36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
machform/css/index.html
Size 1B
Sample260827-phyeeathja
SHA256 36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
MD5 7215ee9c7d9dc229d2921a40e899ec5f
SHA1 b858cb282617fb0956d960215c8e84d1ccf909c6
SHA512 f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
MD5 SHA1 SHA512

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4784	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134323068728770902"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{15F85454-D048-4C4C-B2F9-AA20E1BBDB36}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
812	msedge.exe
812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3684 wrote to memory of 4932	3684	msedge.exe	83
PID 3684 wrote to memory of 2476	3684	msedge.exe	84
PID 3684 wrote to memory of 4784	3684	msedge.exe	85
PID 3684 wrote to memory of 2476	3684	msedge.exe	84
PID 3684 wrote to memory of 2476	3684	msedge.exe	84
PID 3684 wrote to memory of 5076	3684	msedge.exe	86
PID 3684 wrote to memory of 5076	3684	msedge.exe	86
PID 3684 wrote to memory of 4480	3684	msedge.exe	88
PID 3684 wrote to memory of 4480	3684	msedge.exe	88
PID 3684 wrote to memory of 4480	3684	msedge.exe	88
PID 3684 wrote to memory of 3396	3684	msedge.exe	89
PID 3684 wrote to memory of 3396	3684	msedge.exe	89
PID 3684 wrote to memory of 3396	3684	msedge.exe	89
PID 3684 wrote to memory of 3996	3684	msedge.exe	90
PID 3684 wrote to memory of 3996	3684	msedge.exe	90
PID 3684 wrote to memory of 3996	3684	msedge.exe	90
PID 3684 wrote to memory of 4140	3684	msedge.exe	91
PID 3684 wrote to memory of 4140	3684	msedge.exe	91
PID 3684 wrote to memory of 4140	3684	msedge.exe	91
PID 3684 wrote to memory of 3796	3684	msedge.exe	96
PID 3684 wrote to memory of 3796	3684	msedge.exe	96
PID 3684 wrote to memory of 4884	3684	msedge.exe	97
PID 3684 wrote to memory of 4884	3684	msedge.exe	97
PID 3684 wrote to memory of 1576	3684	msedge.exe	99
PID 3684 wrote to memory of 2184	3684	msedge.exe	105
PID 3684 wrote to memory of 2192	3684	msedge.exe	106
PID 3684 wrote to memory of 4116	3684	msedge.exe	107
PID 3684 wrote to memory of 1060	3684	msedge.exe	112
PID 3684 wrote to memory of 1060	3684	msedge.exe	112
PID 3684 wrote to memory of 812	3684	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\machform\css\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a0,0x7fff9311c188,0x7fff9311c194,0x7fff9311c1a0
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,10454308441910882247,17643853862085344572,262144 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:2
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,11636458628047988876,14240805076786177388,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,16174712233330456141,2226234228782960260,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,999737840752423899,18137240764593638661,2097152 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,4446071505354379065,3907254110780632811,2097152 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,4638695629172416314,15651742011385573378,2097152 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,7745534584363735124,12622725036833577691,2097152 