80e7163cc316212c3f17aafba992bebd38f538236c35a15b0867394a43d2a43c

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2.html
Size 12KB
Sample260910-prgg9atbmf
SHA256 80e7163cc316212c3f17aafba992bebd38f538236c35a15b0867394a43d2a43c
MD5 040cadc50fc0788aabfa31ddd5423fe6
SHA1 a92814404dcd9195e72023febf20e114141e7812
SHA512 564b3d3c6f0c4b01cb90c1398370a1b7bc6d606e0a4cbd43a530c7516197ecbb7d2bf4f4f50c2490c30259aee97f50c064092f931c2b1823d56bbc55ec432b85
SSDEEP 192:ZVVDXm6YrWMcjkmbzg1hmlZP6Fq9FciyJZhdKuhBFcExDr:ZVBDgjJEuHX/
TLSH
T1ED42961216F31072645385EC7BE7CA4A6AA9C103C209CA583EDC67889FCE9D5DD637EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335172311452736"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{655B16B0-20D2-4244-9015-26D6256819C6}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3800	msedge.exe
3800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe
1700	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1700 wrote to memory of 4740	1700	msedge.exe	86
PID 1700 wrote to memory of 4644	1700	msedge.exe	87
PID 1700 wrote to memory of 1740	1700	msedge.exe	88
PID 1700 wrote to memory of 1740	1700	msedge.exe	88
PID 1700 wrote to memory of 1740	1700	msedge.exe	88
PID 1700 wrote to memory of 5004	1700	msedge.exe	90
PID 1700 wrote to memory of 5004	1700	msedge.exe	90
PID 1700 wrote to memory of 836	1700	msedge.exe	91
PID 1700 wrote to memory of 836	1700	msedge.exe	91
PID 1700 wrote to memory of 3208	1700	msedge.exe	92
PID 1700 wrote to memory of 836	1700	msedge.exe	91
PID 1700 wrote to memory of 3208	1700	msedge.exe	92
PID 1700 wrote to memory of 3208	1700	msedge.exe	92
PID 1700 wrote to memory of 3104	1700	msedge.exe	93
PID 1700 wrote to memory of 4188	1700	msedge.exe	94
PID 1700 wrote to memory of 3104	1700	msedge.exe	93
PID 1700 wrote to memory of 3104	1700	msedge.exe	93
PID 1700 wrote to memory of 4188	1700	msedge.exe	94
PID 1700 wrote to memory of 4188	1700	msedge.exe	94
PID 1700 wrote to memory of 2568	1700	msedge.exe	100
PID 1700 wrote to memory of 2188	1700	msedge.exe	101
PID 1700 wrote to memory of 2568	1700	msedge.exe	100
PID 1700 wrote to memory of 2188	1700	msedge.exe	101
PID 1700 wrote to memory of 4324	1700	msedge.exe	103
PID 1700 wrote to memory of 836	1700	msedge.exe	110
PID 1700 wrote to memory of 2836	1700	msedge.exe	111
PID 1700 wrote to memory of 3016	1700	msedge.exe	112
PID 1700 wrote to memory of 116	1700	msedge.exe	113
PID 1700 wrote to memory of 116	1700	msedge.exe	113
PID 1700 wrote to memory of 4228	1700	msedge.exe	115
PID 1700 wrote to memory of 4228	1700	msedge.exe	115
PID 1700 wrote to memory of 3800	1700	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x234,0x7fff4d27c188,0x7fff4d27c194,0x7fff4d27c1a0
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,12596347133561942814,603121603571629155,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,3443525690857766209,15952378195643715775,262144 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,8778444192813500784,14479536426030553532,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,5511353308664008859,6716994191671527533,2097152 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,3083209002316640629,12513474086911712795,2097152 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,15355193029076718569,542608261406532551,2097152 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,14984504803169121243,5121395869121852708,2097152 