fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 615B
Sample260708-ws2cdaet4j
SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
MD5 7df3d7cf3358af3f470ac7229387ef94
SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
TLSH
T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4924	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280079180206871"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{9DEB1EED-D191-4F38-81F4-F7BDE721EBFF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe
1100	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1100 wrote to memory of 4976	1100	msedge.exe	87
PID 1100 wrote to memory of 4924	1100	msedge.exe	88
PID 1100 wrote to memory of 2180	1100	msedge.exe	89
PID 1100 wrote to memory of 2180	1100	msedge.exe	89
PID 1100 wrote to memory of 2180	1100	msedge.exe	89
PID 1100 wrote to memory of 4508	1100	msedge.exe	90
PID 1100 wrote to memory of 4508	1100	msedge.exe	90
PID 1100 wrote to memory of 956	1100	msedge.exe	91
PID 1100 wrote to memory of 956	1100	msedge.exe	91
PID 1100 wrote to memory of 956	1100	msedge.exe	91
PID 1100 wrote to memory of 3180	1100	msedge.exe	92
PID 1100 wrote to memory of 3180	1100	msedge.exe	92
PID 1100 wrote to memory of 3180	1100	msedge.exe	92
PID 1100 wrote to memory of 3008	1100	msedge.exe	94
PID 1100 wrote to memory of 3008	1100	msedge.exe	94
PID 1100 wrote to memory of 3008	1100	msedge.exe	94
PID 1100 wrote to memory of 1252	1100	msedge.exe	95
PID 1100 wrote to memory of 1252	1100	msedge.exe	95
PID 1100 wrote to memory of 1252	1100	msedge.exe	95
PID 1100 wrote to memory of 4692	1100	msedge.exe	98
PID 1100 wrote to memory of 1532	1100	msedge.exe	99
PID 1100 wrote to memory of 4692	1100	msedge.exe	98
PID 1100 wrote to memory of 1532	1100	msedge.exe	99
PID 1100 wrote to memory of 4180	1100	msedge.exe	101
PID 1100 wrote to memory of 4928	1100	msedge.exe	107
PID 1100 wrote to memory of 1052	1100	msedge.exe	108
PID 1100 wrote to memory of 5044	1100	msedge.exe	109
PID 1100 wrote to memory of 4716	1100	msedge.exe	113
PID 1100 wrote to memory of 4716	1100	msedge.exe	113
PID 1100 wrote to memory of 4884	1100	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffbe35fc188,0x7ffbe35fc194,0x7ffbe35fc1a0
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,13935603953352886950,7318544673440629245,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,12574887159034676071,11721374160947097962,262144 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,4998763070173278773,10394611757527115791,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,14181903803460749960,10524465276600847881,2097152 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3400,i,13536145799153382255,14116133081860258051,2097152 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,1019425926960383474,5846364924220434257,2097152 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,3120148796561453463,5078846067519946166,2097152 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,6749718556950414206,9498352329932929741,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,13493773499451937416,6977943483721118060,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,8545094689660962282,17929537416231350822,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,8545094689660962282,17929537416231350822,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,17462085879811741250,11237764637858647720,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,1091128083334323600,16385742005767325261,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,15876971533272576888,14479448545392827506,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,17142810377403559815,17714321381234164663,524288 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5820,i,3784396504727735450,2710624667316819956,262144 --field-trial-handle=2192,i,11384575279284154462,7319491691304237363,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4884

