bda084dcec58d71bba5d01c640672505e3e60e25335d5b4cd02cd9dbcd413ee4

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130541765.html
Size 34KB
Sample260910-ajq96aec29
SHA256 bda084dcec58d71bba5d01c640672505e3e60e25335d5b4cd02cd9dbcd413ee4
MD5 faf3c75d0fc110f9ad9f24730b0efaeb
SHA1 6420b3d2b3c1a3028b6790785f2f2a10a1a1bed6
SHA512 f16eb70b0b897571f205b10ade513c9ad92e83bb10ef0efbea140601638a0092b8b447f374b71fbc73b770e5d8c1837fde0c0020a18c0156ddf9e9f771ee39ab
SSDEEP 768:R8AUg73qdwLaJwKojUd0snCSvP40XQ0/t+N7lkK7XUdqWjL3o7n54aGOfWvY2nKi:R8ANOd+bjjUesnCOXl4me7UMYFhaXGp
TLSH
T125F228D476C0E82316CF1A77BF1EAAB9E07A5CB314847647A254BA4C34B9127C5F8CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5012	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334729001490425"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{C6482F13-9560-4382-A5F5-88C69946E630}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2872 wrote to memory of 4984	2872	msedge.exe	85
PID 2872 wrote to memory of 5012	2872	msedge.exe	86
PID 2872 wrote to memory of 2632	2872	msedge.exe	87
PID 2872 wrote to memory of 2632	2872	msedge.exe	87
PID 2872 wrote to memory of 2632	2872	msedge.exe	87
PID 2872 wrote to memory of 1536	2872	msedge.exe	88
PID 2872 wrote to memory of 1536	2872	msedge.exe	88
PID 2872 wrote to memory of 4584	2872	msedge.exe	89
PID 2872 wrote to memory of 4376	2872	msedge.exe	90
PID 2872 wrote to memory of 4584	2872	msedge.exe	89
PID 2872 wrote to memory of 4584	2872	msedge.exe	89
PID 2872 wrote to memory of 4376	2872	msedge.exe	90
PID 2872 wrote to memory of 4376	2872	msedge.exe	90
PID 2872 wrote to memory of 772	2872	msedge.exe	91
PID 2872 wrote to memory of 1208	2872	msedge.exe	92
PID 2872 wrote to memory of 772	2872	msedge.exe	91
PID 2872 wrote to memory of 772	2872	msedge.exe	91
PID 2872 wrote to memory of 1208	2872	msedge.exe	92
PID 2872 wrote to memory of 1208	2872	msedge.exe	92
PID 2872 wrote to memory of 3312	2872	msedge.exe	97
PID 2872 wrote to memory of 3504	2872	msedge.exe	98
PID 2872 wrote to memory of 3312	2872	msedge.exe	97
PID 2872 wrote to memory of 3504	2872	msedge.exe	98
PID 2872 wrote to memory of 740	2872	msedge.exe	100
PID 2872 wrote to memory of 1252	2872	msedge.exe	103
PID 2872 wrote to memory of 4712	2872	msedge.exe	104
PID 2872 wrote to memory of 4324	2872	msedge.exe	105
PID 2872 wrote to memory of 1076	2872	msedge.exe	112
PID 2872 wrote to memory of 1076	2872	msedge.exe	112
PID 2872 wrote to memory of 3224	2872	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130541765.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffe6ef2c188,0x7ffe6ef2c194,0x7ffe6ef2c1a0
