02ac4e0e3b55bcc20560e3056ebc5aa247c25cf061e95b9f311ed0430edf42ef

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 29KB
Sample260905-sr4vbstzct
SHA256 02ac4e0e3b55bcc20560e3056ebc5aa247c25cf061e95b9f311ed0430edf42ef
MD5 fc436871b1b7bb2d44a9c1c0fe94ffa0
SHA1 c6ccfe7db2be6f6b78726f16753cc1c7c1e397fb
SHA512 1ee9db5b573cd17f436b89272ff054eeecff65eedb17e3a2bbe778a09a28c0f31f7a3285c379dcd2e38f6fccb6ec2282a431d5864ac9b6828c0da98e70897d58
SSDEEP 384:V/GFwEHGtqpUDfKiwTxtG93111e1yYiSGTy2Wp3D1+S:V/GFJHGtqpUD+TO9nYr+WD1F
TLSH
T164D2556288E47873431340D7677B960EFEA1C45BDE8E9901F6EE02D15FE3EA28C67119
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
832	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134330953578149522"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{1CF1E899-F8AC-49E8-9617-D80E1975074F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 1644	5016	msedge.exe	83
PID 5016 wrote to memory of 1692	5016	msedge.exe	84
PID 5016 wrote to memory of 832	5016	msedge.exe	85
PID 5016 wrote to memory of 1692	5016	msedge.exe	84
PID 5016 wrote to memory of 1692	5016	msedge.exe	84
PID 5016 wrote to memory of 4436	5016	msedge.exe	86
PID 5016 wrote to memory of 4436	5016	msedge.exe	86
PID 5016 wrote to memory of 3984	5016	msedge.exe	88
PID 5016 wrote to memory of 3984	5016	msedge.exe	88
PID 5016 wrote to memory of 3984	5016	msedge.exe	88
PID 5016 wrote to memory of 4076	5016	msedge.exe	89
PID 5016 wrote to memory of 4076	5016	msedge.exe	89
PID 5016 wrote to memory of 4076	5016	msedge.exe	89
PID 5016 wrote to memory of 2304	5016	msedge.exe	90
PID 5016 wrote to memory of 452	5016	msedge.exe	91
PID 5016 wrote to memory of 2304	5016	msedge.exe	90
PID 5016 wrote to memory of 2304	5016	msedge.exe	90
PID 5016 wrote to memory of 452	5016	msedge.exe	91
PID 5016 wrote to memory of 452	5016	msedge.exe	91
PID 5016 wrote to memory of 4448	5016	msedge.exe	99
PID 5016 wrote to memory of 3772	5016	msedge.exe	100
PID 5016 wrote to memory of 4448	5016	msedge.exe	99
PID 5016 wrote to memory of 3772	5016	msedge.exe	100
PID 5016 wrote to memory of 3860	5016	msedge.exe	102
PID 5016 wrote to memory of 856	5016	msedge.exe	116
PID 5016 wrote to memory of 4284	5016	msedge.exe	117
PID 5016 wrote to memory of 2856	5016	msedge.exe	118
PID 5016 wrote to memory of 1724	5016	msedge.exe	120
PID 5016 wrote to memory of 1724	5016	msedge.exe	120
PID 5016 wrote to memory of 2588	5016	msedge.exe	122
PID 5016 wrote to memory of 2588	5016	msedge.exe	122
PID 5016 wrote to memory of 2332	5016	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffee8dac188,0x7ffee8dac194,0x7ffee8dac1a0
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1872,i,14239790115301958591,6127905160912043174,262144 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=3032 /prefetch:2
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1992,i,12023605128446353450,12195835579598615744,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2256,i,14184055443227828462,3613044951900762402,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,11253559621859654461,8697752721878814452,2097152 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1887685973582643499,16145995288881531661,2097152 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,5892319877347089148,8226552822276106886,2097152 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,6528626922410013977,1460909014787719217,2097152 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,13782521968041974810,12260570630613949614,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,18293001463053216664,3393780013267921341,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,6633223508930226580,2116776435396141386,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,6633223508930226580,2116776435396141386,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,7323742860641034417,3531883349964264704,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,11937119250587783429,4620800479925799759,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,12977651848829487616,9537917769645079969,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,11665593462598355340,13504571823487217529,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,5053268876122759585,662833824791269236,524288 