317dfe10820e15d50042b6b76c8ff44b4d791c54824b2fdf19b035b3fbba9c3c

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 06:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
317dfe10820e15d50042b6b76c8ff44b4d791c54824b2fdf19b035b3fbba9c3c.html
Size 82KB
Sample260907-gqvpgsfa56
SHA256 317dfe10820e15d50042b6b76c8ff44b4d791c54824b2fdf19b035b3fbba9c3c
MD5 bc43a9edacb7afaf3bb64047bd4c8ec0
SHA1 5f190ef4c2648472f045b2c2eaf7d421b0672f81
SHA512 a8759fc3d5e63263e5b172eb9b652b39f0493457b23548f4aa326bb95226ef90418a9ba4b13d3b555df5a8078be9fee774f453a12d42a56403f9dbf353ca471c
SSDEEP 1536:bploMUMxdhQjRlt2ntpHXZ/syerosoEJOQaEKRtwT:iM5s8KoE2u
TLSH
T10283F8B9F1A170325A13F970402F410FB97B686BE44C09ACF254DCE0AEF598A8577B6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4144	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332344677223659"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{FF8F3170-3BA6-4CD4-89FA-9331D81E4D6A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4048	msedge.exe
4048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 3120	4848	msedge.exe	87
PID 4848 wrote to memory of 3732	4848	msedge.exe	89
PID 4848 wrote to memory of 4144	4848	msedge.exe	88
PID 4848 wrote to memory of 3732	4848	msedge.exe	89
PID 4848 wrote to memory of 3732	4848	msedge.exe	89
PID 4848 wrote to memory of 3580	4848	msedge.exe	90
PID 4848 wrote to memory of 3580	4848	msedge.exe	90
PID 4848 wrote to memory of 1056	4848	msedge.exe	92
PID 4848 wrote to memory of 4892	4848	msedge.exe	93
PID 4848 wrote to memory of 1056	4848	msedge.exe	92
PID 4848 wrote to memory of 1056	4848	msedge.exe	92
PID 4848 wrote to memory of 4892	4848	msedge.exe	93
PID 4848 wrote to memory of 4892	4848	msedge.exe	93
PID 4848 wrote to memory of 5104	4848	msedge.exe	94
PID 4848 wrote to memory of 5104	4848	msedge.exe	94
PID 4848 wrote to memory of 5104	4848	msedge.exe	94
PID 4848 wrote to memory of 4124	4848	msedge.exe	95
PID 4848 wrote to memory of 4124	4848	msedge.exe	95
PID 4848 wrote to memory of 4124	4848	msedge.exe	95
PID 4848 wrote to memory of 3188	4848	msedge.exe	98
PID 4848 wrote to memory of 3188	4848	msedge.exe	98
PID 4848 wrote to memory of 4048	4848	msedge.exe	99
PID 4848 wrote to memory of 4048	4848	msedge.exe	99
PID 4848 wrote to memory of 4652	4848	msedge.exe	101
PID 4848 wrote to memory of 1084	4848	msedge.exe	113
PID 4848 wrote to memory of 2184	4848	msedge.exe	114
PID 4848 wrote to memory of 1068	4848	msedge.exe	115
PID 4848 wrote to memory of 3304	4848	msedge.exe	117
PID 4848 wrote to memory of 3304	4848	msedge.exe	117
PID 4848 wrote to memory of 4048	4848	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\317dfe10820e15d50042b6b76c8ff44b4d791c54824b2fdf19b035b3fbba9c3c.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffedc9bc188,0x7ffedc9bc194,0x7ffedc9bc1a0
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,1164586835497482495,6847443355289486187,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,4670265355230910733,13377769773430496709,262144 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2636,i,13903755967441848648,3512368479920286669,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:8
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,4955828033301983821,15089664046141904069,2097152 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,16970053346453855535,3956235879911947070,2097152 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,4400257546064906193,5720377124349699911,2097152 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,16144675556028728803,6687041817077412327,2097152 