25fb23868ebf48348f9e438e00cb9b9d9b3a054f32482a781c762cc4f9cc6393

Analysis

max time kernel
148s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/07/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 548B
Sample260718-aly3saes2x
SHA256 25fb23868ebf48348f9e438e00cb9b9d9b3a054f32482a781c762cc4f9cc6393
MD5 4b074b0b59693fa9f94fb71b175fb187
SHA1 0004d4f82b546013424b2e0de084395071eef98b
SHA512 f928e9faa0bc776fc5d8a0326981853709d437b7b1c2e238894bfb2acbb627442c425cbb00d369c52d15876b6c795e67f7580341686696d569a908a6add4b444
TLSH
T1D2F0909B6F19283F2E238571F4C75168CF680A66FF9925E28748011F7ACA04549F2FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1468	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288075258818179"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{157C1A86-CBE9-469A-92F3-44379074A8D8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2900	msedge.exe
2900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3504 wrote to memory of 4168	3504	msedge.exe	84
PID 3504 wrote to memory of 1468	3504	msedge.exe	85
PID 3504 wrote to memory of 4664	3504	msedge.exe	86
PID 3504 wrote to memory of 4664	3504	msedge.exe	86
PID 3504 wrote to memory of 4664	3504	msedge.exe	86
PID 3504 wrote to memory of 3604	3504	msedge.exe	87
PID 3504 wrote to memory of 3604	3504	msedge.exe	87
PID 3504 wrote to memory of 3908	3504	msedge.exe	89
PID 3504 wrote to memory of 3908	3504	msedge.exe	89
PID 3504 wrote to memory of 3908	3504	msedge.exe	89
PID 3504 wrote to memory of 2984	3504	msedge.exe	90
PID 3504 wrote to memory of 2984	3504	msedge.exe	90
PID 3504 wrote to memory of 2984	3504	msedge.exe	90
PID 3504 wrote to memory of 5028	3504	msedge.exe	91
PID 3504 wrote to memory of 5028	3504	msedge.exe	91
PID 3504 wrote to memory of 5028	3504	msedge.exe	91
PID 3504 wrote to memory of 2352	3504	msedge.exe	92
PID 3504 wrote to memory of 2352	3504	msedge.exe	92
PID 3504 wrote to memory of 2352	3504	msedge.exe	92
PID 3504 wrote to memory of 3648	3504	msedge.exe	98
PID 3504 wrote to memory of 3648	3504	msedge.exe	98
PID 3504 wrote to memory of 3144	3504	msedge.exe	99
PID 3504 wrote to memory of 3144	3504	msedge.exe	99
PID 3504 wrote to memory of 1640	3504	msedge.exe	101
PID 3504 wrote to memory of 4396	3504	msedge.exe	110
PID 3504 wrote to memory of 436	3504	msedge.exe	111
PID 3504 wrote to memory of 1368	3504	msedge.exe	112
PID 3504 wrote to memory of 4352	3504	msedge.exe	113
PID 3504 wrote to memory of 4352	3504	msedge.exe	113
PID 3504 wrote to memory of 2900	3504	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe3965c188,0x7ffe3965c194,0x7ffe3965c1a0
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,1890248173186028817,8995057423308835480,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,6091039476075479303,12809316322770693308,262144 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,2515848788875521685,9535300084571997548,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,15599993844282557372,1157172987304344427,2097152 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,15750331632340109834,17036090588317089097,2097152 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,13367305446239440733,16089804473681107649,2097152 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,16467807910637237802,8118318796210041352,2097152 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,8056379325801617661,12216545429753699844,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,16826076469443212994,12128670403497880235,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,5382655974449802102,9419169686568283487,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,5382655974449802102,9419169686568283487,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,16817759315902510973,15663518277531319778,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,917026336386437326,2457212123915845269,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4152,i,4674739579828148918,5846035926749612134,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,4086865526478728622,13946989727689879424,524288 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=1020 /prefetch:8
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6120,i,6302310111827679083,10360473796750063878,262144 --field-trial-handle=2260,i,11374845058100190585,1034550125981366448,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2900