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,11758059688261803285,5728874410407979767,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2096005481507426158,18222737460607617429,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,8892790179078921140,9110335059599440655,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,8892790179078921140,9110335059599440655,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,2032937198076330864,9489356914260269555,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,6765840148652269678,1005900240600854535,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,177735220234870029,9690382105686369318,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,2857240127259823857,6623459391247454035,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=756,i,17133321932645720063,11750371649905076469,524288 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6180,i,10579985208097747515,11202038636903539246,262144 --field-trial-handle=2252,i,16573808383875836582,764213952559501038,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3800

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ebd896a68bbf2684b727b1e712c79ffb7abf9d3ed8d991b2d9777880701d5786
MD5 f1251fa7622f5acebe6157dccd44ab1e
SHA1 596f05fce8314d840c2a19fcf124ab22d75f9c57
SHA512 7c8b145b4644af2fe09bd3b45e40d9dd2b9c4ae5b78c9b38b02819a4700aef6d23fcd0c6088c6cf3e1f84b1987daa5a370c7bf7736948704e849f0aee8354d6f
TLSH
T17F719158126BCA8AD7200331E4E33174FCF28FA90EDFFE8511815BBE19D0F6D612A408
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fb91.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fb91.TMP
Size 3KB
SHA256 61ef01ce88e5770bb3776e46d93e968d18477fbbfe4c67d944e8ea924306c83d
MD5 08e21f26218b5a7502660a37d0d92115
SHA1 9f9eba278382fd0047b3359c1c56c3561be4ade7
SHA512 69d7d8570a2c147d7b5801b1334221f08e8ec8e08fcfa679c532dd2f3f28b34af3e2b27184562f70d326c5c9e1edaaff44b670e8efe1b2c71a8dee722f5e205e
TLSH
T1D4719118126BC98AD7201331E4E33274FCF28FA90EDFFE8511855BBE19D0F2D612A008
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 9c44f45ed2a1451d7b4a27bb36e1dab526ba3b89c72add976eb31c4141a9873a
MD5 db7a512b2fedae82ae95bfa66ccf2d72
SHA1 e748f1fa4e56a75fd1f46acaf1a8a8dc587ee250
SHA512 0a17bcd881db72733ab4c827378395c4cdfe010893456d4cd0406a15c046462fb1caa36840706763e2256028e6a3e9a86d62dc40af8832f293b5286166312a5b
TLSH
T16E11BAF3C3D585AE8D4156F06A24AE2BCE2D0A06831C3C1989D4EF2B93E3475E10259B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4bd2e5add1d85f2e06e15806feb048eecfb3734f28b77b4ed8c5020d2e81091e
MD5 8915df6ae339d1d04d74b1df79176f0c
SHA1 14c44ed76b1912da1be2131941495af0b6a123bc
SHA512 6a7d240a274f3adff973235ed7860c73a8c4d3863624a2cc65293722ccbdc0a6007ff5718a7605a6d7dff13fad9bf75720ea9ec69eda7f38ab86298463a6418b
SSDEEP 192:sxZnRnyM/jK1Ml8MWL/fMspfiIdpdjHW6+WNGYwKbUWIgrJ:sxZn1uL/fMspfLFHbGc9
TLSH
T17D42E811AB34A97BCCDBD20CBA51BF53D6F9547292940D44AAFCCA1C05E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ffccfebaebcf65e0ee802bed6390c9cb945b1be31ad6c937c7ab97f7dd33307b
MD5 447c675e6f64676e0522c8c8e24f85d5
SHA1 bf669628b4c3eff2bd51c486674ac63dfafcce1f
SHA512 229fe43cceecd31bec0d8813be38a989791c24af63fc50512f19a9091c36533b7f0bf26620fdd951d48e33b7a9b359e95777f0467763fae37cf0513e9db2df63
SSDEEP 192:sxZnRnyM/jK1Ml8UQbWL/fMsUbiIdpHjHW6+WNGYwaIUWIg5AJ:sxZn1q6L/fMsUbLDHbGfK
TLSH
T16D52D611AA34997BCCDBD20CBA41BF53D6F9547296940E44AAFCCA1C05E7BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 80557c2816007d1b753e8abf1bd1dba8cea636e736ed4ca603fc5052415e3e23
MD5 d10fc1245b3f9179ef7ba3ac210b047c
SHA1 fb19f14aaaf19f11ab50b3e0d4a8949b44669ca8
SHA512 be3399cd57c7d916f4bf2a19a1a7d383dd6068ba3b6ba37002a40d5b4e728105fd7d2e24a31d3588650541d212a921f434cb5069600430b95c9473b3f56a8130
SSDEEP 768:tS4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dWroh1c4aK:tS4jeXmWvmKLEu1jacPLZQdtI+
TLSH
T1FED2FA3B280CCF7E4F844E5CED26AE976ED801CB6A584D5447FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5887e192697475214ce9920978775e68e9ea70adb21af140339e2c45bfadba0e
MD5 3a469ab75ff745f8b314466453cd85ec
SHA1 8ae1ba76104d69dfc5074c06335b503a7e46c4b4
