4c1dcdc67450f1bb86bcc29bc4c8a363da7aee79
MD5 832b9de94a069d8758450219ca8a72b1
SHA1 dbdaef57f7eadcaa3aa2424092c7b6ce3f15ee22
SHA512 cbcb8ae1cd6172a7448f5a280d4b612715f3e20395b1839bcb6c207b023c797d6b89b3a2a73662c20c09b213703d15c81c67c60b9d7dc9b692993719283d82c5
TLSH
T1BF11BAF3C3D5856EC91516F0AA28AE2BCE2D0A06421C3C19D9E4EF2BC3E3075E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3f258142cec81668513d2170fee96f73cda4b8990b2a04ec9b7a80c7271b5da4
MD5 595ccf4ef5c4bae9ed20101fcc596783
SHA1 b11dd1d763c26a74c622937f02563c8bbfca9503
SHA512 dbd54b73c9986b60465c259284e83cbe794224ff078c8d11cc655ba026c9be574d04fd911926236cf6cdf37e255c3f939b150622862271fc5e01373894100f3c
SSDEEP 192:sxZsRWyM/jK1Ml8MkK/fVsw79acIdpd+HW6+WNGY9IKDht7IgrJ:sxZssMK/fVswhOEHbGM9
TLSH
T1FB4208116A34A977CCDBD209FA55BF53D6F5443292900E44A9FCDA1C04E6BED221BC2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 a4290918bb8b70fce7c9f616e52da44aeb40cfeec5cf7f999f7e01c629e75b5a
MD5 c893c7c1ff6703db7393f1f2257c79c4
SHA1 a46da52eb4bc485252e595e385d4183aaeebf62e
SHA512 0e4ce5b340610779c6c109ec051c41f21d5d3655db512cda2cc08837420c0ddccaa012ae49be099f54cb6be185068de744a6f041fa710e54768d8dd769919138
SSDEEP 192:sxZsRWyM/jK1Ml8UQZkK/fVstu9acIdpH+HW6+WNGY9I36kt7Ig57J:sxZssqaK/fVstUOeHbG1n
TLSH
T1245208156A34A977CCEBD209FA55BF53D6F4447292500E44A9FCDA1C00E6BED221BC1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c763a4c4badad50bcbd97fad595b7a4dffa4c1741a01a01573fb6171e69322df
MD5 2e2986a96c59f6827bed5a5523aacefb
SHA1 7f1052cb037e34b03595b7a5b815f96e6ae06c2d
SHA512 988ee057fbd81230e863954f5898ba86bef8164561d9b89a5283f83a749038f36333a5b6cd156a47ee9921222b925670b3030894b3520f223a80cc1a23106da0
SSDEEP 768:6Tcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNdroEg6v:6Tcv21wWvu+Z+u1jaeFLeRNWEf
TLSH
T18DD20A2B280CCB7E4F845E9CED2A6F866DD801CB56988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 8c4699d2dec8a2d02eaca2c896c00809e3b15fef010882a0613f294e719cc63f
MD5 8a6e25aa93d48527660048694bc3ae08
SHA1 331ceb44f70343f9437155b4ee904c6ee166c958
SHA512 8e144ced428ab1d8b8a0e77eb1dee002585c683eba42439fea43a041006faefbba30d33a630589440b161ecffb487e2ac9ba9b12b3a7cff299cd470d0ebea18f
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDyqAKHqOCiAKTqEZmKSAimdeK+g+:mTv73uhl/
TLSH
T13EE1220630370692387F6808A397863A5E4A35A33819E46F7BF940E21F6BE515CFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe590e00.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590e00.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ac2cdfb280319f34b78bae52bcba2bf422a793e010737dd0a4f6d1d31ef7c726
MD5 88c639ac1a239f0863a592e46750e662
SHA1 d74783a1b954e03a153bab93ea8df2f6b595068c
