68fe35bab3545ba43ccd168ea051f53959f91da6ef70eb4cf538b9f9925c62b6

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 00:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130435641.html
Size 38KB
Sample260827-ahn4eaxhmd
SHA256 68fe35bab3545ba43ccd168ea051f53959f91da6ef70eb4cf538b9f9925c62b6
MD5 d5d8d349ba1846106461d6bc38a56446
SHA1 fe37e20bd43ea2cc40039257153b19c53063e948
SHA512 9c1685bde2a04dd14e1324149d863314710fdee2040da3086e8c0bf79fad84fca7bfd5c32c1414f1db199e561eb2f42412c8e77b4eaa50434b81996c2c726a81
SSDEEP 768:NTWky/O5RZfu1xyADJjg/xrpO2su8Fi4uCsG306w45Hr/4qZevUZL/YLPLJwoFe4:NCp/OtWvyA1jQpO2sCCsGtZYHX/p1gXs
TLSH
T1750339D072C0F42356CD1A73BF1EB9F9D96A9C6764C4798B82A8B68C24B9117C1B4CF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5096	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322631841838516"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{13F3F82E-BA0B-4C5B-8BE8-E5E48175B547}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1128	msedge.exe
1128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4724 wrote to memory of 4152	4724	msedge.exe	86
PID 4724 wrote to memory of 5096	4724	msedge.exe	87
PID 4724 wrote to memory of 2916	4724	msedge.exe	88
PID 4724 wrote to memory of 2916	4724	msedge.exe	88
PID 4724 wrote to memory of 2916	4724	msedge.exe	88
PID 4724 wrote to memory of 3560	4724	msedge.exe	90
PID 4724 wrote to memory of 3560	4724	msedge.exe	90
PID 4724 wrote to memory of 2284	4724	msedge.exe	91
PID 4724 wrote to memory of 2284	4724	msedge.exe	91
PID 4724 wrote to memory of 2972	4724	msedge.exe	92
PID 4724 wrote to memory of 2284	4724	msedge.exe	91
PID 4724 wrote to memory of 2972	4724	msedge.exe	92
PID 4724 wrote to memory of 2972	4724	msedge.exe	92
PID 4724 wrote to memory of 3168	4724	msedge.exe	93
PID 4724 wrote to memory of 1800	4724	msedge.exe	94
PID 4724 wrote to memory of 3168	4724	msedge.exe	93
PID 4724 wrote to memory of 3168	4724	msedge.exe	93
PID 4724 wrote to memory of 1800	4724	msedge.exe	94
PID 4724 wrote to memory of 1800	4724	msedge.exe	94
PID 4724 wrote to memory of 2196	4724	msedge.exe	98
PID 4724 wrote to memory of 2604	4724	msedge.exe	99
PID 4724 wrote to memory of 2196	4724	msedge.exe	98
PID 4724 wrote to memory of 2604	4724	msedge.exe	99
PID 4724 wrote to memory of 4252	4724	msedge.exe	101
PID 4724 wrote to memory of 3144	4724	msedge.exe	110
PID 4724 wrote to memory of 3360	4724	msedge.exe	111
PID 4724 wrote to memory of 1504	4724	msedge.exe	112
PID 4724 wrote to memory of 4460	4724	msedge.exe	114
PID 4724 wrote to memory of 4460	4724	msedge.exe	114
PID 4724 wrote to memory of 1128	4724	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130435641.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbbd4fc188,0x7ffbbd4fc194,0x7ffbbd4fc1a0
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2012,i,10683301552206906010,11312193386363686858,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1512,i,6736871799959972765,13718922035864023863,262144 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,15159873616751547166,12168037011835012161,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:8
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,10466875631994566373,17664384246148330319,2097152 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,15486678013608709789,5043269531753920400,2097152 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,13326715171839679842,17253545247367916179,2097152 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,7857153349123328398,14813470268406928860,2097152 