e57ce25f12c50efb77b587fde7ebf483d5d8b436e7e5f0c30437d53702cfc5af

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 00:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
130483924.html
Size 36KB
Sample260910-ak7crsbr3v
SHA256 e57ce25f12c50efb77b587fde7ebf483d5d8b436e7e5f0c30437d53702cfc5af
MD5 cd5bd9550645ec45b77f6d96933e6bb3
SHA1 0d398c573920aa808eebf665776aab793ddf7747
SHA512 9fa4a6739e12f3ee5acbdbf22a4710af3b31f71131d1cc6c15d2c324c547a87dfd3772cf7774191898f6e7576e24bc0c353f39878ac6e053fe144748d46ea98c
SSDEEP 768:SDibMxbHPbH+h04Tk9VPq8VMzNm8ch4pGuX8CJvVMK0iZuGOnCzq8x3roBsG2WUF:TbMx7bH+K37PPVMzNmOGKcqxZ8gmtd27
TLSH
T121F225C076C1E41716CD1E73BF4EAAE9C57A6CA36484B647C2A4B68C28BA117C1F4DF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
924	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134334732105570035"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{ED44DE5C-6CC8-4E63-B40D-F0FBF68BB75E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe
2544	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2544 wrote to memory of 3272	2544	msedge.exe	86
PID 2544 wrote to memory of 924	2544	msedge.exe	87
PID 2544 wrote to memory of 744	2544	msedge.exe	88
PID 2544 wrote to memory of 744	2544	msedge.exe	88
PID 2544 wrote to memory of 744	2544	msedge.exe	88
PID 2544 wrote to memory of 1716	2544	msedge.exe	89
PID 2544 wrote to memory of 1716	2544	msedge.exe	89
PID 2544 wrote to memory of 3368	2544	msedge.exe	91
PID 2544 wrote to memory of 2928	2544	msedge.exe	92
PID 2544 wrote to memory of 3368	2544	msedge.exe	91
PID 2544 wrote to memory of 3368	2544	msedge.exe	91
PID 2544 wrote to memory of 2928	2544	msedge.exe	92
PID 2544 wrote to memory of 2928	2544	msedge.exe	92
PID 2544 wrote to memory of 3388	2544	msedge.exe	93
PID 2544 wrote to memory of 3388	2544	msedge.exe	93
PID 2544 wrote to memory of 3388	2544	msedge.exe	93
PID 2544 wrote to memory of 4876	2544	msedge.exe	94
PID 2544 wrote to memory of 4876	2544	msedge.exe	94
PID 2544 wrote to memory of 4876	2544	msedge.exe	94
PID 2544 wrote to memory of 5100	2544	msedge.exe	98
PID 2544 wrote to memory of 5100	2544	msedge.exe	98
PID 2544 wrote to memory of 2208	2544	msedge.exe	99
PID 2544 wrote to memory of 2208	2544	msedge.exe	99
PID 2544 wrote to memory of 4308	2544	msedge.exe	101
PID 2544 wrote to memory of 2244	2544	msedge.exe	105
PID 2544 wrote to memory of 2100	2544	msedge.exe	106
PID 2544 wrote to memory of 3224	2544	msedge.exe	107
PID 2544 wrote to memory of 4232	2544	msedge.exe	114
PID 2544 wrote to memory of 4232	2544	msedge.exe	114
PID 2544 wrote to memory of 3928	2544	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\130483924.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffb6119c188,0x7ffb6119c194,0x7ffb6119c1a0
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,13884571884255835860,10957102150296342678,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - System Time Discovery