SHA512 2465ea58749162bb8c47dff166125405a98ed56d00d4741d5a1ec1ba80f62d6a83bd57878cc730f6d0d2aa130a19c10a3530b5705358850d02924c7700045923
SSDEEP 384:3ZcIhsNOmD8xkzinm5e+CfdyRyJr9divJ9oH:/h6HAnayh9div8
TLSH
T11F827C315C746C6B29B6E581F44736179FB89077E6CE2B9094DCEF2C01EE6A8131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 9941ef7eac12cbeaf3dfc6e7c3a5b619fb1637b5292c0588a719ae2417ceaf9b
MD5 5d87c2dd5fb93059262e4eeeac077f82
SHA1 05fd7b2b2eee7ce4f96a1738516e9808ecd6fc86
SHA512 267b35acef3e9315e9f0363b06892ec514afc5a7b60955488fbc33fd1a057313a3be6f4313c9ab5e5ecc1bf0c24021a45a528c298a5e9836568f00786249f026
SSDEEP 384:KiFiZcICsNe8TUNTUlIlBD8xkzinm5e+CfdyRyJrwdivJ9oH:BFQC3wgLHAnayhwdiv8
TLSH
T117A27D334CA49C7B6DB6EA80F54A35179FF48077D5CAAA90E6DC9F1C019B59C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fe851df5dd551c1afe583effe48a61edfc78ab687f71894d9d8c70066c5d4204
MD5 e6ba00810e4b6f5bcb22e0c6f64dc5b1
SHA1 bee62f96d74ecd0121e002bad94a1954e9666ee0
SHA512 97d6a54337cf5fe8758515b584cf67cf652a39fa4fd26fc1cdaa447d0ef58806b4e8ff1bfe3599ab70408f319355206c348266734e063a0f59c41777ce63fc3a
SSDEEP 192:iiON36v+YLI5QmiUyww/ieh+CG1+Fde5RU2SJrzCH+qxU6:TON36vzKI7h+CfdyRyJrAdU6
TLSH
T14A121A36A8746C6B5EA2B941F08735135FE49137EA8A3B90D5DC2E1C01EF69C130E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4bceebce80c2b758913434dd6b8310a42441c5b6a5cd56e4a3fb789dd9667598
MD5 b85e16be2609025e057dce5db89d8ac5
SHA1 de6bcd5af5eb771a85d7b23ad2b4571a9a8fe99d
SHA512 75cb6853bd5df19cdc9cef75c8bd8f8c4d950a209e31208357a140fb94dd6a4c6ace9f32c409f4547c41e7e2d9fe8be40502947a5ece25cc10b5e66653ec54e0
SSDEEP 384:EZcIhsNOBD8xkzinm5e+CfdyRyJr9divJ9oH:ihzHAnayh9div8
TLSH
T147827C315C746C6B29B6E580F54735179FB89077E6CE2B9094ECEF2C01DA6A8131AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f508f60cb1c33cdcbd9866534ffc3a3283519364d8355c4c6a83aff144ccf482
MD5 052d5ade42162e92e46b03404fa36f35
SHA1 a0db6f93e441172ffa99fc515f680edf7e67eb05
SHA512 537db2ebb560e5573edfc29ad9ba69e1e113b641230c1f2db8eef95107c03c2c5682a790e3c4245b28a12e493333b85f31f15dbe15aa662dbf07706dead53471
SSDEEP 192:JONV66v+YLNQmiUywF/Zh+CG1+Fde5RBusIIU6:JONc6vz/RZh+CfdyRBxU6
TLSH
T1CC02F935AC382CAB9FB2AE05F48737175FE42137E9962F90D9D82F1C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 77b08e8e10437e2ed76526aaeb98d750788c04bc0b411bff157f2c24d4171af4
MD5 aa83fdcbde864d507a9723e0514117e6
SHA1 930e6884050e76affd32244d5fc640dc945ef43b
SHA512 9a8a4164ba330d81d38c87316c8d24b82313554c1d06b134f5bbfdf3c290f74a1a6fb363c58bce04dfdd06aecc4f6d8ea254d3cf76f24cfbde1b3517f5e037f8
TLSH
T177414758B7E91148F3B77F1A9FF6A83D487AB8762E06D1AE00110E4F0722A04C862737
MD5 SHA1 SHA512 TLSH

Submit Download