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a7a9c3d63c7dbd0f3d3b818860e96a4aafa14448b2b90468fb686c481c700793
MD5 1390c6e32c01a5e01e2022dd3e85eb25
SHA1 381649dc6a4b830d8748d59ae9683d9927c3c88c
SHA512 0e9a31e1e71ef88e2aae880db738df14d48917670771bfddab024d9f1f484e052446fc176cc6a11c652640d3dd6f3095014499d1ee2c185122c6b85ed1caa2d7
TLSH
T13D61D62886B2C985F7967431F2E1B10474FD88993A5F3F4E584059BFFA1EB147025E78
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58968e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58968e.TMP
Size 3KB
SHA256 0985c4042396a0df9e1992e6aa06aac3fa495e3d9ea080a68c45045becc2d928
MD5 49debb66309ff71106cc1707c63a4b7c
SHA1 31600d4d45f8286e6511901b052db10571760bea
SHA512 969979fd1de1d09ff6d6b8739f0bdca2d1f2068395e0bda6909cee4420ec037c2b240f54b00773f29e883e61905a8cdfe0435c8fa4a21b047f2b8ff74453b239
TLSH
T1AC61C72886B1C985F7967431F2E1B10474FD88993A5F3F4E585059BFFA0EB147025E38
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76a95f79-b5fc-4dd5-85ad-0169f3cde040.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\76a95f79-b5fc-4dd5-85ad-0169f3cde040.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 34f195ca374b16083cdaf634e7b9585533ec1363fa107344c67933d27e987c01
MD5 1e5e4aa29060673a2841ab3e9c441a64
SHA1 830f83e23068deca63ea0884f4e24a3ebe8217a9
SHA512 63f5813a64358930d0e4a278e835f196fa96374c76d867ed3e785fa3529c87cf58d95d404f7bc018c90deae7524fbf90923845c0c072391038b9e32e4b53fee9
TLSH
T155117DF3C3D585AE890116F06A24AE1BCE2D0515432C7C1589D4EF5BD3E34B5D00159F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e78ce915be4e3acf6c32829cfa31865c113582b416e8894dd4963dbbd534dc11
MD5 447953d33305240f8e7a4199250ff7c2
SHA1 16917e594a8e5dc67715919c313d58849939a02c
SHA512 d55f8586a5cec48f7c3a27f5a88707af49689234e4eac330d47362e21255158aa3ab9b51cf0476616ecdec52f17a914d8f66eb6bdfe44c09451f368772e2217b
SSDEEP 192:sxZkRLyM/jK1Ml8MkG/fistoBzNIdpdaHW6+WNGY4wxWZIgrJ:sxZkdMG/fistopukHbGV9
TLSH
T1CF42E9126A349977CCDBD209FA51BF93D6F40573A6941E44AAFCCA0C04E6AED231381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 80848505cb824bc499c9e4fe971762459f897365a0aea2d7410f538d86f61d25
MD5 9b7d2580d82894abbaeb1f5a057d2a17
SHA1 bc26089047ce2cd784b0e1185d3303e8836af615
SHA512 e73ebef78555a95d441c63ad0e01a830ef81f33da2ad4e45e3d4a388f60f0e5420db704da6edd1fd19509e240ce3593347a43f66f81c155e7ec43f410815f9cd
SSDEEP 192:sxZkRLyM/jK1Ml8UQdrkG/fis2JoBmNIdpHaHW6+WNGY4dOWZIg51OLJ:sxZkdqdAG/fis2Jo4u6HbGhy
TLSH
T12F52E8126A349A77CCDBD20DF951BF93D6F4147296941E44AAFCCA0C01E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 34ba1b53bc764462b2ddf3d35d431f6cac3ef33f812469f60234d7566e065e3b
MD5 5722053e51b019d49f4a6c9a617bb5ed
SHA1 c171f5c6b4a00e845496968f608178e92974404d
SHA512 6f2256a6852998d4ee71609ec5bf740146ad25536e1f8a7ab41b499bb5b88dd082c8aaab82acf6ccc0c6d836ab5d5453c45b212e77c9500687eff2ccd8252ace
SSDEEP 768:zH8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdMroSkkUn6:zH8iJPNWvx76ru1jahALocdXiU6
TLSH
T122D20B3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1c0b7abdec8cee978b447452138bfe3de3eb2c41b3b1642667e28a87ab23c085