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1044,i,2827095108743564076,15444390743250400357,262144 --field-trial-handle=3036,i,17463493273184851013,918529559500178423,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 21395107fb974a1a115c51dd15a3caca1f7653047bfe137abd9fba0475a86055
MD5 0546c5299314a4ef30bb1f893a7c9eef
SHA1 342ecdbb0061fc82c1851cc666ab9f0bf3d58e95
SHA512 12b2649e82e20d8be9db0e428d8002601042ea73e5c56da5e12eec3439c177094725fdb133b897daa7e701be2b9e7cfa8d991b0e3ffde4c6ee9f3238c13f0412
TLSH
T11471B5653352A4B5EFE5453CEDD24AD579B070850E239EA901705B3D2BDDB5F0C211CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b6a9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b6a9.TMP
Size 3KB
SHA256 4a214e0719b74e45c9cfe5ce841a0e2aa60333c977b5d54b95983e7000fe45d0
MD5 4da7e1e12891ac9ef7ab5c2ef705846a
SHA1 a702dd7a7a17954904c84ff021d9822b022101fc
SHA512 917165bc7cd7c96fc691f4d3eb55db6f0f867626663d7990e430ade76b6329577a2474186e6d4b154f90e7289247d0e7cc9b32a34fc61d62efeecca53f6f9439
TLSH
T18F71C5653352A4B1EFE5453CEDD14AD979B070880E139EAA01705B3D2BDDB5F0C201CD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 584271aba5aea2e78e71a006b0df4e6ef06666e293a5e114eef33eaa63727ce6
MD5 bdce9c3e3dae8fcf8f30b5632bd718d1
SHA1 c160694f5a07a4ee09649621c06123291794d66e
SHA512 7fa6efb8e38a81e31b250a2252819cc16e66f8530a9936083c80f637fd13e99a9e49aee05c030826d62666e6165eb99b9033ca1bd0e7440d19e9dd6f83cdb8c3
TLSH
T1A05189B7C2D8877EC91152F09B25AA2ACD5D450B862C3C06CDF4AF5B63E34B1E24165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 90ca4cac1075652bab0a0e48af7ebfb35ac255279bd1bdcf41cb3956c940b164
MD5 74c3b353bb45e1be6b0b93d0bf75639c
SHA1 8500b2a422cd45cc706ffa7e9a3461068d90be85
SHA512 e121b91864761f51412f79c28bb6a3ca444d0993d29e2e1c3d1bf2c2dcbca291655e9253e93055ac0e984f0d8d09147edb8339e79f932a225f3021f90e5f0cd6
SSDEEP 192:sxZhRtyM/jK1Ml8MkL/f8sPkGMoCIdpduHW6+WNGY4wic8IgrJ:sxZh5ML/f8sPkGMoroHbGx9
TLSH
T1CB42D912AA346977CCDBD20DFA557F53D6F91472A2900E44AAFCCA1C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ff52e2fe751511d8c7d40114750d1d0392f566c70b8741d022a014dd356f737f
MD5 e54006c6809adb4e0f345f2fab3719b8
SHA1 a5d8cf2f30aaf43247a5bac9d91752045024f9f5
SHA512 0b11e9b006f49255c9767a31fd75b7e65fd2fb02e9f8de63d0ce4a9dce6024686de08e3f8057473a84a7e666fc5a6d4fb9853f2c8a44ed5a33306f7f0d4a579d
SSDEEP 192:sxZhRtyM/jK1Ml8UQJkL/f8smkGMGCIdpHuHW6+WNGY4GDc8Ig5JSJ:sxZh7qKL/f8smkGMGrOHbGwK
TLSH
T13C52C712AA345977CCDBD20DFA517F53E6F8147296900E44AAFCCA1C05E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 6565367a412f2811994291fcd07b607079a8fef807cba0a8fb5f603bb45943ab
MD5 e50c7be7a9a1283494ab77fc009d5da4
SHA1 eedc2c064e8f7224434a4f8a8023381e78afc3c6
SHA512 3d9693db54243c7c54c48d91c19a407d7c19a10367b63bf5d121b6d9872a65d85104edac8b1dc3ce4c31c0184a7364dbfb8317298b9fe0e2c2d5753fd796b5b2
SSDEEP 192:sxZhRtyM/jK1Ml8MkL/f8smkGMGCIdpduHW6+WNGY4NMc8Ig5JSJ:sxZh7ML/f8smkGMGroHbGUK
TLSH
T1C342D712AA345977CCDBD20DFA517F53E6F8147292900E44AAFCCA1C05E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f72c731e8d7d5882249e6b6027adcbe46aa4b5bf347f198dc63628d7eff2fca7
MD5 bc9d40838ff162ffac6b8a3a8a246cd3
SHA1 a9545525d5498ab9605492a6f27aed3e50959744
SHA512 4da3d85839cadef0026f7eca38a60287ef5b9df81d6908e2d26646b4f0a0ff2c39919d4acdba4404e0b546143c47780aa1bc8e2b07685f194db3b32e99ef3b52
SSDEEP 768:lt8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opd+rookHUnC:lt8iJPNWvx76ru1jahALocdVzUC
TLSH