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,4985381367813496603,2366955192994586247,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,13331845417589117261,1435194210959224546,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1473595247986504982,15599254850392889533,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,1473595247986504982,15599254850392889533,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,10807200678607036067,11033305393464386137,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,9943137763272767561,4842509497552517747,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,4459111886251928554,13679158448614524670,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,17801164453129277666,5775801668305320448,524288 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=756,i,12174142389377558472,1910783026000152740,262144 --field-trial-handle=2324,i,10630769878851690592,4841918983633097397,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4048

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 bc0e8ff485a06444f96a18ec9cf9960f08cf7aa39319b45eb6575ec9a79d1983
MD5 a6de56c7fe4974b0dc310cc10a42c7ce
SHA1 678466d08d5092c5867fb0dfd719f1487dbd233e
SHA512 1195b33a5bbcd15b7e2edea0811c534b735b3be0a909979e0cfa2cc2ce7118f5aba0a52d487bd1f9bc8a10ac6a7c7159e173a4fdc52230ed175b6608132121e4
TLSH
T17B51C4384711305CD75901F1B1C30CA6B0BAB6C0F9E7EFFA0B63A475CA1D7AC8914654
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589229.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589229.TMP
Size 2KB
SHA256 de715f6d5fef52eedd4f3358cbf968b92749b5f9844a986533c480a053e7de7e
MD5 e43596e3fd23f360df2163272ea6f37f
SHA1 63d43db19acd0056042b5f760ab6fea30cbd51aa
SHA512 710ae06a0166b898ebda2f2db1d8b391512b56d461c9acd093c2f472fd1b232897ef755b355aed41031b137fc8e6df7b236357d96b9ec5115b22f4ee9411ac47
TLSH
T1A051B3384702345CD35A00F1B1D30CA6B0BAB6C0F9E7DFFA0B63A475CA1D7AC8814654
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 4f9878b5e562dc9246afb2682e1d6cd463f95f35dbe60f662d7b7096903dcac7
MD5 dd1168146bc49da8ece36331ca77ee2c
SHA1 cc9f024603b7f356133591fb5b2c2d700c8588a7
SHA512 25a863f0f2039af0f808143d5e624955c396f1644571a0bb54308428d3e8e221650948acc8ed69042f64bb158b9ca52df7f8e53f88100b84a0ffc6f5aa7d4a94
TLSH
T1DA31AFF7C3D5867EC91556F09A28AE2BCE2D0506422C3C16C9E4FF5B93E24B1E10159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c22ae9b89889ca9c56b3a172545266d35423e34670eaf76c276a0f2a602c9931
MD5 03d0b7b8c825fb0b51b0e64ec1dafa38
SHA1 d098b295fc5325a30c7c9b2d78f7c919f23e7f59
SHA512 5607104ff4411eda60f53b4f45879b82c0917e4a594481598d14b59e52b0dc2146e79a17098102d78cd2e4abb1d913b49fbf48cfe440bb87eb28e89cec6200b5
SSDEEP 192:sxZORJMyM/jK1Ml8Mko/fcsTAaQpniIdpdyHW6+WNGY9IKNlPIgrJ:sxZOTsMo/fcsTAzpLQHbGG9
TLSH
T1F4420A126B34A977CCDBD209FA557F53D6F91472A2900E48A9FCCA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 73dde05e51c2a9a768c3d528c16e35c2cc150b6becdb8fe5924b7038e88e06ac
MD5 c716b0ef2c465f2dc8f830cbb4a1e1d3
SHA1 862fe41f62b4607143849adf0524a10e4bbd183c
SHA512 f1421f2b6fb299165dd87254501e23b22f5d951b356f7fca0a549b79e63cb5773b07ac66df54622c2faa640403ea8afbd28de62379b2d8fe323ff0139c7187e0
SSDEEP 192:sxZORJMyM/jK1Ml8UQtko/fcsrAa2pniIdpHyHW6+WNGY9IkwlPIg5KJ:sxZOTsqGo/fcsrAdpLSHbGRs
TLSH
T102520B166A345977CCDBD20DFA457F93D6F45472A2900E48A9FCCA1C04E6BED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 57ddc8b36dd031bef22e3ce594ae2c4a680eca4dd0ad24086fc85d97b7525461
MD5 28a2a8b65b9dc3a9df3a7ec144a093ff
SHA1 059dfe8420dc6858e6ca9378a743cdc42f2a9803
SHA512 3a0f358f62901b510ae3779d5fd0a195e32c2e1c4460de353bf8a7f481d8607e6fdfe68a5e0753b686028f14ae9571e53100a479af02fb0632debf183318aca0
SSDEEP 768:nRucv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNRCroCg6I:nRucv21wWvu+Z+u1jaeFLeRNRZCY
TLSH
