412a68b64c6e28cf3266390766d9737094d564fcf57a82e305a9e816ac65ec46

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/08/2026, 22:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
index.html
Size 3KB
Sample260830-2gpr4aaq8x
SHA256 412a68b64c6e28cf3266390766d9737094d564fcf57a82e305a9e816ac65ec46
MD5 013fff5ce1cbcfab0c9d3c07aa377910
SHA1 dfc403a5f4c3b9d53c00f937edbb15fc36829a89
SHA512 3fd2f120f333a2e856d9de929a45a55db6d2a9287e309cc3f25973ea07632d6fa38ba808b8944aa58743830fff549756e7484be7ed012e0873d50e34f71866df
TLSH
T1CD713335D1F041374053A0C79AAD575A7EDACE4BE947060072FC4B499FE2E86EC1B09A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1832	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326028267645937"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{93D3D4D8-A955-4E81-B4AA-31B95E289A82}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1264	msedge.exe
1264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe
4920	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4920 wrote to memory of 4444	4920	msedge.exe	85
PID 4920 wrote to memory of 1832	4920	msedge.exe	86
PID 4920 wrote to memory of 2116	4920	msedge.exe	87
PID 4920 wrote to memory of 2116	4920	msedge.exe	87
PID 4920 wrote to memory of 1248	4920	msedge.exe	88
PID 4920 wrote to memory of 1248	4920	msedge.exe	88
PID 4920 wrote to memory of 1248	4920	msedge.exe	88
PID 4920 wrote to memory of 680	4920	msedge.exe	90
PID 4920 wrote to memory of 680	4920	msedge.exe	90
PID 4920 wrote to memory of 5008	4920	msedge.exe	91
PID 4920 wrote to memory of 680	4920	msedge.exe	90
PID 4920 wrote to memory of 5008	4920	msedge.exe	91
PID 4920 wrote to memory of 5008	4920	msedge.exe	91
PID 4920 wrote to memory of 3176	4920	msedge.exe	92
PID 4920 wrote to memory of 4608	4920	msedge.exe	93
PID 4920 wrote to memory of 3176	4920	msedge.exe	92
PID 4920 wrote to memory of 3176	4920	msedge.exe	92
PID 4920 wrote to memory of 4608	4920	msedge.exe	93
PID 4920 wrote to memory of 4608	4920	msedge.exe	93
PID 4920 wrote to memory of 4500	4920	msedge.exe	97
PID 4920 wrote to memory of 4500	4920	msedge.exe	97
PID 4920 wrote to memory of 3156	4920	msedge.exe	98
PID 4920 wrote to memory of 3156	4920	msedge.exe	98
PID 4920 wrote to memory of 4464	4920	msedge.exe	100
PID 4920 wrote to memory of 912	4920	msedge.exe	109
PID 4920 wrote to memory of 1472	4920	msedge.exe	110
PID 4920 wrote to memory of 4592	4920	msedge.exe	111
PID 4920 wrote to memory of 4120	4920	msedge.exe	113
PID 4920 wrote to memory of 4120	4920	msedge.exe	113
PID 4920 wrote to memory of 4364	4920	msedge.exe	114
PID 4920 wrote to memory of 4364	4920	msedge.exe	114
PID 4920 wrote to memory of 1264	4920	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa34f9c188,0x7ffa34f9c194,0x7ffa34f9c1a0
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,5515686155227145610,14608365530502960789,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,18241952739360972886,9805321541992229024,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,10564516308247752661,7813233877728030830,262144 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:2
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,7345532971552670699,16259887384153315464,2097152 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,9694913519744874415,4689158329010521679,2097152 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,17705665886218604332,69589856877350380,2097152 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,7916894318526294866,17364664554806800637,2097152 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,13433947351073514539,13678504008020751436,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,6405404283401901727,8075843470118077279,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6693332133898471918,17777162340149347879,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,6693332133898471918,17777162340149347879,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,18190497247390926855,3691562943267283308,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,5538743674950654376,1338255152925271772,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,15175562460312939964,8595123219611822470,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=128 