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,922786222264900648,8327069504923991464,262144 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,954594658456162932,7485882646459336855,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,10932855583458464811,3512796529495904623,2097152 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,13975283169688388239,8796349542447771679,2097152 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,10128466054120089222,6170555205683853075,2097152 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,16907886763133314019,12524097493610615344,2097152 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:2
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,1660955254576287513,7295118951670255880,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,14254690530637988490,11344862236915299979,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,15965369738126277597,9154663826093061637,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,15965369738126277597,9154663826093061637,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,1462094996623734460,4446254926464435740,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,3660589933667843405,14390540339205087071,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,6517911089415134799,11866859426998712538,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,14828571833860278707,9374849666810294191,524288 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:8
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5784,i,10117931957430457020,7559899901989860797,262144 --field-trial-handle=2276,i,11523345960142057024,5452565828423565814,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33216cc8094343b1e673d6d0ce51864cf882b00961e3411c47b6a0cf1488a291
MD5 67f6e997d9180458e1a8c1eb8facdbb8
SHA1 ba71d9acfdbf5ad19e98c71c4ff3936488e5302e
SHA512 cc39dc134ebb79f6ba88453b88057a692c89209ccaada0ea03ca92512d41d4b9cea1179950cf85647315f4dd3a45c3553a403d01ea2891cbdb3b8df87cb294a1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T16AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 513d69adb46cdf7d5d22a360d68effcc60fc442d132a17047ef6e5f37dd01857
MD5 7cd884b72a60fee47053a12d768a05de
SHA1 51f77c4649008441f0dc0615d45257b0ccecc299
SHA512 3bfd83119bf7f5ec4cda7812c0a9ef64d442d31e890a6252708aa863d47722ceef567901f7e4b4ed32a9203244742f19c74bf0489a1cd04097ebf05ff0697a5f
TLSH
T10A615D1802C24972EFBE1172C1F196153EF3599F8EDB8E1247E4C4FE6039B5EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b09e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b09e.TMP
Size 3KB
SHA256 538057afb5229c86f9addbbb59a2618f3c0f5c014be32629a1fbd6ff0fbef9bd
MD5 81943ebba1651d7ec680e8c18989d3a5
SHA1 1f62adc4ba379021e2b2591205ee4dbc93383312
SHA512 7c949943484394435f216a7e112ec1711841ae7d3d007fc4292211e42824b429d3d19c5003f9892d6cb4cb6f94fed11f10cf704d06432271097b6e0a82d6a95f
TLSH
T141613B1802C24972EFBE1072C0F196193EF34A9F8EDB8E1247E4C4FD6039B1EA9E6004
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 6f96e13b93bd0f2a3f58406aeab044767f802785e4d2c5a034af0e8537fcd67f
MD5 d582f7c55a922ffc1036b53bcac027b3
SHA1 0b6dbefbf4b12b64722ed8e299a6b63c0a5b11a9
SHA512 b8eea1936dfa102dc708f2eb9bd753fdeafa75dda2278617f57810e6c8a0e540c85706cf957cf1b021b9bb917cc995b2532b3a90690ef60fa8f69ba0642def6e