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,16715206885887633954,7253973495979954387,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,9224725989947212322,6898446014122030369,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,3105124441489993145,1751008365843340270,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5696,i,3105124441489993145,1751008365843340270,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,17774198270539438281,3930238363890955863,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,11835349365530079570,7590979397443034712,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,429012694223483491,7137714975642070200,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,4201694926000965167,1584530500674521731,524288 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6104,i,4578079806101648508,14070417834625870216,262144 --field-trial-handle=2404,i,8210040657667593187,15865340201518179174,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0cd57aac3e93e45f03ac90f92fcca98b4c372a1c288134ba935d3beee9a75647
MD5 3307efae33bf53e0434de8327a3c4df9
SHA1 0a0eab202ff8113d48ee8d459c984ad9642045d1
SHA512 edb6848bb202cc8fdb0043d9d8b46f89e3010f0bccc89c21348401e8a296a957439ba7a289a463f93bef874cf1a9a8a6c1b3da8f54f0093f588946a8cf2b3fc0
TLSH
T1FD61C42905F534B8F755C23096D21633FD718CBC795F9E5105EC6C72F90EB290756908
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ce28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ce28.TMP
Size 3KB
SHA256 0108f7fbc26b38728cafc6f45b949afcba7279e2d3fdeb18c9bf07cf45494ae6
MD5 fb5bfd89c40dab7538cfa711d106aa5e
SHA1 5297b1e753798a7e3ad3bd73a9f6ac4e35b54455
SHA512 88c63b13259636fcfd8d0dfb31c6a54c0f5a56158af2c01ee131af0563be5d60dad99b194bfe7e9f5d6455339dd440ccc24f302dbe2dd52c7152f74eaa2ad96b
TLSH
T17861D52909F538B8F751C23099D21637FD718CBC795F9E5104EC6C72F90EB290756908
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 67890aae6d5e1fce8823290e1d26a7efa6553121276187889d21013f817b3908
MD5 a5491ab1c35f541e4d2fe512b5d07580
SHA1 690c001fe3c62080b66b6dbfbcebde6ac8b924f9
SHA512 421e863f6d6f8e1a777361bd577babc56ce1827e9d5c77dedcb24dc9fdc2037c9389649410def7872448d91b47ff390617d9e94c0e09067a0dcaf8dc24822328
TLSH
T1F3117AF3C3D5966E890116F0AA24AE2BCE2D0606421C7C1A89D4FF2B93E3475E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f73911b6-416b-45f8-a613-a24d4afaf059.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f73911b6-416b-45f8-a613-a24d4afaf059.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 02b51dd4f1da50a08b690e856699f8e79e51b564c5bcea1f77e46a5b051bf8fb
MD5 8542f0bef3f5da03ab5ec8dda081cab2
SHA1 9cacbb21840377819f8336bcf8f57b0ad5d7e3b7
SHA512 d7921aa3d567477723a3c48d620506ca3b0039da89e7c3170de90f31e5e27e047f7190fffa38599556863d7cf6bed8291fe9a5fcefea71dde4b152db3d215082
SSDEEP 192:sxZFRlyM/jK1Ml8Mkw/fXs3S1FqIdpd4HW6+WNGYHjvfxIgrJ:sxZFBMw/fXs3S1FjWHbG89
TLSH
T16342D8126A346977CCCBD209FA51BF53D6F94473A2900E48A9FCCA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 4c3a64e7e4c531003e1e769248f37a619109308bc6cc5e9c2ae7a7957fa4463c
MD5 def44804b0a1c8cd87c872d9c6fc69cb
SHA1 610036b53e5fd4e4ee8f3ed5ba7a2af9e7b63e3d
SHA512 472e8fefee78f4c76c8d14d4e7eb7f84d3333cb076f52589ff2b708ac713cd518be5969f0063ae9e70b7d6f12aab568bfc09c0e19a2fd3657a7d1ce32ce5457a
SSDEEP 192:sxZFRlyM/jK1Ml8UQikw/fXsRu1FqIdpH4HW6+WNGYHF+BxIg5VJ:sxZFzqhw/fXsRu1FjYHbGnN
TLSH
T16B52C5166A389D77CCDBD209FA51BB53D6F94477A1900E48A9FCCA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 811dfaa2e82da4c5a0ef41532b28a78ed484fd9251a0764e8c8a7960f8ff0f00
MD5 ace7ddebcdb13808df97669cdab07d04
SHA1 04345551438b8a7cc1fece22f8dd6d1baa357ec2
SHA512 1053c226e1923656cd94213548e3dc4984af69c33d226d242273f6537cf2449b67a9fb4852a5fceca6151f7196e2598b371a9410bf2c0626698998a98d074195
SSDEEP 192:sxZFRlyM/jK1Ml8Mkw/fXsRu1FqIdpd4HW6+WNGYHrlfxIg5VJ:sxZFzMw/fXsRu1FjWHbGQN
TLSH
T1E552C6126A385977CCDBD209FA51BF53D6F54473A2900E48A9FCCA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 de55849adeb1f543839e6a0779193f7f1424c7240389113695ee8ab2929338a3
MD5 3bb7600f9f0ed716a5fbcbbf6bd12395
SHA1 e6decc74f4b44bb11dd402707d50829178447d62
