008344928bc7cc533983c7d0c6fa053b8f8d88e3bcc0276e02d6cfaf8aaa81e3

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130287815.html
Size 34KB
Sample260910-ak3pksed48
SHA256 008344928bc7cc533983c7d0c6fa053b8f8d88e3bcc0276e02d6cfaf8aaa81e3
MD5 5207a6978b2dbd110bd70780195769ac
SHA1 367abde09f7136d0406b876647c19f49b820e6fe
SHA512 69b8e42358f2c4960b0203ef82a2b264737e90eb83712286328d3b1ed7dd9e82497468d0c873bec73b67dcdc02919939ce823f4a7ad88ea184c442f50af17300
SSDEEP 768:URfjNU/0ITSgzPAk/94or/2fKjE4+2ZaU8nCKpBRhXiha9PM2vNOnxx+ZZa9vRYE:URfJU8CPAq4oz272Z9rxEo
TLSH
T1C1F203C466C4E51712CD0B63FF1E79EAE07B9DA36884764B82A4B68C34BD917C1E4CB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4504	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334736282182925"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{83207313-5588-4BA3-ACAE-827B185BF9CB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4672	msedge.exe
4672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe
1680	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1680 wrote to memory of 3592	1680	msedge.exe	85
PID 1680 wrote to memory of 4504	1680	msedge.exe	86
PID 1680 wrote to memory of 1984	1680	msedge.exe	87
PID 1680 wrote to memory of 1984	1680	msedge.exe	87
PID 1680 wrote to memory of 1984	1680	msedge.exe	87
PID 1680 wrote to memory of 1704	1680	msedge.exe	88
PID 1680 wrote to memory of 1704	1680	msedge.exe	88
PID 1680 wrote to memory of 4236	1680	msedge.exe	90
PID 1680 wrote to memory of 3904	1680	msedge.exe	91
PID 1680 wrote to memory of 4236	1680	msedge.exe	90
PID 1680 wrote to memory of 4236	1680	msedge.exe	90
PID 1680 wrote to memory of 3904	1680	msedge.exe	91
PID 1680 wrote to memory of 3904	1680	msedge.exe	91
PID 1680 wrote to memory of 4852	1680	msedge.exe	92
PID 1680 wrote to memory of 4852	1680	msedge.exe	92
PID 1680 wrote to memory of 4852	1680	msedge.exe	92
PID 1680 wrote to memory of 1248	1680	msedge.exe	93
PID 1680 wrote to memory of 1248	1680	msedge.exe	93
PID 1680 wrote to memory of 1248	1680	msedge.exe	93
PID 1680 wrote to memory of 2728	1680	msedge.exe	97
PID 1680 wrote to memory of 3360	1680	msedge.exe	98
PID 1680 wrote to memory of 2728	1680	msedge.exe	97
PID 1680 wrote to memory of 3360	1680	msedge.exe	98
PID 1680 wrote to memory of 4816	1680	msedge.exe	100
PID 1680 wrote to memory of 368	1680	msedge.exe	104
PID 1680 wrote to memory of 2632	1680	msedge.exe	105
PID 1680 wrote to memory of 4152	1680	msedge.exe	106
PID 1680 wrote to memory of 436	1680	msedge.exe	113
PID 1680 wrote to memory of 436	1680	msedge.exe	113
PID 1680 wrote to memory of 4672	1680	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130287815.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff9354fc188,0x7ff9354fc194,0x7ff9354fc1a0
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,4717836840847761145,5229878431709564462,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,3632800422383943027,3268266720996923524,262144 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2544,i,14535260030019623265,3160044667408358137,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,15601510246777886815,16414680719851722222,2097152 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,2074988473661732306,9004488506114323618,2097152 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,2820963442321051381,2611965090724918961,2097152 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,10682115798637208953,16671523720756779428,2097152 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:2