TLSH
T1491190F3C3E5856E891156F05A24AE2BCE1D0505822C7D19C5D4FF27D3E3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 289e53625714937ba4058d50ffe46e6f044d38d26a5e838a4f6d19a8c9d1b40d
MD5 18a8669d73f7358032d33432dad18707
SHA1 5ca8b3bf73aed6a619f2ebaa617d7206b1fd3fd3
SHA512 9b98825b37e3a26e3bebe5fad09361920ed319a57774b4533d4161ac925a395813fde6a17ccb1a9e76f3fd8f04a3fd67f2e78121db9ccd18a1829aaa25e8d03a
SSDEEP 192:sxZERjyM/jK1Ml8MWY/fos8kIdpdNHW6+WNGYwKD+PIgrJ:sxZEbuY/fos89PHbGN9
TLSH
T1DE42E801AA34697BCCDBD309BA51BF53D6F9457292900D84A9FCCA1C05E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6883afa50e15ede0ccc00e5c339a215384ed92874d105e5722a386c230d2f119
MD5 2771fddff38fd4e911db281d802126da
SHA1 962ce85984f1f134733ccb1b2c97cbd5a5ea9cae
SHA512 57ce60642ac80e83a2a1b5c5385c71c6a162e63538aba16b9a0231bce949ff8a9f4c90212250c819dc2062965e9cd78fe4857de8834109a2338991c9b56a5aae
SSDEEP 192:sxZERjyM/jK1Ml8UQuWY/fosGkIdpHNHW6+WNGYw1MQpPIg5tJ:sxZE1q5Y/fosG9tHbGxR
TLSH
T1BB52E711AA345977CCDBD209BA51BF53D6F5457292900E84A9FCCA1C05F6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1369ceb88e7e83952e0838fa67efcca77ad86b88fc404b242d6fa5e73b911f86
MD5 20444ed4ac6d4f054ebc4439e032903c
SHA1 0dac800186ed5372802eff5f997f2cea8f4f9b1f
SHA512 1c0e72e8f8a2ba74b1401ba18c0b3de7bd561515cb55b56fac1eba980d9589a3fd3ddf3e09348759d00254a2a5e14aa33b0bcc9f3be283d487739d012fd629d8
SSDEEP 192:sxZERjyM/jK1Ml8MWY/fosGkIdpdNHW6+WNGYwXM7+PIg5tJ:sxZE1uY/fosG9PHbGRR
TLSH
T17342D811AA346977CCDBD309BA517F53D6F5457292500E84AAFCCA1C05F6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 303561c99ddf7bf1a34b0d63188ea2241a4f5f53a2aad32fd808f01d543b7c56
MD5 b8774ce1d21c7c7901f50f5f27bc92b1
SHA1 ee4730fc0db5f5a68dde57c7d03ad45720870ed4
SHA512 777c6f69f0f4b31ca6783b8e73e74447ef751fe508e2155d0508fd15199b2469b9b46b92fadfcc713dc060fa01143230f0a7ec241591561b7e8b2847430423ee
SSDEEP 768:gl4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d/rohHcSMa8:gl4jeXmWvmKLEu1jacPLZQdsqP
TLSH
T19ED2093B280CCF7E4F844E5CEC26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f136b9a8ac7f79b01b66df4fee9e066befb86d6afc31f24c315a7e00c127e668
MD5 3e6a3807388caa78552ac5793b07fbeb
SHA1 06fc096287fa7af9b01545427bb250c375c1c416
SHA512 f29c4f510b4b3c0fc3b003517999ae338add266878350daa34fcfe85f194ca274a5d5438ae4c63be33956abaf774e571d51e7b4c06eeba3f3b56d8f71fd29105
SSDEEP 24:KdhfsX+a7djP34HL+uIjL3KighaV31EBnSmZMM8fcyXYsfj45a2dOuq4GC+ZIjk8:KceI3KLKIjy9lI5KGUcKvIBK4wkfyq
TLSH
T17F914555317B52013D3E260C9294CB6BAA81B1733064E92B7FAC04B6DE26E14DDFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 f15b250d56733bd3f93ef2cebeb7f37e6098ebbb8de47426e8e27f1627d7367e
MD5 b713f9d12fd4d024242c5d86683a9ce4
SHA1 723a998bcf485c9483be670beab61f6b873f90b5
SHA512 29104bd8ea6272a801264ae5cca456e4bfbdbf66ca631c97c1048fa1c3bb55b8560f937b13c2b6ce789664f8cab5497d8e86d9668c8b1c80861e65ee1fee4211
TLSH
T11E812449317B52013D3E260C9294CB6B9A81B1B37064E92B7F6C08B6DE26E14DDFD8DD
