dfedc778eae66b235a8e2776b21ddd4e3c2f99e2551f779488d86305f56c69bf

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130323173.html
Size 37KB
Sample260826-g3w33sshjf
SHA256 dfedc778eae66b235a8e2776b21ddd4e3c2f99e2551f779488d86305f56c69bf
MD5 6d9e384ea9394119b16ca2ca3655a588
SHA1 ae77a1f1f85abcd6bf25416411b1430c564fc661
SHA512 2728253f529b0c5dd491a81606f2f738d447a8d9d2bd1d9764ef8a59e89f5e9ebe81d1205807509db116b4dcae864290066736d8ab547364df9ea0dd353b14a6
SSDEEP 768:ug+uFrOeQL9NQlWzScE+FBGo55uXqEPQ4sMLmkLz2UuXr4tzsKQdNNROZvhDzsSA:ug+uFIvTzScRFQov/MRLqmZLhz3zUY7g
TLSH
T18D0323D0B781E41722CD1B73BF1E79FDD06AACB36984714782A4BB8D24B9117C1A8DB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1456	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321988321802884"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{3ECCBB2D-E843-4247-8375-99971F689B7D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3980	msedge.exe
3980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe
2080	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2080 wrote to memory of 3848	2080	msedge.exe	84
PID 2080 wrote to memory of 1456	2080	msedge.exe	85
PID 2080 wrote to memory of 2168	2080	msedge.exe	86
PID 2080 wrote to memory of 2168	2080	msedge.exe	86
PID 2080 wrote to memory of 2168	2080	msedge.exe	86
PID 2080 wrote to memory of 4684	2080	msedge.exe	88
PID 2080 wrote to memory of 4684	2080	msedge.exe	88
PID 2080 wrote to memory of 4312	2080	msedge.exe	89
PID 2080 wrote to memory of 4812	2080	msedge.exe	90
PID 2080 wrote to memory of 4312	2080	msedge.exe	89
PID 2080 wrote to memory of 4312	2080	msedge.exe	89
PID 2080 wrote to memory of 4812	2080	msedge.exe	90
PID 2080 wrote to memory of 4812	2080	msedge.exe	90
PID 2080 wrote to memory of 3920	2080	msedge.exe	91
PID 2080 wrote to memory of 3920	2080	msedge.exe	91
PID 2080 wrote to memory of 3920	2080	msedge.exe	91
PID 2080 wrote to memory of 4528	2080	msedge.exe	92
PID 2080 wrote to memory of 4528	2080	msedge.exe	92
PID 2080 wrote to memory of 4528	2080	msedge.exe	92
PID 2080 wrote to memory of 1628	2080	msedge.exe	96
PID 2080 wrote to memory of 3724	2080	msedge.exe	97
PID 2080 wrote to memory of 1628	2080	msedge.exe	96
PID 2080 wrote to memory of 3724	2080	msedge.exe	97
PID 2080 wrote to memory of 964	2080	msedge.exe	100
PID 2080 wrote to memory of 3124	2080	msedge.exe	107
PID 2080 wrote to memory of 1096	2080	msedge.exe	108
PID 2080 wrote to memory of 3368	2080	msedge.exe	109
PID 2080 wrote to memory of 2496	2080	msedge.exe	110
PID 2080 wrote to memory of 2496	2080	msedge.exe	110
PID 2080 wrote to memory of 3980	2080	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130323173.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff92152c188,0x7ff92152c194,0x7ff92152c1a0
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,3374101117801377983,12302657076674740645,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1784,i,6894550824117303964,1955286785692775540,262144 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,16365518436877810419,10268281564800115468,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,14548706522318317444,15142186758832525954,2097152 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,4331225676004301669,16741962708277819699,2097152 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4080,i,15680189800970750104,1076563599678351862,2097152 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4092,i,9546084116098752501,11547239056980235276,2097152 