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,17813129473819025223,3617169950413243660,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,8106398260899524460,1510137614429878630,262144 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2412,i,15673092844912329839,14393494343258095016,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,10917361545134617749,13736105056682210746,2097152 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,5319104746616635422,7438431109324361874,2097152 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,7088367434097736211,18087510486028636017,2097152 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,13847695740440556049,16820629398414331771,2097152 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,3771812803482072413,829190010006628941,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,14379921615337487723,8095707138064581955,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,6192831568265681683,287164645393312289,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,6192831568265681683,287164645393312289,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,1389396594326023086,12895813079809254598,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,4591900776054542116,1972031817797918633,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,15800599874255973062,16090847823065960634,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,6959357311083610831,5281688743558072766,524288 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,10412089993846198764,8250477739681261863,262144 --field-trial-handle=2300,i,12332393469499045802,3487254224319808260,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3224

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 13b3b963f69a76adb9f149ce38f39a740024fdc05180bac01c2f83926d931505
MD5 3d1bc8e071b0896c1f5634e35317554a
SHA1 76720a6824369f794565f20b59fd20f3debfb2f8
SHA512 716c53d1ba3628942a6dbb8e15b9ca7fbf08e7ad3ef6c6cd289e2f5fa43017c2849686dd54d5ca09373320f35b9c4fe543d785e307e362eea32941fe00284917
TLSH
T1C3712C302206C46DD3B3C23274E22EF3B47544CAF99FAE755164AD743541B51AC1E9D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586925.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586925.TMP
Size 3KB
SHA256 47f6ef980918457fac2423e5496d56da5829afb371fc51055517dcdc47f035b7
MD5 f53595e11d7463110d314f2538e1ee1a
SHA1 40ec2bae9830ade7ad39c95d33a46faed19c7b2e
SHA512 28d71bafff8d2f3d3bb68060676ccebae66ba76207eb3bedca3e6180e390981d76c85d40e42be008b06da88471fa60609eeba4965e0d8757a313b406761810ec
TLSH
T1DB714D302206C46DD3B3C23374E22EF3B07544CAF9AFAE755064AD743441B51AC1E5D9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 bfff554b15d3419494a66a139813f463fd17f104a264513f019c1a1e5f5e8246
MD5 7cbaec89f48f653f93c6e887f5aa3923
SHA1 1993bb10c7a61adf39860dd67ae62a4fe5bd7d14
SHA512 27c665ee05a6f82279ba405b6661ab6d97e795f9cc5d8c8cf37770abd03feb36d168981f3f5975780382b4657ba6b7fe7447fc41aed8211f15f9a09a28569cbd
TLSH
T17B117AF3C3E585AF894156F05A24AE2BDE2D0606832C7C1989D4EF6B93E3075E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 daf61e95e6b3d3ec57cd2017c4b12ad6945382414240e915fe0f0ea4cf91f218
MD5 3a7904796913e705705cd78c331ee66d