SHA512 ed8420a6510298c67bf467044c1dc5961534b3c1774eb508c2b3c8fd070d9541d45dbc925596d856cc8c3f18c97c5d46daff10160b7c44a0b51ec336278fcbdc
SSDEEP 24:KdRtfRoR7RSaR3dRfR7Rz4RLRv+RCIjRnRzKiRchaRJRz1ER1RjSmRdMR48R7RQl:K88I7KZiEzyNdIpKGkcmxIFKSgoPyu
TLSH
T1AD91019772BA43123C7E2D0C9791E72A4A4271A37115E52B3BA800724E67F294EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fec547f1-dfa4-4468-b0dc-8c557641c129.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fec547f1-dfa4-4468-b0dc-8c557641c129.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5999a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5999a6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 4e326dd84370b5fdd72344a2dbd780ea41f745903d17868e78bb30fd926e4567
MD5 9382875ad30291a0a55ec80f3f37fec7
SHA1 6f5d6e38899845f18c47cad7f08a7fb8b7fa4b80
SHA512 7385b78d4ff3793e4554038fb1ca14d79f5c0656819c980e7e298e52cda173551d0943a880f06a1dab184e27a0d99ec97f0a44f8d66cc0b12f19b52b523cf185
SSDEEP 192:uzLsNEaQdJwmZEwyQmiU1b+bFx4H/+jVnjzorRUlXU+2mh5cFTtqG9U8:QsNEaK+XPBaF+f+98RUlXU+2mkFLU8
TLSH
T1B4322B329838AC774DD3A694F44B36239FE451179AC97F94D6ED5B1D00CF6AC230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 07a98364cd0f76d847dc9bbcbe828a8107524987168ef2e5b2872ed0ae7124f6
MD5 0c656a596a0dd5515dce6fa89727f110
SHA1 af78880cad09b5621aa3953a738a3d76e3c0ba0c
SHA512 34c30aace64281da35a7941a95b43f68caa900ef24e0ab943f50c7550d02855b1926c9c2acb9bd8bfd53b2581d85948fd63ff40aaf0328bad35ebeab4825f642
SSDEEP 384:KviFiZcIpsNM8TUNTUlIl1K+XPBaF+f+98RUlXU+2meFLsa+VYAaon:ZFQpZwgF0OqlUlmQLhgHa8
TLSH
T103A25C338868D97B9DE79B85F94B22138EF44067D9D5BB94A7DD5F0D008B29C1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dc7dbd2c18d08c1663bc97262cf9f1d33b112b51a97c48908f5f185163b803b6
MD5 2e6180b4eae3fb2cb8f61b0ce0fcbd83
SHA1 ec6bea219ea6c4ef047ce6ebe8046f050c9e1cd7
SHA512 b60886cb75787002cae7521ed0bc0a5239fa2c1a845e4f0f2c9c8ee84a40d6256e7c419e0e53df7461ecba4779dcf4c0828004a5cd2ac85faa5e97e554d27129
SSDEEP 192:EONu6hZ0QmiUyb3bLpc/+jVnjzorRUY5wOZ+zU6:EONu6oGrLpu+98RUn24U6
TLSH
T1D802EA35A8686C778EF2AE45F48727235FE5112BA9A56F84D6E81F1D00C769C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 945c91541f96552661949aca20d0d40977a5a8eec48e85d5c587b6c19f98f022
MD5 dda3875aadc6b40f42309454004f9d04
SHA1 a92d6beb7fca6418e0f129765b093adb8b0b65e1
SHA512 9cd0a74f09efc3093499bf5ad18488b664cb0a40a10eecdc09d0dfd080a8680d501f41ff20f04312eb98ddf39833c8df32878b51d5b3aeb083b0dc35144a9143
SSDEEP 384:uZcIhsNE1K+XPBaF+f+98RUlXU+2mkFLsa+VYAaon:MhX0OqlUlmCLhgHa8
TLSH
T196827D325878ACB75CE3A385F94726134FF890579AD97F9496ED6F0D00CA6AC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9300d82cc5726c38b89313fb813a2b23981408fd4ef169ff9b84cffaaeda1712
MD5 e1f1d1248b9e814a7a5c72b9d719947b
SHA1 5239732c220fc434015296443d3349e7f940ee9f
SHA512 34b63976772ce599ba8265352e05eb5278c2c8ff6626d76b226725bde2646a47c32710883f7b00818418b030a6e226dd9d922b4e81247e0f64e6011cf99e6534
SSDEEP 192:/ONd6hZqQmiUyb5bL6c/+jVnjzorRUlXU+2m15cOqtqG9U6:/ONd6SGdL6u+98RUlXU+2mw9LU6
TLSH
T18B120C36A468AC675DD2A695F08732239EE55117EEC97F84E6ED1F1C00DF6AC230BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43218e2f-b1a2-4497-bf79-f677ee095ecb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\43218e2f-b1a2-4497-bf79-f677ee095ecb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 42c3f7e3f0fc5b63e5181f3c657df604970d2d74d6df8872e3782be24c3a9300
MD5 ee998c6cf01cda90d65d8c4ee28247fa
SHA1 38087407c1d992a8aadbab3a94bc786ce955d3fb
SHA512 f16bc4d5960b3c2ebf18d42a2fa3460acc34e73f6cff809c00a17f168c383ac84666b49b88abf3f408f17093cc6b367dc07b9312f080652b9cbb1db58f65005f
TLSH
T1B841F458A6FA1158B3B76E4AABF7A86E447BBD372E0AD49D00110D4F4632B00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download