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,2335392707908914132,6915219708584752428,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,12198506391913909153,12236640978629993331,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,9817449794524011330,14408371996214964391,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,9817449794524011330,14408371996214964391,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,5001152767799870824,8017535713750180020,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,4176670206064026828,7151849748122423440,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,17197124149553657890,2349379663255057143,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,14727151433324425172,11160577963599211411,524288 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,7808296734431754895,16365474583199559089,262144 --field-trial-handle=2464,i,1200625186832853220,2346045940076845972,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:812

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4580

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

8f6eb724-313a-4431-8d8e-f5f83287d0e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8f6eb724-313a-4431-8d8e-f5f83287d0e2.tmp
Size 12KB
SHA256 d6116521e747f5f97f050e2d58a7ce5d2cae33cfead435ba64dcafe5fc50cef2
MD5 48eed756053f4bb8908dbeb7a2b35364
SHA1 0e776cea445e58353f0574dcd8b4a383b29f6415
SHA512 80809c98f026aecc6f4b668365bbf059d88a8ec56b0e247ea34a337fdb38c67fbd1eb18c4964d2b6a56c3695c2ec66c48be1c5e5551769d4d7f4eb1d700fc160
SSDEEP 192:sxZaRqyM/jK1Ml8MkP/fwsS6d+RIdpdoHW6+WNGYHjoP8VrIgrJ:sxZasMP/fwsSu+aWHbGZqj9
TLSH
T13042E7126A346977CCCBD309FA55BF53D6F55472A2900E44A9FCDA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7975c9b21494f44d3d940a3d45c8ad5cd81c566021b4150d5ee2f65241e6c82a
MD5 d1d9a57e240fce025e48e2c2a85cc23b
SHA1 3b8befa8c621fd5ab20e3b48ce7cdb3b21c5f4a3
SHA512 885736adb2fcadc279fc973209868fe7b07d4a7dacb61ea852fd2f7d0db5a97c8250a05820746655fa6d1d8c790e28a4adb6e6414ab6ebaa571625ead47cc44e
TLSH
T1DB6170394B134883F32B02F0F1C2162639B381940AA79E4A3D64DAFD691DB26CCD92CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588f1c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588f1c.TMP
Size 3KB
SHA256 c0ec3603354cf681f8ff40074966a67bdf1db1f52d87686e1fdbf6b493005196
MD5 d03e5ccdbb6d5c7565aaf9c623d90936
SHA1 9466768f9bfed52e50ffaca73621616594859f51
SHA512 189bd4eb69113d1f68e8b304a6596a07e946b713f33d8c591bcc34434563b2f024d8465d0c2ff38ba869c4303ecadefe6bed4224d3ed587dc890a9d76705f70c
TLSH
T1D26183394B134883F32B02F1F4C2162A3573819409A79D4A3D54CAFD691DB27CCD92CD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 52e8ae1a0eba1c8639177974bab271155052812dc644dd38e57aca93c49ec424
MD5 aa866487465ccfc43fa853cd48854adf
SHA1 d1b6acd85b171a7eafcb7745da2316757403e658
SHA512 262e3d4ad14760991554b5a57e6b6b745109d287bc1031a51fb09736cf55b7bf125fea835dabb7607e60afe9a50f129feb2e0d19ee63b5538abdf3e49e6f37f7
TLSH
T17D117AF3C3D5956E891156F09A24AE2BCE2D0A06422C7D19C9D8FF2BD3E3076E00259F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3555182928618256f59f4383c11280b6bbbccabdbe688248ea44eebf53be0204
MD5 5a95102307be2c29c035c2d27f57add4
SHA1 81d6c032726be92599559351f56d005465b33d5c
SHA512 91bfecf3e804f23c5fc665d3f8a14366092a7635e0d6e0556f0b34b2b8b9d06d25678f652c8ffa6e8f185d954bd4c110caa22c332a96e089bb42f4bd8be8eb54
SSDEEP 192:sxZaRqyM/jK1Ml8UQZkP/fwsNpd+RIdpHoHW6+WNGYHM/E8VrIg5gJ:sxZasqaP/fwsNb+aIHbG+qjG
TLSH
T1B552F812AA346977CCDBD21DFA45BF53D6F45472A2900E44A9FCDA1C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2c215de14c69c55f02708c0a7bd453b872d2da1ffe5206c7aecf984d2a8d8b29
MD5 791678cf82f58b54df4c11d5cca38616
SHA1 fcba884782825ddd86344096216faeae0bb830e8
SHA512 296a1eb5d9eefd3c7ca5693ad37fb694305f6bd97f55251910371a75b1c073b097762a4a66f1e97106e1b6925d2f9f03c1b95229daf946127bc16b0a68ebcb66