MD5 68480ec03e8eff96fe66dcc081074689
SHA1 bc2cfdb2e1ab0656e51ad4e014f53b5870df5f5e
SHA512 b995559c81aec420ad08e8e82caff2e8e8f0d66dd58de4353af38ddf12950615bf63d7cee37156554168e242f4f8d16c4a59b78f36ff1a14ca6bb353322d3290
SSDEEP 96:KYBeKCEi6EQKxqDc9oMmqesWa33gUsK45gesc8M32cxHoZs4q26gz:89/qc9oMmqeza3wUQ5geT8M32cxHoZsw
TLSH
T17591650134BB06413DFF650D9191A61A4782B5AB7518A53F3BF841B20E2FE286DFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b9d964e8-6afb-463c-9f12-48209b6dd258.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b9d964e8-6afb-463c-9f12-48209b6dd258.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f224cb2a40d0aa96203a114b386b676dc4e8d18a3a349aba17c886878b3c8146
MD5 91dfff38b777bbe3c52bf7b08245b4b5
SHA1 1e41aad3c09b35183fbf77a59a42877be94d5163
SHA512 fd2be3667146642ca14cee48da7138607e0ad351e452356af73087b4a73d71683bb2d8f7c65b9bb91307704a295d162e7f283c341e654a1bb5690d8b3ff85d0f
SSDEEP 384:2tNn/s3n9SfsN6Jqvad6igkqdhdXeScjmws:2j+9UY2adXe1jI
TLSH
T190928D3268756D6A5AE2918AF4473617CF7855B787C92F84C9EC9F0C01CA6FC0307A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 38aff319d6159c0dc0bd83448f3fb33128dbcd2861436e26e2096f06189abb1c
MD5 f594a840c23c9b4fa576f616c254005a
SHA1 ddb12e67d5a5b279fbed3ebc70517be8e8a5e120
SHA512 424fb54094502de3457daea8d84d4e84eee2dbd4f53ff07369c8f7f7f1005801130d534890a9c42637834d9545e2cdc13f011b1b5c5b6472e155f682d30adadb
SSDEEP 384:MiF1tNn/s3n9S2zsNC8TUNTUlIlAqvad6igkqdhdGeScjmws:3F1j+953wgL2adGe1jI
TLSH
T1A3A27C3358A4997FAEA29A89F5473617CFB451B7CAC56F90EAD89E0C01DB1EC0307D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b89aaa36dd47c237855c895babac18536baca89a50532c1356e87e9aa2e76496
MD5 b378d50934aa4255aeabdda2ed77c07b
SHA1 39b93cc4b0534846b8e166f0b997c591d21b8542
SHA512 7b13fa7b479cfdd6b79aa1d36bf37e0562fcb5bfc8ad8a56fce18396d53024155b0ccf8bd29b33adedb947a8d95c81e5f91b770d95b3caa7e0311b77f7cb8a12
SSDEEP 96:ZqONk6QsjpfmUTmDK5ih/cIPURHl8h4otop5T5DGBhPwivh50xy0SFYKIAxteYke:gONO6kDfQmiUyFWZ903vZQiPqU6
TLSH
T13A02093968786C7B8EA3AE49F58737275FA5202BEAD42FC4DAE41B1C40D764C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 36e8437e9f91d5b6644847f6a0d2546d66b216568ce6f8dcfc91468cb1a486b4
MD5 7394736e9f416734328aa0b92bf7113b
SHA1 e667c8520e6bc17f3db0ec7283dd26a8a6ebf207
SHA512 2b63b945311371ae610e12d76fad6a2f5303e5acecd86f219ff6b23b7abec95d267b9ee15962dd1a1a071d429ac4aceb3aefad7c99a650fe60c88cf1cc68d1b6
SSDEEP 384:MtNn/s3n9SfsN6Aqvad6igkqdhdXeScjmws:Mj+9Uz2adXe1jI
TLSH
T1EA928D3268756D6A5AE3918AF5473617CF7854B787C92F84C9EC9F0C01CA6FC0307A26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6300e00bf0e588fbb9777a12a7f605ba1b8b76d6ff73f8a6f4652006db04f08a
MD5 16484aaef9d2815f426a84e6a19866f7
SHA1 e2ca9de25a4b15765e7ad935d6bec7e5fdfd0fc4
SHA512 a90fad2eba2bbe5e0bb9798a0abaa7b20be685c61a7726fee8db18758a559224ef762e39fa8960036cde1f489e7844f1fc8e78701f74d71071b0eee94264e56a
SSDEEP 96:LqONkHQsjpfmUTrK5ih/cIPURHl8h4otop5TmDGBmPwivh50xy0SFYKIAxteYkMf:OON76kGQmiUyMWA903vdhdwcR7qlU6
TLSH
T146122932A878AC7F4EE3A955F48736139F65513BEB896F80D5D82B1C01DB5AC130B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8fdaa4f5a4da664f6e7e7be7728bae5c0683d8b1116803c5dde2704dc14c833b
MD5 a8fbbf51d5697137d7e82e5e47688dae
SHA1 807a1f23f1db6df5a9971812cad6f551390bfe31
SHA512 2e04443329eb9584d360753ec5781c6856a1284cc659e569c7669ac194c6fc38440a77c44da90d8d34f3add1c8813d39d9d49e5b1aed138474322a785ed5208b
TLSH
T18A410758B6F91148B3B7AF5AABF6A86D487F78372E06C45E00010D8F4626B41C862737
MD5 SHA1 SHA512 TLSH

Submit Download