SHA512 50456431d820e8e8d53baa647ef756aac6a32b800edcf9db107f46ed990c83de57d428e86013213d6240be2523e7ecc071ea86338e667b66567c28f6d5543502
SSDEEP 768:bGUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R4roVG0b:bGUZYTMWvg0Pou1ja7eLZmRD3b
TLSH
T199D20A2F280CCB7E4F844E5DEC2A6F963ED801CB5A584D5447EA894C03CB6EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 7cac39f0af8ea5f5e6e004ae6318176a19468ae9d51375580e5cf973a825ae8a
MD5 2c9737f3a00e8b6f237f0d9750b11b86
SHA1 0a157abc550aa25972325c45710bb754c50471b8
SHA512 38f9413cbd39609289e2595a1dc7a230abc8df4712c5d188cd49ad77c73cdbb17a8442bc5bfdd8e8f7d26bc80f53760d952ef321b5bf4660b3fc5daf2ed0554a
SSDEEP 96:KA1eK2A8e8KziWa+EKLqUy8K7iSiKkKf6v:EWDXgfnA
TLSH
T116D1288270BA82523D7F2B088794D7568E8173737418E52B3BAC40B65E67E249DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe596c6c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe596c6c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 6418b95ab9803a25b5520ebab4fd512d69f7a2c3191825d2c1e1490216784647
MD5 63392e91e04740491c052c4fd3acc088
SHA1 efef4afcacff51525c11a6231abeff800351151b
SHA512 35826cceb6cb82d29ebb0e477bdb646da1bbb6b3c5726a11159f13bb60185e36244929bab9e6807a98c27c06ffb457e81454f3c9ccf3cf92c427069e317b2a47
SSDEEP 384:eZcIhsNq02deaXzqzX5od+s8YxiX89+LBNj5oBVeos:ch7db+Ola89WN5iEr
TLSH
T177827D3398786C765DE6A144F84B36134FF8806BD7C86F84C6ED6F0D009A699131BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2a85380e4fe60bebca5fcf9c780dd3b6bfaa20d2d640dfc3cb6d17a6091ee644
MD5 3309a1a3fb383a8819071c978abd7d53
SHA1 d2793f01d07c76cae5368ce8121b5ff6108eab8a
SHA512 22101d4cac27e4c6e0f7066d7283dd3e8857df7c2b2101b24b1f65c81f2f235cb92bd68f5fd1965578a4922e88f8121f4e8018fc832eedcd281b5edb7b791477
SSDEEP 384:qiFiZcI3sNy8TUNTUlIlF2deaXzqzX5od+s8YxiXy9+LBNj5oBVeos:hFQ3Lwgidb+Olay9WN5iEr
TLSH
T13FA26D7398A89C7BADE6AA44F94A32038FF4407BD6C4BF90D7DC6F0D005A599134BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 38f11b89575c62c20b6a8579fbad9d1309da2f8bba71c9d4874edf54d26284a3
MD5 9a2bb70d1caa91f863bc179b55a4d2cd
SHA1 83dd417f58c1823a6ab4f194bcfb89d90a2f966f
SHA512 43d068cadd9bf7f7cd8b0f21a44b23c868a3f91b5a9df1850285631deab41e3a896be3fa0167210900ef7b8470fb1e6c9e7d599d2738e6dcd4886751663ea621
SSDEEP 192:yONn61VWQmiUyqSgGX5Obd+jgjzorYyRNF/ab3PmU6:yONn6WSgGX5od+s8YBzmU6
TLSH
T14302D736A8687CBB8EE3AE49B44B37135FD4102BEA956F80D6EC1F1C009765C2346837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4a40218467d89e4e29dfde959fc431e3c90858107475540736512f6356b84455
MD5 6794cedb8e07b8d21696e996e4d66f8a
SHA1 cabc73514986ad60f1f82b84011f956b629f907f
SHA512 761e2b399b6cbbef38f378f371d6b0252977be61b5b237f32c41390408fdb86867a89150edb631fae20c4d3a6b238a8e522b5959f9a567780b037b04ae575935
SSDEEP 384:qZcIhsNqF2deaXzqzX5od+s8YxiX89+LBNj5oBVeos:Ihedb+Ola89WN5iEr
TLSH
T185827D7398786C765CE6A144F84B36134FF4806BD7C86F84C6ED6F0D009AA99231BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f9c7ca6f2151a05e7cce803dbf15d503ecf0fc145045958aa9b7567ebe431603
MD5 e3fce5d24fd7e8c4c3de838d24ba825a
SHA1 3e265c0ab42d85fd202ef0b8014fa96399b1a0f3
SHA512 e83a60666cef4c42133b354c42e6259b5bfbd1d99da6a3a6bdd4854da0f8eceb853e64010821f5083e78d00f413cf22892bccf03bb478eed05f2d8d7e7714945
SSDEEP 192:uOND61RWQmiUydS2GX5Obd+jgjzorYyRNMiX1kjJNqoU6:uOND6uH2GX5od+s8YxiXK9U6
TLSH
T1CC12F932A468BC675ED3B554B44B32135EE5512BEB897F80D6EC2F1C00DB59C235AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8a6b3823194cdc6dae94000ee48912c8d98c14a41a369f75affa8fa806b23774
MD5 857f00d266dab9da0d3747cd6c903647
SHA1 861c4f8a23828d7cdfe906cbd30ae1de2a4f7d2a
SHA512 09ca012b1efc929aec0f4d019555f97c00db9ec962ccc655aced75b596eccfce46d8396f492c0e1a9d002afb80cf6ab7e230aa48c18403d42231e24b7fda1272
TLSH
T1C3412B58BAE91158B3B76E56ABF2A86D487FBC772A06D59D00050D4F0A22B40CC61B77
MD5 SHA1 SHA512 TLSH

Submit Download