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,4401547472658964471,14471410751494185943,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,4952531644932176044,13142821897364229937,524288 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,6444210183287411841,8759593661509348444,262144 --field-trial-handle=2372,i,12275722331596930516,7659504544821896201,262144 --variations-seed-version --mojo-platform-channel-handle=780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1264

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9dbdf7ae6ee7a7e9d236d0b7183bc135b93e4993b95711c39398860ffc7d90c5
MD5 c3dcb0f0fef69d9b1e33e0f7b9310656
SHA1 ba30d4e26f155ab4d323ddf8315a60e9544c03aa
SHA512 32375ccc6615e491293a97fd89fdca73e8e7ea410c7ad5a50b20d98db9ad07f419ebfaa4d5b367e805671f9488755014fe16e6f3ac147a14cc8f320f30e6b2e4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7g:fwUQC5VwBIiElEd2K57P7g
TLSH
T170B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f816320970215277d3308ff1f9328d2108bb236e14f1f568479048bf0167ce7d
MD5 519b41f71d13bbd73e5439916cd6cf77
SHA1 8b6ab64e8014c879e88de02489267ce61094b414
SHA512 dbcaf7b1df22f280d5e9fa64bb807f94f40a5512aefb6d52cbf08731e1d1150b05f38da56d9dd523afbda91b07cfef7cbc70ba86b11df409fdd8476ca0383f1d
TLSH
T144715E94CEB2C591F3633C32D2D37129753976B94E13AF260344EC3C6A2AB2E7EA1144
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58754a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58754a.TMP
Size 3KB
SHA256 a0122a1f7fcf3d35397f5f7f84452e00c5eb59264adfd0c96d72c1980eadb272
MD5 7029418431ea96e580714bcadac4439f
SHA1 2b59c760a54da2f43ad5aa728502e8a7a26bf0d5
SHA512 a7a92aee4bd0b392bf8733f3e440f40f5af3b38f13f05f0be0667d224d55df5cd7df9a6a042a02c268e97adddbef5b363f0a62b832c198c59907fd0bc04f7160
TLSH
T127714D94CEB2C591F7233C32D2D3712975397AB94D13AF260344ED3C6A2AB2E7EA1144
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 b0c08e034217f5a2d29dc06d92cf0d47b09c95803549e65b8043c162aa066890
MD5 fd41f3aa1965f28aaccf90b590aedbf6
SHA1 c9ac9a0b76d16c09d123b83e72dc97d497e17cdc
SHA512 ef6069c997bf96474c09bef416f165f5ed35aaf495ca182972fc1a3eb937ee2af796b8618c3c5917ebfec3aa4a8a534e009f2ebba3adc80e874709b24cf4871a
TLSH
T1F7117DB3C7E585AE8A0157F09A24AE1BCE1D0505421C7D19C5D4EF67D3E3075E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 099e336cb564977a918953538e76b94610ee8d0fab56904002378c55f238f362
MD5 4c7edfbf87f0b861ddf9c6de233f6622
SHA1 037f4093e50158786ed0b84343d1b39ec0904b76
SHA512 6084b873a8ef350c38812b8ab3c4a74dde746e0c7b8cd28d0045880e560edcc1f18cf99c3659c9e3a368e4873fe4069d1abd435baad973c578dbda0c9b47ef5e
SSDEEP 192:sxZLR0yM/jK1Ml8MkrJ/f1sOyM5IdpdPHW6+WNGYLzuX1IgrJ:sxZL6MrJ/f1sOyMSVHbGF9
TLSH
T1374209156A346977CCDBD20DFA557F53D6F94432A2900E48AAFCDA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 06916b7b63c93d0dae911d2e7ddc334e62047061a04b46275200618f78c8b39f
MD5 069a2e40af1cd92c15e6951f571365ba
SHA1 32831711b4cbc9092ee1cceaa4d6a81d07461bce
SHA512 9d2e983b6b014de605950cf00a9d358d16ac8c55df8f6c66e095f758360f00a36918795592c2b70ceaddb7514ac00569a76c8956bc3aea53cb42c63f6c049f25
SSDEEP 192:sxZLR0yM/jK1Ml8UQYPkrJ/f1sZfM5IdpHPHW6+WNGYLtVd1Ig5OJ:sxZL6qY8rJ/f1sZfMSvHbGiw
TLSH
T16A52F815AA346977CCDBD20DFA51BF53D6F5847392500E48AAFCDA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9b5d651da7654a9020260b49435cf4a929639b8fe84496ffaa1c094226f48468
MD5 6521ef0e37d9589a62183b2447f3d606
SHA1 57570542c09d87b7c8b65c995d85209f5a123b13
SHA512 630c206913d4d71ae19a945607839a87afd4688c6887a0a70b378e2087260fed6d08a170f041324688fe8fef8fcdbccf0ff21941e37973588925b454531db3f0