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594a7c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594a7c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 61e49aaf570da94c698c69d11f79c4346cd8ef252cc05f6297e7e6f6ad6d1b20
MD5 ed46a5cfadd5f4bd67438c8e5cac8848
SHA1 4f0b198d579ce6a96554154ccef108373682fe34
SHA512 e40847c779218a0fd67d1cf8d8e49e8ea0df6a1ceca5796463375da7360f45c838b0dfea29f9127d1b364b5529a9471ba5c4fb1efcc37c85fd82ed232c8741d2
SSDEEP 384:RZcIhsNZuwE1PR1f+j8IMX/+2dFOsa+VYuoW:5hn1j/l3Ohgl1
TLSH
T1CB828E325D689C7A59F3E786F48B32238EF8412796C96F84D6ED9F1D00DA69C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e64e231cf731da7f070e4f82c82a8305dd0be12f0058c09aad092a2673c6ff7e
MD5 2aa7f0b3b8478ac54576090d457e1940
SHA1 46a34e5e5f85ce2adc8d5c442e05af678bf50177
SHA512 c40145a7ee1342bb87d3ee1a88bee333af8e381332e7b0dcfb7a75a9ab6804144dc219fcf975e3601dee8686d900a85a628da3315f8f03ce7b8981ec345d5e31
SSDEEP 192:EONJ6hZ0QmiUyxrxpc/+jVRjzorIz5wOZZRAhU6:EONJ6omNpu+j8IK2ghU6
TLSH
T18402DA3568687CBB8EE2AE45F48737139FE5116BE9956F84DAF81B1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8578a41761f486140939514db99fe3f77a1e9e2d61fc293a2ddad9bad72dff52
MD5 f789631c19a6fe5d3c36b34b899a9c88
SHA1 5980413d534b514483c681333bbc492d3ea64301
SHA512 6d7cd6f98156b1c3e61af0775e6e6275387edda8f88723170110580023762d373bbfb5c6647cb3b2f62f2458c099fa69380f2e312643d5673a06eeb6e0693b30
SSDEEP 192:3ONE6hZyQmiUyxlxHc/+jVRjzorIMXTr+265cOqZtqpU6:3ONE6KmXHu+j8IMX/+2V9OU6
TLSH
T14612FC366468AC674DD2A795F48732139EE55127EAC6BFC0D6EC1F1D00DB66C234AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 851397000fd4f056cb5dad3d8f2adc350e19942cf242f343d1fb7f7fce6fee1d
MD5 3151ef2f45bb28abba41cde428c969b5
SHA1 c32acae3c7e86fec0cf6a22bed0b5baac487135b
SHA512 695805de0803f70d8697c78d7742a40179e4aedcf1ce5dab556c4710cb2779f08b0969c3366d1800469b3915e0a4d4d1774f6b4ecfa51bab7dea68141f270db1
SSDEEP 384:lZcIhsNZ5wE1PR1f+j8IMX/+2dFOsa+VYuoW:dhY1j/l3Ohgl1
TLSH
T16D828E325D689C7A59F3E786F48B32238EF8412796C96F84D6ED9F1D00DA69C1307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 eea59df1567c29fd5bf57d5bf90a9318565379841a1fb5ff1dd9543bd136a627
MD5 cf35d85e85331bcd52336898c4003983
SHA1 39a81c0e3dd6fc81097d4a2d22cd5b872e100586
SHA512 b7f018abe1ce3bab882ce6ba0934c9636c611c680c9ac967ab53efcbd21f224c59ca39ba4ea53d44c5cfa49ea3c89969d5f2cecb9d1161e837d7f4de3bae86f6
SSDEEP 384:0iFiZcI9sN78TUNTUlIl5wE1PR1f+j8IMX/+2pFOsa+VYuoW:PFQ9qwgl1j/lDOhgl1
TLSH
T147A25C735D98987B9DF29B85F94B32138EF44167D5D6AA90D3DC9F0D009A6DC1307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41b1a8b8-8c37-4605-a68a-c4a9b8102e45.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\41b1a8b8-8c37-4605-a68a-c4a9b8102e45.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 62e096c66faf9edaf97eab48bf380bd2984e6331e0fb6287ff56bd2dd54c9ba2
MD5 3cd2e598100df8b7d8997381b2487a16
SHA1 4a1221bec7dbfa79b5e8265bb6f413df78ac2348
SHA512 52ec62473db2712e3581709f583937d4f85e46dd2e9a238c518e22b7355601823b76bd0d65b0e03dd3f852c4f469ea624bf59f774197a0b616d9aadecd960991
TLSH
T1A3412C5CBAF91148B3B76E5AABF2646C887FBC772E06D55D00110D4E0623B40C872B37
MD5 SHA1 SHA512 TLSH

Submit Download