969488e116dbaff9e49be825ce69dedfe3812a9f7aa0d72ed72d16e0f178a50c

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
popup.html
Size 3KB
Sample260910-pc1ycabq6x
SHA256 969488e116dbaff9e49be825ce69dedfe3812a9f7aa0d72ed72d16e0f178a50c
MD5 4a8c5202f8b2eee20cb76dec03e114ff
SHA1 e1a01f008599d834ad4550a3bd1aecaa38995b54
SHA512 f0120c743b6d56b592cb537b9eebdffe55d9a493214a2edf18073b9818ab037e0ae594f7f1a1babb6f3e2e236351c513160dc773483e38b7d0a6512f5494a6b9
TLSH
T1FE81B02AD644114678B792749B6347B7F9D44603C243822836FC72A24F76D18EA67F48
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3320	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335159326775904"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{9113C0EA-D3B0-42EF-A5C5-1503D8ECDBC3}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5080	msedge.exe
5080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe
3544	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3544 wrote to memory of 2596	3544	msedge.exe	85
PID 3544 wrote to memory of 3320	3544	msedge.exe	86
PID 3544 wrote to memory of 5116	3544	msedge.exe	87
PID 3544 wrote to memory of 5116	3544	msedge.exe	87
PID 3544 wrote to memory of 5116	3544	msedge.exe	87
PID 3544 wrote to memory of 1528	3544	msedge.exe	89
PID 3544 wrote to memory of 1528	3544	msedge.exe	89
PID 3544 wrote to memory of 4400	3544	msedge.exe	90
PID 3544 wrote to memory of 4128	3544	msedge.exe	91
PID 3544 wrote to memory of 4400	3544	msedge.exe	90
PID 3544 wrote to memory of 4400	3544	msedge.exe	90
PID 3544 wrote to memory of 4128	3544	msedge.exe	91
PID 3544 wrote to memory of 4128	3544	msedge.exe	91
PID 3544 wrote to memory of 3388	3544	msedge.exe	92
PID 3544 wrote to memory of 3388	3544	msedge.exe	92
PID 3544 wrote to memory of 3388	3544	msedge.exe	92
PID 3544 wrote to memory of 544	3544	msedge.exe	93
PID 3544 wrote to memory of 544	3544	msedge.exe	93
PID 3544 wrote to memory of 544	3544	msedge.exe	93
PID 3544 wrote to memory of 1664	3544	msedge.exe	97
PID 3544 wrote to memory of 4940	3544	msedge.exe	98
PID 3544 wrote to memory of 1664	3544	msedge.exe	97
PID 3544 wrote to memory of 4940	3544	msedge.exe	98
PID 3544 wrote to memory of 1904	3544	msedge.exe	100
PID 3544 wrote to memory of 4156	3544	msedge.exe	106
PID 3544 wrote to memory of 680	3544	msedge.exe	107
PID 3544 wrote to memory of 4360	3544	msedge.exe	108
PID 3544 wrote to memory of 4756	3544	msedge.exe	113
PID 3544 wrote to memory of 4756	3544	msedge.exe	113
PID 3544 wrote to memory of 5080	3544	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\popup.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffab253c188,0x7ffab253c194,0x7ffab253c1a0
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,15839580643166688133,6131001811201138160,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1872,i,8635760923559248867,3103077737635952570,262144 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,1573202621448835045,14814966864374903147,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,3478388203390922769,12935706821491758726,2097152 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,13430675152184168871,4538203725647745184,2097152 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,8913270447242964110,3173911927977258098,2097152 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,15734606980308751383,8578290279853300184,2097152 