SSDEEP 768:uos6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNproed:uos6pD1WvxzWju1jahILIsNCed
TLSH
T190D2EA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 b3b53c1a153756f08e4bd3f54ccd416a48efcf7478cc0cf256e9bc1294f39b37
MD5 f6b0163557a937bfbc42784add9d42c2
SHA1 212b8d19883ff5c2a79a9c77edd315c69655d3a0
SHA512 18b4981d6c82f95dee0e4c97adcff34f1e4cae9f50a2e4f1ac26790d5281efd641e59400cdfece8cc784b9005e7b6cb878c312e17ce9d9401d14b38d3c36f1b2
SSDEEP 96:KUAAKtePuV2Ku8SKy0K3KE3SKAUeqooK523:iixdf+Zj0
TLSH
T193E1061232BB03433C3E694CA2558B274B86B1633118F42B7BA905B10E67E355EFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdef9cc7-9d46-499c-8cee-12fdbbd81baf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bdef9cc7-9d46-499c-8cee-12fdbbd81baf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8e151562a5d19f6ef0e335ffd1ca9d49eb7b0dc9c40aa2e15f10a379e8d6605b
MD5 92e33dc8aa4a87e61e80a69696c34d26
SHA1 9c79c7002a51c20f256f9fff22f7ea17b94bd405
SHA512 25b7dc355f855dd484e4f0e13a5e942b6997c58f72abde96d0ed9cb1b2860dbccfa1767242f0cfa1bda195a9d1173d09da7cfbbfd85ab3e3ad02c13112e3077a
SSDEEP 192:uTm+xasuheOwQxMGsNbvQDEbuO7+3vG1mQmiU1pUga4atb0X+FA42YyuNlLMwgq3:rZcIhsNbvQ+CjFa91AlWqw5t4/eQed
TLSH
T1F4828D355CB86C7B19F6A141F94B31178EF8C0379AD52E94E2ECAF1D01EB6A8134B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 cd616ba60cbe3dffcdd0cb471ff13050ee2cd5b0a79328f3c93a0ed7b6e7ef84
MD5 d2833cec6d6130e518021dda4ceacece
SHA1 e060b1bcf5aa1e5c06cdb407ab322fd6c3f85132
SHA512 49ec13ed6fcc6053bff298fa57dcc72be5836de06ec1f7ef3ce714c44af11b971850a35e455d9a5034e1fb7c46c497939479f2d03bb6b4c40f66c7025e6cfc85
SSDEEP 384:FqiFiZcI/sNl8TUNTUlIlMQ+CjFa91AlW1w5t4/eQed:HFQ/gwgPI7vw56c
TLSH
T1BDA26D724CA49C7B6EF6AA41F94B31138EF88077C9D5AA94E3DC9E1D01AB1EC134BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ad23dd8fefd9b5e88e9abaf8a9a49a4ca272f8883059813a6f9400fd80dcd2fd
MD5 1ffd043878161273f58eb3be3de95833
SHA1 5c52c0d53116b0fe0d893d2e33a449d9c4f57953
SHA512 b502887533f8858b2793a337cf5d6fb584d998239f9e052f22b19aa6fed4fd333c641ed15a54dfe6b9d93e797a8dbbd5cd9b9e4ceb382c19268dfec28c456897
SSDEEP 192:qONc6O7+3hQmiUynjGttb0X+FA42YlgGwQAU6:qONc61QGt91AlQwFU6
TLSH
T1AD02E8356C786CB78AF2AD46F58777135FA5103BA9A52F80DAE81F0C00D765C2347827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f4519581c0fb3e8ea9566415e43abab34171d51d639433879a41799d107b9483
MD5 47a1fdfdbf0f41fae274dfa03df83ac3
SHA1 1153d6f6c17eb68b16328fee429fe02637a36aa1
SHA512 2e42821671acf0699d433ff3ac75dbec77e0a6032597db041ca1aaeafe917fb9b178282041b959130cbf6e2be5cdde54a83eef71a0d99e9e62f883b4a668ebd1
SSDEEP 192:QONm6O7+3HQmiUywj3ttb0X+FA42YyuNYcNwgqGl+U6:QONm6fd3t91AlWJw5U6
TLSH
T12E121C356C687C675EE3A541F48735134EA5813BDE8A3F80D6EC5F1C01EF6AC238A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3559a6a4102cb6e4b4fa84594082ffc2cf28bb299e8bdee8d4fd33ae0d1c2d02
MD5 fb094ac0cd6011c366aae42cb7413c74
SHA1 116329ffeda4c7823f2a38f1f1fdf5e1aaf7f43e
SHA512 f2977b48dbb49bb0fb7d05c31a257577faa4cbfafb96ea5271b697d11dde2d89bba44eb7be06d508ad23b9848efecea0015b21fcd25a92bc5e27781ec18516c0
SSDEEP 192:u0Wm+xasuheOwQxMGsNbMQDEbuO7+3vG1mQmiU1pUga4atb0X+FA42YyuNlLMwga:dFZcIhsNbMQ+CjFa91AlWqw5t4/eQed
TLSH
T1AC828D755CB86C7B19F2B141F94B31138EF8C0379AD52E54E2ECAF1D01EB6A8134B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66fa61e0-dcac-44cb-91b0-ddfdfabfb68c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\66fa61e0-dcac-44cb-91b0-ddfdfabfb68c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 19ffc83b00bd05a81c2c631f5a3539f296af151e1a24534a63a156e6576b8c20
MD5 e16f26794a353d6e6f04419cfe6f6fe7
SHA1 2039cc1d656990a5532fb02c3ad8c2784ef5b280
SHA512 73f3c14534ff0df0c3c8c5d6c9ae30649457ff855f53a33cb8db47fab915d1eaa1d3f3e9a9cd0b4b7d940908a792e9d6b533e1bcefe36ce63c2ccd36b3729cb4
TLSH
T1D6413A58BAFD1104B3B76E5A9BF7A96E447B78772E07D49E10110E4F0A22B40C8B173B
MD5 SHA1 SHA512 TLSH

Submit Download