SHA1 6e7791c12f9bc4c6aa7c7f03618767b14b253e78
SHA512 ff4dc0d56d129abcc6e8cef60ada5e34713ab0fc3ed6d019c9be403c0bd7896972d3c56b87d7909662f66ed71c1b58712a532d78de29544f261355c892a88692
SSDEEP 192:sxZFR5yM/jK1Ml8MW3/fxsucIdpdgHW6+WNGYIk0IVGIgrJ:sxZFBu3/fxsuFWHbGnz9
TLSH
T1D842E6116A34697BCCDBD309BA45BF53D6F80572A2900E44A9FCCA1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 065ac216370511af0c8a4113a9e0201c2bb6766a7007667679ff98c8b96d7c4a
MD5 baa14432abd74e0d65041c88a7bd6385
SHA1 df066503ee582dc08707a3ad7741ac7f283bfc95
SHA512 fc66eedae2496195a15a823099dd6a86b845fad269e01519f81f8f771fb48ccc670387e3d6bc22ddf0fb05e75522d3605967b0ee128ffec1d8a467587cffe5fb
SSDEEP 192:sxZFR5yM/jK1Ml8MW3/fxs5cIdpdgHW6+WNGYI804VGIg5wJ:sxZFzu3/fxs5FWHbG7jy
TLSH
T1F842E7116A346A77CCDBD309FA417F53E6F85572A2900E44A9FCCA1C05E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 82e954ab43545c11e7dd2e38228982dfa62be85367ed65ff2ed4621f89e7fd20
MD5 bdc27917190f74b93dc8f4dd2460ee68
SHA1 2af86837d60402a3a70aa964426224c7228d73df
SHA512 fb08b3ff96281a6ec4cfe1b25f917c5851705e029154c20161426faeb5720c93fbaa23d58a3010ba1287a649208627580f0bf5b65b9e0c0dbad248f109b6cc00
SSDEEP 192:sxZFR5yM/jK1Ml8UQHW3/fxs5cIdpHgHW6+WNGYIQ0rRKGIg5wJ:sxZFzq23/fxs5FAHbGDDy
TLSH
T1A052D6116A346977CCDBD20DFA417F53E6F91572A2900E44A9FCCA1C05E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4c1573caa613c45cb46e1a0f434436a95add03c9e8169b7b32779148adcf866f
MD5 bdddc0ea3d4d3bac8f9e5475ae825027
SHA1 c0c4032c5b736342c9018daaf857dfa11fc4a5d4
SHA512 12c4c78c463cdb5909f8631debed6899f49a6a5016539c1dd6df40cc70253194d49916edeb0e3daed8f619386472340f4d7cbd9d5d178ed7c2b154c73394a9bd
SSDEEP 768:cesqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9Vro4aqb:cesqxXlWvJD6Tu1ja54LAs9u4l
TLSH
T198D20B3B694CC77E4F840E5DEC266FD76ED801CBA6988D5447FA884C02CB3EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 07c5797bf17eeea707fe34d6d2b8eb55529f9e45940f7b57e3aa3a713248b2a7
MD5 cba16a8b2402365ede9e4e6c57f44c00
SHA1 c52e1bd8683309b5e49c3bcdbc9243c6212ec9cd
SHA512 4e6dc69d62831c599840dc36b52429039c3746d403ebd4e53bb7c29bf2174daf4296f61d9c86220104a83c2edd20b409e4d15186b94ae60a9f0731bdeee13058
SSDEEP 96:KYbaKYIKGG0Kra2qyQKXqgPSKA0uSMAKhme:ExTjHOJzF
TLSH
T11AE1881A713A4652397E2898B3A686771F4236633018B46F3FB840B54E6FE125DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5905d2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5905d2.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 612ffc4b7fba3df38d53fcfcc2bfa04734ad77228e1fdea57e7c3424fc37372b
MD5 e4d62ae6b119fbaff161628b8745c1f1
SHA1 577487803934daa38ce3207f4238526f37f9eec2
SHA512 97db842fc1adaf1ed3a6877046d27a06ac0d507a56304359d6c8e7001c93a20aa7a3d6f404b2426d8cdae102881dfb60eea668ec6dcbf9a39b44e44c67d5e877
SSDEEP 384:+sN/7PSvbjfeVRNEOz/9al1xuvzxV+Mhdpk:+NcHEOj9al14184pk
TLSH