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,4746643326399455857,17454524301603981451,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,4274080850558846367,14455114375328783061,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,9744926114012557608,14994016232098211015,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,9744926114012557608,14994016232098211015,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,3424698776443666623,7233666638943116981,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,809652046653944043,9053031644469240110,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,35427415888390427,12391990257333062197,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,4087104842754598328,217472342663431571,524288 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5580,i,4824723566808988381,3856381802741256077,262144 --field-trial-handle=2276,i,11783476169096724331,4634828448108625920,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3980

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dad468668228a7071043249967c0334117dd0803b07cdc988d68cf9ed1bfe411
MD5 acef5c1b94ae5f95f7dde8810d0b59d8
SHA1 f391cface145dea95f681af65db46722977c6032
SHA512 5ee51c51cb7f4edfc392a84a4b2289d21a6ff520632f1a0f4947f4af37d97a228dbd10058ef46fd6b565bd5c019c8313627047794e7b7f7aacdacd823abb2257
TLSH
T13671B534551653DFF7E602B290C12359F6328DEAFE273E412F2379B49E01FA08169398
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d4d2b89cd67f8637ae8eaec05fa72df8dd3ab1fecc3c303c536daafac33f262c
MD5 9daa0dc4a4f2b0b62a42faade4ae7ecc
SHA1 2d94b5a68e3fcb5d924f8c9390365110d3f2a4b5
SHA512 4a2e7fd4474594b513cbded4498919a9acf3e9d82a41dd0b5c6c0c9973b5cd1cc1fbdbb9992ad4ed969084330139a2d1394565005a123f8d5d76d22307af39c5
TLSH
T1C771C530552A93DFF3E602B290C12255F6328DEAFE273E412F2379B45E01FA08169389
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1ebcd427-b6a1-454f-8670-ad883625633a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1ebcd427-b6a1-454f-8670-ad883625633a.tmp
Size 949B
SHA256 23ac8924dda7952b09ffe1063b7473e3d9cb798a37b0180e7bdc9918f03b1b10
MD5 fa57cbbc3631563778b64bdef6c16ec7
SHA1 62650320df60dff1dedd8e804328652f0c98bf26
SHA512 da6ff23151267c4d1f3fee908f75fd5f44ed07d3a13804ca68540427f73056a2a123c189113538c52971abae7ed433c1e01b7636119c307e0d22d8ff08b8275b
TLSH
T1E51157B3C3D5856E891116F0AA24AE2BCE2D0606421C7D1989D4EF2B97E34B6E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 639edf65fa2368180d78f9acd767e6e066d0cb2c9904e753ff946211ade6b63f
MD5 9dee18103d4fa5dcfd5dd7369a39783a
SHA1 6a8013a414cfaaeb58e286ebbafd8ce54e50c7e2
SHA512 3c468c5126ba8e77e58c2aadf380d22dccda62e9d5a268bb9b8f4eb37f735d66e55bcb10d6e013b3f336905ab848183a90b136f7b540f8808643f131e4776529
SSDEEP 192:sxZERdyM/jK1Ml8UQ0kN/fds4T0yaIdpHTHW6+WNGYIzO4Ghl3aIg5vJ:sxZE7qPN/fds4TZzzHbGjfb
TLSH
T1A552F7116A346977CCDBD30DFA41BF93D6F9447292901E44A9FCCA1C05E6AEC220B82F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6638397d357b969a3fe8753a80634dd888812489bee8dda4adcc92a21d86c248
MD5 62a686a3c26273526f7e10ef04d40c2b
SHA1 b612525c485a561e89c4641634e6fd8068f73cd3
SHA512 0daa90a60fd73fe5d36af07d01627dacc27b151fe19464d4d7b6de335cc5d4464238583c4a41a28b2e1ed44e93888821936acb201c28cc9ba1a877cbc1c0b2f8
SSDEEP 192:sxZERdyM/jK1Ml8MkN/fds2TOyaIdpdTHW6+WNGYIkq23aIgrJ:sxZE5MN/fds2TTzJHbGX9
TLSH
T19042D7116A346977CCDBD309FA557F53D6F91472A2901E44A9FCCA1C04E6AEC221B82F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f77732fad21c10bc7f1f6fbd79c72b6f14e7c045e01ea988013646d7ad7c5eca
MD5 557419b038e25acdc5276c986ff4ffb2
SHA1 a91177acacdda2507145ec40e39f1495c9688598
SHA512 e9bff245355743de3e566eb8d54aa66e89cd55578cfc18ebca14de6ee5d3d7e8d268f13f913bb5551a3faec9520ab7397510bfa711e89e84f5c99243f0684a73
SSDEEP 192:sxZERdyM/jK1Ml8MkN/fds4T0yaIdpdTHW6+WNGYIU4Ge23aIg5vJ:sxZE7MN/fds4TZzJHbGhpb
TLSH
T16252E7116A346977CCDBD30DFA417F93D6F9447292901E48A9FCCA1C05E6ADC220B82F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 213038436e2d02071a262bbd3257c8bf8efec4df3301d8327ef0d7781bc7c1f1