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,18327920808006829627,17638562530615291706,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,8685000881756551207,14008829911452236145,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,2691942931862880095,15828266927863370003,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,2691942931862880095,15828266927863370003,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,17691541077337315747,827078733251588844,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,12610770435768223051,16689132418298359110,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4684,i,6592764886576964755,17634500026650971487,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,15369558479950855245,6750313463700683218,524288 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6376,i,8016993333517133755,8826962985255368900,262144 --field-trial-handle=2184,i,2799779660147614392,783427050130499003,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4672

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 74604a622341ab4295ba668c69ce47208b0128e12320fb7957e44e8e3fbf9512
MD5 0fca8afed6d85d2177d8645c7d4ec41d
SHA1 6cd84231d896be22296a8bc280fa7b4abb315ce6
SHA512 92b35c61e9396396bbe3fd74b3bc58ab7316369219a8ebdea4ea58af2a6bd708a9ed43854eeff698e48136f96179f27417e277ae6508abf0cf015a96deffd79b
TLSH
T1BE71D827066200D0DFA91EF3E1E24641FD728CABFB13CE630064E47DB70BB954590785
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cec5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58cec5.TMP
Size 3KB
SHA256 bbbe555cc0b7c4d3eda0cdb70baf5a9375563973fc50c289a6b55d1dd70a1732
MD5 28f15e1d4ef152841e537eeff9968fad
SHA1 5b5d90a08a6437ffd10d8b3846f9427f1e7b5d46
SHA512 de1cd1505ce4f69c62826ead412edcdf890e6484c6e6d803ae5680da00ed03ec6b2a5b6b4345f75b51fbd54e783e6fffcf73e325918aadb0db711cd398652d74
TLSH
T1B671D62B065200D0DF691EF3E1E24641FD728CABFB13CE630064E47DB70BBA845A0785
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0947da52-4084-43e7-9fa6-9193228e90cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0947da52-4084-43e7-9fa6-9193228e90cb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 694B
SHA256 f9b50cfa33ca0740c8b0a81441be332a5d44a51a4f3be61027e5113accc6e6ee
MD5 6f6e4a73ec8c192f84942a686419e976
SHA1 2636276b831dfb4a236238eb2d4d86d958c5c17f
SHA512 fc588fcbcdfa976a64385d1de49a9035830ee9b6ba9398df92cc6880eda4c0fc4452bd9ac8a5ede20d020b3464ab7a16f2b1ba5fd1d76daee6c4041e38ddac50
TLSH
T122017BB383D585AE895112F05A28BE2BCE2D0502821C7D1596D4FF2793E3069E00299B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dadc6d4c48c8aa2bd1fa97811a76b535bc328559f45fd8dcc84e014d6640b532
MD5 1ba91e2b2d359311de66c2eb56f2ba1e
SHA1 19bc48d73530114bd3a981d7a7eaf82ba4f9df42
SHA512 675cdb37609256390b642985c7622580ac04a09b75ae613bdd69d90f3594b1250105499f9e600af3abf506866c7a92941a74eed6b825e6441a916400413456a9
SSDEEP 192:sxZc/yM/jK1Ml8MWr/fCs0yMIdpdgHW6+WNGY4w1iiYIgrJ:sxZc5ur/fCs0yViHbGp9
TLSH
T15E42D711AA346977CCEBD209FA557F53D6F90572A2901E44A9FCCA1C04E6AED2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ddfee47863470d375b45455bda3a3977ee84898479344838bb17edc7840563b9
MD5 258e18baa427f70fb1cdb5f249bfaf9c
SHA1 5cbc2860df3d9faa97538b5c6a87a891960baecd
SHA512 28dcad4ea9e294b92e0ce295d4577e9cc9319b8b0d623602f4c29ed04271c5a77df2f91b82b361a326879cbbc573c13f5cc9487039fb80694b0b2372c976edcf
SSDEEP 192:sxZc/yM/jK1Ml8UQ1Wr/fCsKGMIdpHgHW6+WNGY4o6iiYIg5TSJ:sxZc7qcr/fCsKGVAHbGuo
TLSH
T14352E811AA386977CCEBD20DFA517F53D6F9157292901E44A9FCCA1C04F6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f35b0b0b664206a0c2dfa264dd9222439e20060e477a2dff9f68aba76eb06bea
MD5 9208e79c147f8da15d7cfd0d788f63bf
SHA1 a01fa774bf6350bba222fcf9cf7c14524ed5468e
SHA512 7f99ba2e25e141847355387fee3fc345a3aa2760255cc0a1df1c9d69feee6976286b566cea9f47a6cd63fc91c7ab6924d27789c1d8d77d0fceb9b508aa904bf5
SSDEEP 192:sxZc/yM/jK1Ml8MWr/fCsKGMIdpdgHW6+WNGY4RliiYIg5TSJ:sxZc7ur/fCsKGViHbGoo
TLSH
T1F842D711AA386977CCEBD209FA517F53D6F9057292901E44A9FCCA1C05F6AED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4c248fd65ecc016f6d3df11433cfa4c4dc2da9fa1f24a38434afca0678f898d9
MD5 7c02271387c50c75691cc2861bc1c156
SHA1 d2b4bc01b45b81f37af2c5819540c27a71ca0a59