T132624A3178386C775EA66145F94B32138FB4906B9A892F90D5DC5F1C01DF2AC130ED1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 51a7dd13feb1bcbfda6eb8c87b2f1074ef4d7fa24499ddc8167b8f5f88ecbac1
MD5 cb993a0684a8486396f751ed6fdf7e4d
SHA1 f7ddb04ba4ae316abe463da2e02c9511a2cf7388
SHA512 ef80292f7a0e8ac1751ba4648d1deb3b9e944673c64b71ff713cd656ca9444b25c21a88581ce7a30c704b3160f2c030d706918f36742408b6765bbfc106c2e80
SSDEEP 384:JiFQsNi8TUNTUlIlQPSvbjfeVRNEOz/9aL1xuvzxV+Mhdpk:gFQpwgVcHEOj9aL14184pk
TLSH
T125823B3268649D7B9EB65A45F94B32138FF440ABC989AAA0E7CC9E1C01DB1DC130FD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c02a6111b13ed043cfa07a73a5ba6b941089d2b995461cb9e3bf9120ce094fe7
MD5 8fb5d9e3087e1191a215abc2bbb7272c
SHA1 4e659f84c4b6e119588cd81e286a556afe0e408d
SHA512 96e974b0d184cc879e2d54a52b5be395e039596166aeeae32e20cd51a8fde55f9ae674f585d7aae202f8a1e0ad4c6d22100a6a4a8179c3475a84f7efbbfeb53f
SSDEEP 192:tONnd6JkRtQmiUybZW+RNEOmAeR1h3HRAU6:tONd6UraW+RNEOzoiU6
TLSH
T10B02E835AD386C7B9EF3AE09B58B27175FE4106BA9856F80DAD81F0C01D765C1347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 0fc83ddb9fdcdaecd7c4ef53be169c329c6db3acf2bd81e0516d206b732d5dcb
MD5 f7e7def8c9ac4bc94bf23d716435e0db
SHA1 41d9caf4a570596e579be9bb6c4943d320f18748
SHA512 6601ab3b1dfa38d3d1d31915471ed16df5cdbd4f030991136bef379f172e256f05ed1a2d7e5a814077b482002434ebb4324f4605087355ea2a3b9b786074e8c3
SSDEEP 384:zsN/QPSvbjfeVRNEOz/9al1xuvzxV+Mhdpk:zUcHEOj9al14184pk
TLSH
T14B623A3078386C775EA66545F94B32139EB4906B9A892F90D6DC9F1C01DE6AC130ED1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 39ca417daf4bdc8d31d369c598d5b5453a9a16c7c9936ac78329d9eed2d50e88
MD5 b44f746af4c4e28959032d6e2bda3eb4
SHA1 b0f1f1a9707f5d2c03634051d2e2a352a254c6ae
SHA512 a348a05ab6ecd0a0e8b4f5d9a3fe1d8f80a4a132ff39030bc0ff61a9b4d7c1751f695de4319538ba16501815b64f7a58c5f87d13ec800426b4bea6ce7d1cd492
SSDEEP 384:JiFQsNh8TUNTUlIlQPSvbjfeVRNEOz/9aa1xuvzxV+Mhdpk:gFQowgVcHEOj9aa14184pk
TLSH
T160723B3268649D7B9EB65A45F94B32138FF440ABCA89AEA0E7DC9E1C01DB1DC130ED15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7351fefef63b5408903e095a156ef27f6976e7336d5eb9b4405a2a98775c8e8e
MD5 9acef9b7f2b89e380206596820ffa591
SHA1 9b641be5738e60b620194d173831193e082858b2
SHA512 e38d1688c84d20ad86f5073cab466b17124dbe52c57f7c2ec6c518735852fb1bbcd0bd51c5feea21e982a6a6cdd54cca86eb01e967d6adab0a997a922f3e0739
SSDEEP 192:NONi6JkR7QmiUyfZa+RNEOmAeRi99aXVcYDq/HU6:NONi6UtAa+RNEOz/9am1U6
TLSH
T1F1123A357D386C7B4EE2A945F48732035EA9516BEA8A7F90D1DC1F1C01EF9AC130E826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 40c888df330b0df0d65be7474315781bb5caa03997e70c995a4f1380cde3452d
MD5 d9f5e8679317ecb903ab5f3b2e54c049
SHA1 3eb027460ed6e96e55ee92ed9f8e875375d632eb
SHA512 517f1d6b3982438141e79df8371a81c822fc0c2fb2211fa8f40bb10db7bd9c42054fec953acd8c17b7e4fe342e1f1c0c06585cffa213b948f7568e4ec95d365f
TLSH
T11C410C58BAFA1144B3777E16ABF3A86E487F78772E4A945E10110E4F0633A40C872B37
MD5 SHA1 SHA512 TLSH

Submit Download