T18AD20B2B680CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA884C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 83006e372dd3caa41d937b2435fb7c0318f2394fed11058fd3704be2ec39d294
MD5 0c26b1df865fd19241eb6721c4ebad36
SHA1 dd7117824128cffeeeb9d6aecf342c8298f230a6
SHA512 779200e83cfb6f71a74d0199b105c1ce73314096a471f88527e4a58bd60edae0c997d96db8bb802652e56a0ef72e7e89b0e518cc2643b0c05ea94f01a93206c2
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+HyKokuK2EKnqfQvOCQeuplyL:mThJ32QvOCQeuLyL
TLSH
T1A7914012323B0282387E7958A39987375E4136A33918A97F7BF805614E27E213DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592d50.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592d50.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 45a1af8ba67f6ec04e357b794e9003c488a99fa49a35e6b90555088844e2b680
MD5 148b90ace5430fd88959290ecde9e975
SHA1 adc68c02b4558fb23af3e50edcdee2308b458740
SHA512 5cee3108b4edb705a4a91642836e96f90b4f2268631ad79f75d0595637d650bca6f5a763b17c99fc7ed707f029a810fe4f927eed192bc261ade554d14f7ca2e0
SSDEEP 384:BiFiZcI/sNv8TUNTUlIl7XJzi1N8e+CnOqEl4Tfsa+VYElEo/:oFQ/OwghJWX/OHlifhgS4
TLSH
T191A26C735DA48D7AADF69B85F94B32038EF441A7D5C5BA94A2D8AF0C00DB2DC0307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1a5aa959c2b8e1e7c53c2ec65f71b6b42b44b42ecebe6d02461216e048c4745e
MD5 623af85391b4f0922facc6cc0d2cc4da
SHA1 d0e9da95591360247bd2f0ba59cd91b07eb35c0a
SHA512 abe40065cae4510dc50a8da5d69bd9320a38450d3b5e36b4c587bee5bcc4e24bed7928626d824da7210ac47bc28a3891f104fb488239863ce43c60815ecd8fbc
SSDEEP 192:JONt6v+YLNQmiUysIaZh+CGVgOq8us/T7U6:JONt6vz//Zh+CnOqy/PU6
TLSH
T1BD02D935AD782CBB9EE26E45F58737176FA4217BE9912F40D9D82E1C01D764C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a28eac78f4472b0de6ab8ef707ac29c40f68010f08898a1337de0710ad42a2e7
MD5 c34f503939550c6c792d3234176a578a
SHA1 5faa8a9f5e90f380ffbc958faa9906782b0813d2
SHA512 5e527f5bc5e6eccf1fc48155790910997d43ddb02d59d8ef8c6f01e30e2cb9722568dc32f599c67c699760c5a06183ce245efc48052eb948305a8de4e32539a7
SSDEEP 384:oZcIhsNV7XJzi1N8e+CnOqEl4Afsa+VYElEo/:WhcJWX/OHlzfhgS4
TLSH
T14B828D716D784D76ADE79281F88732039EF89167E6C93E9484ECAF0D01DB69C130782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f1c9faa9f498d082f97cd68473177829fdc811dfa123600e353129354e5e7200
MD5 9e8e233376da179780201cab01cd21e5
SHA1 22711c88f2113ab1ffef3954aa3c8ec2d05beba3
SHA512 fbf77a0272a5713675ec8321e121829272a1339c3824009fcb5c211b07940033484b054f6cd1b59df81811bc1f6c72ee397368ca9e95e5ca3bb345820ef28ddc
SSDEEP 192:rONY6v+YLlQmiUyVIash+CGVgOqEl49CHFqCU6:rONY6vzPssh+CnOqEl4qfU6
TLSH
T1BD122B35B9785C6B9EE26540F48736135EF85267EA857F80D5DC3E1C02DF69C230A82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 a57a96614c5d162005b74d489fa4d992631fcc0ec73d7e5fc0f776438de4c8a3
MD5 3133ecdb09d247032271c224ee6ab521
SHA1 f851a3af0ad7eee94b3705d8fa4bd07b121f048c
SHA512 579a27bfb5fefc00a8c6b5556f783c910417e09eafbcab52a5dd22dbe0188b9c5162d02c637a2fc32683511ed9c1e67e91be034e0bbda62f292af2ddc00ed638
SSDEEP 192:utLsNV3QFIJ+YLeSSQmiU1/ICz4e+CGVgOqEl4uCJiFqCqva+4LcYLWAdEl5:osNV3XJzi1N8e+CnOqEl4Afsa+VYEl5
TLSH
T158625A3279785D769DA79685F84732139EF451ABEAC93F9495DC6F0C01CF2CC130682A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8baa494-98c6-4ae9-bed1-32f4be44e68b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b8baa494-98c6-4ae9-bed1-32f4be44e68b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c666ba442bf75f868a6341dec607b827a5cee884095d1df7e996819d70b6ab06
MD5 c1831b125ec53b47df0b9853bbb286cc
SHA1 b87b761317988f168306086cf1a0a7c52fb351d3
SHA512 53f12ee2ee40713666c6cff4ac3f5d9eb1f32e17d6d9f4ebcddd7d5fdebcb5c54dfb2f6b1ea4c7c9cd24cae6737fde8fbca7e65540924dbf7ef8d2a8cb042e75
TLSH
T1FC41FC58B6F91148B3B76E56AFF7786D847FB9332F06D55E00110E4F0A62A41C862B37
MD5 SHA1 SHA512 TLSH

Submit Download