T176D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EA51279DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a3d45ab03d33b181afd60a4053646045ff39d24824da4025b4627c78208c13a6
MD5 a14b96544d4a34203b289c28f333692f
SHA1 0f8050af1fd158aa7c41db7e0c9cb086f7414055
SHA512 d8ccd627a02b0c3802955297585d507dbd075068930313b9c4cd2a93c1824a42e85a7e5d520d780cf13049a456f10bae5eb614bdcf3726bd74524eaf833fa713
SSDEEP 24:KdQf3kVaadCC+4SO+lIjY+Kitham+1EwuSmEMt8ofyXYtfo7Sa3df7z4Lv+CIjnw:KoZIhKy00DyxCI/KnqILUI/K1mc3ylz
TLSH
T139916D96727B56452C7E2809D1908B2BDB423BA33008A42B7BAC01A24F77E355DFDDDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05519d62-5b25-42f7-85a4-de0a9ed88fd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\05519d62-5b25-42f7-85a4-de0a9ed88fd8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 a82d47b599ae48c30158955ebfe6de8887e11c5a61045831273efec6c12d0057
MD5 230643a10ed37f50bde9e494b53d9dac
SHA1 c153fbbdb80cf325a71554209cd41ab259230678
SHA512 92d0a199f36d96886e09d1eaa0c7ad938b9152ccd73bb6cebc0dcf99f15c4c0373a30d9f8d7552db0f087a41aead962ac66558a886468fdb2d572052415dd354
SSDEEP 384:x8+iFiZcII6sNE8TUNTUlIlc13NlCpkVHtRm7O6R2Feooh7UEoL:WVFQVBwgmmem7TRL54
TLSH
T192A27D3358E89C7B9DB79A86F54A36179FF441A3DAC5AF90E2DC9A1C00DB2D81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 839c5f8829fd9158ccd992106e15e195c825c772842f31145edbca40732285f3
MD5 668b1dbf6d7ceba6e2d95ff570b71c51
SHA1 bed2c1cd52a449b18a25c6f8cfc9a515c69b5ac8
SHA512 fc27ff86ea44c8493ff260f4e7d84954ecf8b0e9433098c5719d9395479c17964c7b6575b1add94cfb1cedb914f5147b687ce13b9baa7c95059630d71662b357
SSDEEP 384:BZcIhsNMJ13NlCpkVHtAm7O6R2Feooh7UEoL:JhHm9m7TRL54
TLSH
T1F3829E3268B86C7A5DB7D146F44B3A175FF880A3E7C91F8095EDAB1C04DE6A8131B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9195d35f8a03f93308ea4ad7da447c96dc18e62c0c33ca88791d2a8e6c3f3c06
MD5 d29796f0bea3811f0a9a081429ed01bf
SHA1 8977ea2cd770361ce5d7af6a5c51f4c731a61101
SHA512 4d0d3f7f686adf8ce9ec6a30f277de4748ed1ad7e4802b7a757fef7974ffc278db85c4759a4b8dea3e7dfd1bb73c32c6f3675eac14aee2f7c7a31f5d4fffcf7d
SSDEEP 384:mZcIhsNMc13NlCpkVHtAm7O6R2Feooh7UEoL:0hUm9m7TRL54
TLSH
T1C2829E3268B85C7A5DB7E146B44B3A176FF880A7E7C91F8095EC9B1C04DE6A81317817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e0318079158f6e726b1b2b5e48335f716d078aadd73e5a8e5ca750fb708515f2
MD5 e3d0804c322ca56785f4c56be5c70b0b
SHA1 463054fe69d5822b09bf6c11a6a66f3e36f372f9
SHA512 15379f26efeae4c2589cd5869e6d031c08f18ec2f88e9285980b423e1614714e58431eaff18ff907db7b779663a4c2485414d07245905ea208f94c1d95427a5c
SSDEEP 96:ZqONkmGQsjpfmUTmDK5ih/cIPURHl8h4otop5r5DZBhPwivh50xy0SFYKRAxcbsY:gONp6kDfQmiUyN/Z903YRQi0QU6
TLSH
T1F502EA35687C2CBB8EA3AE49B48737275FD5113BEAD52FC4D6E81A1C40D725C2307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7c4e33dc58209f46a4ce8ce8e9706060c428801fb85277f350617aa7e023eeee
MD5 031aa6152db93c41d99ab5edeaeb18a7
SHA1 4a24f4418f26366785fee5efbe31b10f436dfd26
SHA512 c7b58469cc87fe1f530cc59f9ca04ef7d9aa62e8958459a0dac7678c691dde8a9026d12678527d9e706d6e83546519d5729aec551aaf06cdfc9d2b6f0cb10d09
SSDEEP 96:tqONkZQsjpfmUTWK5ih/cIPURHl8h4otop5roDZBbPwivh50xy0SFYKRAxcbsa49:EONN6kTQmiUyK/L903YHHNecRIqAU6
TLSH
T166122B3268BC6C7B5EA3A945B08736175FA58227EBC97FC0D6EC1A1C04EF26C130B516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f733fee-1af3-469b-8f27-179316ee69ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1f733fee-1af3-469b-8f27-179316ee69ef.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 850c7b94d4554df41edd6f77ddd3bcd2403288fb071fb3c65eee25216404d9d9
MD5 cffc011476f2d0c081165d1faa826f3d
SHA1 86220ef8bd7caac91abc56bda1b8627b5d963e90
SHA512 16558fd40320915c888817c49fb80ef270b886a65aad25a243d52fe60d002c1b625582dee2dabded690cd2faae237b00dbc34e87af5556ab06b1304d9179ae10
TLSH
T119411A89B6E91148B3B76E5AAFF7687E487B7C372E06D49E10010E4E0A67B00CC61737
MD5 SHA1 SHA512 TLSH

Submit Download