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,15557614158250029894,17313923369950327692,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,8843645742618321238,17207638405629694498,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,4102187977813541956,16856613648467791877,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,4102187977813541956,16856613648467791877,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,12188512925885170388,15101022048304207039,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,627029364784981170,11671753895789446223,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,4869119906907957198,3265436776415577017,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,3989375780260305323,4451821391295070998,524288 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,7948208942843615378,1219682453862660116,262144 --field-trial-handle=2292,i,9233526742523088691,15360388201463406962,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8586f1c4e45930601f3acb858c3b1784b0d42e7b42ee58f5aced81fb96e93b9c
MD5 11144159cbb9eadd41f25ce952e2acd0
SHA1 8ac1b33ba8e6e6e0b90309692273457c7f5a89b9
SHA512 32a2a001fa83335eea9c8ee31618cfdfea6af05bac1cef7d0467e26a5abd70030785e6eb74e8a746293954082a380462b5b2faa47ca422bbcdb272e0346b78a9
TLSH
T115612AE405068993EF2D8DB0D0B21272B4B0B7B28AC70FCD01501BBFE69A72A4D57718
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a2f2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a2f2.TMP
Size 3KB
SHA256 092c16d213121eabfb3ce903e1540ee08775a8c9f497d5f0d3b9bfbf501ab881
MD5 13d391b96a4fd7059570038e4434f959
SHA1 03a840054247df29adf0f81334a19d5053b2a66d
SHA512 0e62776b14d6026a5a3c68498776fb409fb436764bcafc00fdf683e7817a76d4c002f17ed71bb0b58de1af30588a833df55d37ca608d2e95f214c6382624ab86
TLSH
T1F0613BE405028993EF2D8DB0D0B11272B4B0B7B38AC70FCD01541BBFE69A7264D57718
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 b7a26b95a3c023a62b34ba22ec25b36c16ff3cc3f77a5c750acc18afd7a70226
MD5 5af21790e58afc9af16d23dcd7b84fcf
SHA1 1291b45fc335b332b0a22b5e7c5f6ee96cd9cb0d
SHA512 08279d23601e609b4237428c7988c96c9900667d8a8c0be605716399ee899d0931089bd11548eb0f3fd71ca0ce558e5fae459f41c8c66012f13d6e6c5eefbf24
TLSH
T13C117AF3C7D5856E891517F06A24AE2BDE2D0A06422C7C1989D4FF2BD3E3075E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 5540a3e52c311eb85d1f5ebf96d03f80e84ecb4a2d937dcdf6c339675dee9194
MD5 02db89fc44f6bc44febe2c05c1765a3b
SHA1 ad0e0f4041bf681f5ed9df94228651a7a7b919ca
SHA512 10d7c14cb37fcf46326a303d623ac8a5662d69aa5607b9b49050e4a663a25f4e42ca5f3327013bf0955d161a3febf997af083c0b769e02e4b497ed458b72b310
SSDEEP 192:sxZcRWyM/jK1Ml8MWH/fYsamNIdpdwHW6+WNGYLzBCybD5IgrJ:sxZcMuH/fYs7uGHbG6bDF9
TLSH
T12442F811AA346977CCDBD208FA55BF53D6F94472A6900D84A9FCCA1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ffa979566fcdd644cf62356816881c21f33c92f4811d5d89575ee790b9783a6f
MD5 660c9e8430289771c4f566142c28210e
SHA1 7aed8b85af72105336a6afe7c28e873a3e5e5003
SHA512 27cfde34a86ac1009978f97a5720d0696ea6ecbe03faf52fe09a0eecd02e8c1a35257be6caa9f79beb421e6f88b305d84a16cb1832824d990ad95b3ab970546d
SSDEEP 192:sxZcRWyM/jK1Ml8UQjWH/fYspmNIdpHwHW6+WNGYLyQ1ybD5Ig50J:sxZcMqCH/fYsEuQHbGfbDF6
TLSH
T1F052E711AA346977CCDBD20CBA41BF53E6F9447296540E84A9FCCA1C04E7BED621782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 68caccaba48e5a3570c11911c7dd3cdc8b51826d195961bfa1e45cd7a0b3c764
MD5 a17011c080d1da045fb864ba00dfc1a5
SHA1 5da08c95e1666bb6060712bf7735ff2e238dfd0b
SHA512 44a431cbe508c8f8687971b91c2e0947c2881b5d77796522c1064d6b5ddfe5a2b8d2b9da50ea1094eb4052cf3a08bd5b83be45e488d992e3e6631524158a3702
SSDEEP 768:11s6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNuroFvt1:11s6pD1WvxzWju1jahILIsNlRt1
TLSH
T12ED2FA3B680CCB7E4F841E5CEC2AAE967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 0b8d8903711a28c1e050e976c43ba071823ae2d8f81cc798cd71149ee6888fd6