SSDEEP 768:LaUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RSroVU0O:LaUZYTMWvg0Pou1ja7eLZmRJxO
TLSH
T142D20A2B280CCB7E4F844E9DEC266F967ED801CB5A984D5447EA884C03CB3EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 e6042429ffabae71be26b94d753ae3e4bece3d575e7f089cc33947b6ff3694cf
MD5 acb15c2b4ba28efeeafc35a617652f17
SHA1 240ad47b3eca245f314869be7b3d75a0f0113336
SHA512 4ee6e7a2e6de229a96f1d2f09b3caac4dbe0c9cc4c42e5c96370441a4bfca21d1f38b9de1369d73c2ad858fd400aedb8946e115f28a5a4745d3cfda82c6c1ce5
SSDEEP 96:KA1eK2AUkQKJW6+DuKY033yKUAyGbOKUoE:E2bppRdV
TLSH
T1F3D11A4A70BA12413C7E2A48925497178FC271633228B42B7FBD41B29E67D21DDFD9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 020cddf95c6295207eb3c6f66929502c27fc8d273535d1558eb4a7cea687a1d0
MD5 2d11b2e71e9b9e28c2d8061671cbbd49
SHA1 bdac4aeaaba3b444f3e340d578d9e49abb9ef38c
SHA512 23ee10f8aea4ea62444c8a4ce62bcd76d7e335610037297bbf2d6f3e85dec128e98a9a24d78dcb08196d11c510e6785ed45f60269092999807a0641ab0627665
SSDEEP 384:UZcIHsNc9PsJY4RzX5od+685X8tJrXPm+LBNj5ZIKoG:SHEt5O0GhXeWN5ZIKt
TLSH
T195926D7298386CA75CE3B245F54B36035FB8A067D7C86F80C6EC6B1D05DA699131BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 642fc763d9d2e6dc958fdf3a8320651a9426bbbea62747679c6df616b90d3576
MD5 b89d6928f6ba02e8f325af398bd4dfef
SHA1 8fe9b1607b9e2e55d06552c3c7ca4fcc90e2d94a
SHA512 1e6c15d05e460a05046ff37d2adf487389d1db5433f29d49626b8e6065aaf774ab77d2cccbbbd33f80ab47180673dcdd3c3c4b5313121e217aeb629e9b966d21
SSDEEP 192:yONo61VWQmiUyK4gGX5Obd+jqjzorvmk/ax3FOgU6:yONo6WAgGX5od+68UbOgU6
TLSH
T18E02D835A8687C6B8EE3BE49B44737135FA9216BEA542F84D6EC1B1C00D769C2346C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e9aee55a3cf56e8e9e58fdc36997d2f020ae5ca93737ea1a8b2cecf5d11f68e5
MD5 84d0f4d3e60ea89ba518454ac8fcd370
SHA1 a5a05aa042542b2a94b3ecbd9340a4893caaea1e
SHA512 a5d6ffe4db5b34407e76dce98d0c2f7aabd531a23452865ddfc1d16a5d869cc717310428bcb136dca76623e4ff9c4afb55f80624ce6a6a585881e06c2c216620
SSDEEP 192:PONIc61KWQmiUyL4jGX5Obd+jqjzorvmsX8ySJrPjJPcqIU6:PONIc6nLjGX5od+685X8tJrtPmU6
TLSH
T139120932A868BC675DD3B595F48B31139FA86127DB856F80D6EC2B2C01DB69C134EC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 830c99b61e6469177d739ecf89e30fcd69e19b11feffbb505f4df2de9199c0db
MD5 9ed1bd1fecb6686ae752d079f34a41a7
SHA1 d18afcd3b45d014216810fbc153dde39f742ab46
SHA512 2aa18180293f05f03726f6b4b5bfd1d1209cbba4e5ec469002ab2041843043ce9f9eb4adc84acf59ca78a90692a07a48518c0d5f3e7f1e98d689821d9085dd79
SSDEEP 384:EZcIhsNc9PsJY4RzX5od+685X8tJrXPm+LBNj5ZIKoG:ihEt5O0GhXeWN5ZIKt
TLSH
T13D827E7258386CA75CA3F245F54B36039FB8A077D7C86F80C6EC6B1D059A699131AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a0f00f6324acefb30051903462d96633a200f56d31f922a4a813420fda35ce39
MD5 8e4532d2c7a22b2f6ead33ab163bf198
SHA1 dde545eb2bc97cb7f7e40c1099c62bf52ff8185d
SHA512 75db711b54cff0afa3050c70b4d1c293d88c9eaa7e28284934cf822d716726dd9c0d7c03e5d34de5ccdf97ad4be5032fc8c129299f6d4c19ed24555e8cbc51ac
SSDEEP 384:6ZcIhsNc9ssJY4RzX5od+685X8tJrXPm+LBNj5ZIKoG:4h9t5O0GhXeWN5ZIKt
TLSH
T190827E7258386CA75CA3F255F44B36035FB8A077D7C86F80C6EC6B1D059A6A9131AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6163f88704a96a336f8016a7cad12a92a505d87c138b7087c2fc1cb753d42ca8
MD5 c10caeddd868dd1bcc44fec58c473120
SHA1 adb435192d6abca5886b65aae42dec8f9d2e7b77
SHA512 942da75859b7ba548ef87fc5187bb1f1d419e269673ef9d24ce873bb36651ea1a5338180849354da0c1faeb4189f18a0e56afcf0de034ee6f71b2483e1d3edbc
TLSH
T1AC410A58A6E91148B3B77F5A9BF6686D887BB8331E07949E10010E4E0A26A40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download