SHA512 783b4fe52dbce38900a73e30e92e6bb1383c0b9f2519e1d8cd3c09def7cd625d287f96fad86d27d165bdc894645b0b4dfebdd8dbb492d511cf29821e68158e97
SSDEEP 768:Ie8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdLroHykETUn/:Ie8iJPNWvx76ru1jahALocd4HwU/
TLSH
T1D9D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B948D5447FA884C03CB6EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 309563485c8c70b385fc41067084054578bbf8b657398cdba9d7cc4966af11ca
MD5 d07a72cef5c7b805e635a768b5ff2c89
SHA1 e5c0937104db67b9fb98bd993518e87961a42c66
SHA512 bec976f9b5f66f81a6b152111826f24195cdae2493951059a061d05e1cc73a2156d7cc04d95c385eed2b4b208efb444227100f2990ec77ca9af2d2c98944ff82
SSDEEP 48:KukZiGkySx3mnsIUuxKp4xExFMh6PuSSyVfIhKs4cY0ILKBqkbypz:KIFGKWUqufiKs4H0gKBqiaz
TLSH
T16391271230BB16823DBD2909D6E4971B174272A370D5E52B7FE804B64D6BE288CFC5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5969ad.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5969ad.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f7be81be9e7e4180edd5fd4a1c30eeacffa4b15a4cf9e164de0fab9d6a1501c0
MD5 a4c1ec78ef5761fbe94dec7935a57f91
SHA1 cc637231aab3372d9c2a10511e6809945837ff2c
SHA512 8709bcded5c3362ae2d3e5339d140eaa95cf0b764abcf4127255dffc283b767596fceb0307f946b7f7dffef76777899b325203722d4ef41b40d61c720dc34ee5
SSDEEP 192:uom+xasuheOwQxMGsNSIQo0KkW0mbZQmiU1Oks4k03YqLaJNEALImqGHAqva+4LP:OZcIhsNSIHOWJbhjkcAi9gAsa+VYRnok
TLSH
T14C827D7128786DBA98F3E646F94737174FB4906797CC2F94C5ED6B1C04EA29C030B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 7bc32f2e12f185a9d634e7dea9f8a1cd33d69f6b2c95ee16937903b9c1c89f54
MD5 98962c64a45d0c19e5d25027b0a3855c
SHA1 f7ab888443faf66ffc2f0493d20b41f6ab760305
SHA512 c62a23fcd51db30c1dec600bd8935970d5f7c6e75fe0455d134d17f7e0732b1d9a5cc8e92f919c74f4b1fc2a948d942b91e131d18c064298828deac52bb2b14d
SSDEEP 384:riFiZcIusNq8TUNTUlIlNHOWJbhjkcAiUgAsa+VYRnok:GFQujwgHvz/UgAhg+L
TLSH
T122A26C73586899BF9CF79B85F94B37138EB44067C6C9AB94D6D85A0C00EB2DC030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0ad1f219a905436845e46d80a22c65303380a2baca78e519d71aa554b37a02c4
MD5 894da8525e7af25c00fda5e253ca540f
SHA1 ebf9e5c9a245ed5d6c49d42cbf1e188204338268
SHA512 607478db853fc84031077922dde10a88423b5aeed79fbbd3cc1d8a8c2eb0c219b2c2564a5295b1487e40586eff352bcf6d409f986f0035808428cbce8fa0d45b
SSDEEP 192:ulm+xasuheOwQxMGsNSNQo0KkW0mbZQmiU1Oks4k03YqLaJNEALImqGHAqva+4LP:bZcIhsNSNHOWJbhjkcAi9gAsa+VYRnok
TLSH
T1D5828D7128786DBA98F3E646F94737174FB4906797CC2F9485ED6B1C04EA69C030B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a7df2c0393a8abc28d8b5983e18ea3d516c4b7c39e6667f130cca27acffe61bb
MD5 d4a5eafbdad21e85418e1aa04f3de6e8
SHA1 ee7db42a2ac4717cd5a9654aaab04f848ecb9249
SHA512 16c398f69e22e6cd9d6dc71ac93f3975e242f1b9d435ca873d82d0db78ee67fe4cfea493fd50cbdb6c99717dd3e0249ab4761f46b53652b9c5272308e9081d7f
SSDEEP 96:ZqONkhQsjpfmUTmDK5ih/cIPURHl8h4otop5/5D3BhPwivh50xy0SFYKUAxL+YLX:gON56kDfQmiUyRxZ903YqLMQilFU6
TLSH
T1D902E83568786CBB8EE3AE06F48737275FE5112BEAD52F85DAE81A1C04D725C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fa31c6af135e29b49f1363dd251bf8b57f6332998ffae2d13407142dabaca391
MD5 6c8aeb2b6e2b2d584d8af49875fc7270
SHA1 f21079bbad1b64205070b49af249d938a50b3a0d
SHA512 8dfa1cf63bd588a2192981b3812c590770b392534c70b5f6a53299ef9fe94b621f0ed75b784faa9300f784135dcdf3f808084e91f047254834aceb892e65dc21
SSDEEP 192:NONj6kdQmiUypxx903YqLaJNEucRmqGHAU6:NONj6y0x9cAi7gAU6
TLSH
T1C712293168787C6B9DE3A942F48736135EA4912BEBC96F81D5DC2A1C05EF29C530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5322d4b072b49a1f62ba683c9f9266d644e15a6bda2a3107f18e8149c0170a72
MD5 2deee0288870994b2d6bf2b3cc4eeb9a
SHA1 e839e65d2e8298d7ed197a3c4ad5bc6655ad516b
SHA512 4247761d6bbb7c580e9c9e9d2b60e98996fe3cf06d13281b0758a564cfcdba128c4e13f45f6dae9db99b2413c0979d6b7fb84eff844907b9a8ea2ec188a29399
TLSH
T159410959BAFE1118B3B76F2AABF7A86D447F79632E06D45E00110D4F0667A00C871B37
MD5 SHA1 SHA512 TLSH

Submit Download