MD5 6afd4dbb3e77445b44f9dbc235558b3c
SHA1 ba8def07f6808e64923634b5d0bbb417bfad2738
SHA512 1d4a779f9b28c28acb914af86814b75627fcce6e2ab794110bae56c18a07aefc84d7bc4774be7bf8b53718348b0f1b361877dc05e490dbb3ed3ac5e5b734796c
SSDEEP 768:Y6sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR97ro2xX:Y6sqxXlWvJD6Tu1ja54LAs9I2t
TLSH
T15AD21C3B694CCB7E4F840E5DEC266FD76ED801CBA6988D5447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 94bf09be9bdc4bce98e637cbcb23417ecbd114ca0896e10a0f72035cb2978679
MD5 96dac6d0378ad8a499338be9589b9c16
SHA1 f8a2eb375e78b746bee226ff15d70e925e0738a0
SHA512 6356f003dd4f2faba16403b5271fd48ab6860298b8c46f2c128617fcf4ff96aa4dba4b9f6cf9ac7d87fc045b32276d8a53e5435740b3ac17339ee1fe77b82de2
SSDEEP 96:KYbaKYIKvdCKegCeHuKMkhvATPltd2XtO9d7:ExCJxb
TLSH
T175A1611A317E0212387D2868A26A99775F423A63701CE46F3FB850664FA7E110DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3d09fbe84c5251582208b3b45a15c163a7f1c5046f82a303fbb12df871c13c56
MD5 86dac35ae07b51bb9e0ce6d1b63fec79
SHA1 2393f33ce2e972631817e42f49531f5caefbe100
SHA512 f8c71e397902557d8f2203305c67cdbd217a10bdfd2b58b151a0fdecc6a3003fe2f9c5171e45500a61d9e211403fb61bb3120469628c9e8b90a783734a69ca24
SSDEEP 384:uqZcIusNFsff0eb10EVRNmd2OYo4ySg+LBNj53IFoR:ZuqaHmRQyVWN53IFa
TLSH
T1CC928E329C386C7B5DA2A605F54B36035FB880779ACD7A40C5ECAF0D04DAA9D130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4c6e3dd4cdab210bf11d8c1319d1cd072cb7ce2d786e935b312b9c415f0eab3d
MD5 831973262ac6f59d1ff199737137805f
SHA1 bd421ad5094eb318f49cce45cff371db92ae153a
SHA512 2492f77ca8a4c30173717fa29dba4b593eaea79cbc652c422df31b26e81363fdb6f4ba5b224c11d424828a0eec9af064f7e7446a99ee9226563f5571974e42a2
SSDEEP 192:tON06JkRtQmiUy/VW+RN5+Fd107sh3yVRHJU6:tON06UrKW+RNmd28yjJU6
TLSH
T16F02B835AC382CBB9EF26D0AF58B37175FA4217BBA952B84D6E81E1C01D765C1307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8f4f357179541aa72d6072a45c7667def016ae8561d7bae21e6e222088da4373
MD5 df9167e8706231b48c9dd1a77a261ef5
SHA1 7cf6ea11b35b19be61c7585b85ec0f0c2096411b
SHA512 7cc2efd3dd3a8b4233728abdb0c539d9706c38fb235ad589bc547c211477fb15f8fc5f6cfda37afe3ad9e0f5d986fce1a68829d31cd7f0c66ae27bdf87068379
SSDEEP 384:vZcIhsNFzff0eb10EVRNmd2OYo9ySg+LBNj53IFoR:nhVaHmRlyVWN53IFa
TLSH
T129827E319C382C7B5DA6A505F54B36035FB88077AACD7B40D5ECAF0D05DA6A9130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 13d451aadc31dcb464947d3cad80e9b2fda6059e27790d4991c7173b41ef2496
MD5 d527b78e7c8e762e633290baaafd2520
SHA1 a55a3606d601ad92c6f3e849c3bb5ae136aa4f19
SHA512 de3b9ecdb70f14fdecd6aad71a76509eaa4d8052a128ab2f176c7851d1ae901cb76d9b5fdf86d36554c4c35c46a42413a0aad7ee9e9d49d36286294a4adcc64a
SSDEEP 192:UONA6JkRpQmiUycKVE+RN5+Fd107ptpefPwoUvJVcyvq/9gU6:UONA6UH6E+RNmd2OYoZySgU6
TLSH
T1C712F935AC686C6B5EE26955F48735135EB4512BEECE3F8095EC1F0C01EBAAC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3eaccf6580d2837e4858b6c3a46922e0e2d3b1ff482cf8defdccf64a50b23326
MD5 39d09ac47fb93d813a67d0995e872b43
SHA1 89c113906ca73c0918de04f997475b089ce9919a
SHA512 be59df5134ff8dfa82091fbaa014d8dcfae528ee4ff9df29999b01df93fcb2b4398ff19303a676931363e378d05270c87f65697c2c05475350f1334038b10381
SSDEEP 384:XZcIhsNFsff0eb10EVRNmd2OYo9ySg+LBNj53IFoR:fhqaHmRlyVWN53IFa
TLSH
T1F8827E719C382C7B5DA6B505F54B36035FB8807B9ACD3B40D5ECAF0D05DAAA9130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b1c8075b3ed7ec6e74ffefb7ec10010d46a56b69a8e007d58b92e0818ccce897
MD5 5a46efcc0996806ddec776aabab5b2fa
SHA1 680f6e7c88eecbb83f600c02572fd570bf13a9b2
SHA512 d2dbdd2bb825ea5af1f1894fc41e21bbf62ced17e626ba118121afd4b70681e1a656ff4527cbeb7d0fb8192ab3b6afb85b330e15bb73e4fa338059f2531614af
TLSH
T127412A58AAE91108F3B36E4AAFF7A86D447BBD732E06C05D10110E4F0B27A04C872B37
MD5 SHA1 SHA512 TLSH

Submit Download