MD5 5405f9bf60366d3d06e188ed18325967
SHA1 a0708421fc31ab75be19cf5d8b2d96e94d73c8ba
SHA512 d604c691e47c6349a85e92495471b19ffaf0f28f25c1fa41fd835defbcbcdc892ef5dbcc7ef75a169db7743180817920fb58925bab9d48e5d949f7f20fde0e70
SSDEEP 96:KUAAKtePW7iKEM+qCZ67g86wQx5cpszExKL4zaxviqREQSKkwKZiK8:iihRJ67g86wQvcpgE24zaBiqREQSn2
TLSH
T1AED1D41672BA13023D7E294893D4D7678AC272637014A42B3BAC04B6CD67E21DEFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09eafc42-0ab6-4edb-81ed-b2dde038a0c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\09eafc42-0ab6-4edb-81ed-b2dde038a0c2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 c97e085c5902ce8372343bb2b7e39690cfe072558e31ede81c6fef5498a6021c
MD5 c011863a913627cf881e94a81dcbb558
SHA1 f3aa469ac186d7fb384566323e561ac53a3167fd
SHA512 58ce560e50838a151871650af6e1f58a7c18d7515e8a2e46157da35e47fe4d8df83f2825f5cf6225e4a144332fd5a4c4b9e05eab7a476513a4bbedad4356ed95
SSDEEP 192:uSLsNndQNY30p7+3vsZQmiU1Yq0k4atb0gO2VogHF0SJrNBLMlqlFqva+4LcYLW2:LsNndz3dwOnba9xO7glzJroSsa+VYEGX
TLSH
T1D9623A317924AC769DB39645FA4B32139FB8816BDA892E98C1DD9F0D01DF29C2347C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 71fc082fd26713442c4cbec3c82ba6ddfc9238493bd89f52d350a8f4f4c56629
MD5 9b2ffbe9e12d955038ccd5c91f5e27e5
SHA1 0d49a533299b9d81539093bf3574fa9e43d91613
SHA512 da0167266f1142509d61f753d43a6c59c87602ea590f9e877fc63228fdcd46edc4df293afbd25bcbf0e1a94237e1fca3cd45ca5149189286475f9ae7fc916674
SSDEEP 384:IiFiZcISsN58TUNTUlIltqz3dwOnba9xO7glzJrzSsa+VYEG7o2:TFQSAwgejn+DO7g9hzShg1Id
TLSH
T105A26C725954DC7BADF79B85FA4B32138FB880B7C989AA94D2D99E0D009B2DC1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0be7e48cca6f5bc75337cbb1ad530bb9cb3d20bd14b385416214b97aae8d3066
MD5 ad46c68158f3a26c345a6591f71e222f
SHA1 41e2b2667075d07e83f295834d6ea496f59613e2
SHA512 c2b7a0cea5e7fb701956ee8fad37340ddb8b1ef335bbba89ab77d652ee896604f00cefc4fff01762e206d5b0595a50589b863ec471a879329b1b0fc23937d87e
SSDEEP 192:qONx6O7+3hQmiUyxDGttb0gO2VoIgGNmU6:qONx61eGt9xO7+sU6
TLSH
T1D502D7356C686CB79EF2AD45F98727239FA8103BE9962F40D6E85E1C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 a6a86949df5a5feae60b7672667985f9607255e2066cea9551755396ba5ad094
MD5 936c30e374bc5eece58af21260fab692
SHA1 4fac649a85a1641075c9b84c4d085bb087ae42ee
SHA512 e115742a2d2e066770f8e9fd584563997804496a7252d1506b7c637739b01d9156defc9b41ca5e91526577b5337fbba666746ce5680191f6647d213f5cc3e207
SSDEEP 384:aZcIhsNntqz3dwOnba9xO7glzJroSsa+VYEG7o2:YhPjn+DO7g9hoShg1Id
TLSH
T102827D716964AC7698F3E245FA8736178FB88077DAC96E84C1ED9F0D00DB6A81307C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 558933055a842904c6c5d0e95307357fcfa78fa77b3f51192f1b16dc0073bd6a
MD5 007489c5d9138cf5a873544e44c4b801
SHA1 9c8ec632743403267e4ff938a02066d88724cd07
SHA512 0e10247c82cf00dd10d38e7a5a4f3dde15b507842e5098ab8223e5f5dc1962d7377e296ae1cc5bc11c1f35565e9c2e606e22942fe6b676fd442c3547c8d3a964
SSDEEP 192:1ONi6O7+3FQmiUyitD5ttb0gO2VogHF0SJrNYcNlqlFU6:1ONi69X95t9xO7glzJr/SU6
TLSH
T1141209317868AC775DE3A545F98736178FA9412BEE8A6F80D1EC1E1C01EF66C234AC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 72124bc24bf7fb0ad2440bd73e657e615f8c37541e38611878a354677da5d80c
MD5 356263936ed9ee72ad6ea3b06f71db4b
SHA1 19fc4cafeb9a19af6ba924e3282b166b7f33c1a4
SHA512 b597b8e24adcfdb7f8c5dce83303809494815c55c16d4bd401793b299b63133d79634ed7e24460b27345a21c343856076f8461a69f566eb460d5a83e343a9143
TLSH
T10141FA5CB6EA1148B3B77E59AFF6A86D487FB8732E4AD49D00510D4F0626B40C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download