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4528

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6cd49a9d-1bcb-4515-a366-acce8d1a13c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\6cd49a9d-1bcb-4515-a366-acce8d1a13c3.tmp
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8888a8a622051e770aad21a4f4424c5420c3d207a69c679752a23f1d2fca6dcf
MD5 8d6b98d7c83dcc8f22d627ac2febcedd
SHA1 50df297dbbab91980f1e85b864b2a542775e9e4d
SHA512 415af2e365b2f1ad74929b117ff7aaf885eddddb66e4e62bc679b8ea8ccdcd01eda29ccc3f0212350ded612db7c9d2dfaf1b325601a4bbdbe3ef867de00913b5
TLSH
T11B81E6B4810B35A9EB0C4F3190DA0D5A32306AE9FDFF3FAF5D8424B98778355052B468
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5870d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5870d6.TMP
Size 3KB
SHA256 c5425ca398c3cbdbfce4ae21c3ef2fbfd9b79d7b622ddbae1462c90b231d7965
MD5 a1e881d0d47235fe510fc468541813d3
SHA1 2b8caae27187607d6c1bdd3b43de28fd93c812d3
SHA512 d91e1cc43f7f26421f33edcb9b2739d02e64f9c3e1ec78660a261e3c13c4c3ddbae4e99d4c46968a44a0088bfb0df5df9302e27417107374049ecf7f8d3117b3
TLSH
T1EE81E6B4820B35A9EB0C4F3190DA0D5A32306AE9FDFF3FAF5D8424B98778355052B468
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 b276c2e0eabc131479ea93b2dd43b00602c59092e5d8113273993d1c40b052a0
MD5 40d37c52b3eb1f79ed424df29c46d858
SHA1 3a49a8e1e2caf50b4ae79bb44b2afce8ba7c58e4
SHA512 ee21bd702e8728c5751e5853bd1bf9c7be082be66899707e3967721c94d5b55f1a26d37f7b2ab7d46292e0fe1f8c2afe4642350663bff2821971d9a50813897d
TLSH
T166117DB3C3D5856E890556F06A24AE1BCE2D0605431C7C5589D4EF2B97E3475D10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a71d5be15b335e693089b790137b4caf2594d3a3d7b58eeca77b584a088b68c6
MD5 69468d1b0f35f45ab653547e2d805dd4
SHA1 60410677aae5ecd8471865c33cd511d825345b67
SHA512 1bbf0b5a9055a9210914c2fbbb1da2da32dd4798c4fae9ae8ae1f17b60e97448cbef469870840b218192fdae5e0aea0efd34b09f4f285d7c25a5a33357e709b8
SSDEEP 192:sxZFRsyM/jK1Ml8Mk0/fOshf7VKIdpduHW6+WNGYvr8lj3VIgrJ:sxZFWM0/fOshfBsHbGzNJ9
TLSH
T1EF42E9126A345977CCCBD20DFA55BF93D6F51472A2901E44AAFCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fdcc7c38a7e2ad7b5c3028a56ff77e3b2b92c07d57eebb5c913026780b8db361
MD5 ed0c05bb860540cadc85143cea2577cf
SHA1 1d673cb44d66a182bde2c8a24537ab46acd531e5
SHA512 87e9ec2ae316859e527e59ab966d5f2f72d075db709d4bbcd782f4f9add378170776f66cfb13d5a0ec6c999453bfdda9586aafda9da05dd7e414fb39d6806573
SSDEEP 192:sxZFRsyM/jK1Ml8UQ4k0/fOstR7VKIdpHuHW6+WNGYvN8cj3VIg5yJ:sxZFWqb0/fOstRBOHbG9SJA
TLSH
T1B952FB126A345977CCDBE20DFA557F93D6F5547292900E44AAFCCB0C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2ef7f18297a1c7c7023eeac807dc9fa6a561f3275c900d53cbd7c9c52a46596a
MD5 84408b1ebb786362b043565c1e0e1ddd
SHA1 6ddb55feb0f32b8a6ded5cb6c67f6b7b236a2767
SHA512 db1ac989c52b87c05a91278e234e2627b625438b9016053a66226bfa19eb0ccf2659682c2ce97f93350277721da038f7f931377ae78cbb762dd2ada1919b6ed6
SSDEEP 768:uMseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pp7ro0u:uMseJ3xWvhfynu1jaVcL88pIV
TLSH
T133D20B2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 76953bc95b33eea780704d8e5f4e4f08e8c09ed90fc000f4e4efe2a6e30baa69
MD5 b0dd5908878945b6d7345185f926874c
SHA1 d8d86377defa172908b91fb85680841c77e70d56
SHA512 ea840053838f63decac900e43e59693154960d64dde7a46a6fcf91a67d80f39ee7019405342c1e725ec991f2ae1fbd30552a285db38b79f5eee6cf447124b4c8
SSDEEP 24:KdxwLfxwyxwRxwIaxwNdxwBxwhxwx4xwlxwB+xwsIjxwdxwxKixwOhaxwzxwx1E5:KYHIhKggkXyFjIBKEYcXyBuIXKTagj
TLSH
T13691E057343F0202387D254CA6A5AA369E4271A37454A4FFBBB844664F27E214EFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 acde204c0c61c84828ce5ab9d9bd0315bbf88f0eeb905c3f2b8ea847afa1bc38
MD5 55735a2a434843329c555e1f7a5750c3
SHA1 028b9a839d3d9a17b0d0eb3b935d162cdb1614f3
SHA512 8bedd28ec4c1acc6466f1f51175d154663f149cf47be3a1810e4104d2cd3cc9d67f74e0cab3d3173be3167535b661f2ec90507be1a3c7145450d9e0f8d1a24fe
SSDEEP 384:mtNn/s3n9SfsNfpWlB9S73T53I5KGvEF5:mj+9U9B9SZ4lvEF5
TLSH
T13B625B726C689C6BADE7A180F54B37074FF4917B96C42F44E9EC2F0C00DA66C1317A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 98ddb341e53da58a3f7c75a5d9eed778582793aeb882352d796d6319adda06ba
MD5 bdb806a10599642dd83f28b62a20fc89
SHA1 d32603d747c580559e10d96dc06deb3f1bb310e4
SHA512 4d54c0a8b768a2f9d4f701ea1f931ee89c558980111b1612df185e73fb68c5a5aae0a659a30d5407b2e420d5b31b0f243a78dfa80437e615fcaa710fc8d68c7f
SSDEEP 384:ftNn/s3n9SxzsNfQWlB9S73T53I5KGhEF5:fj+9W+B9SZ4lhEF5
TLSH
T15D626B726C689C7BADE7A184F54A37074FF4917B96C46F44E9EC2F0C00DA66C1307A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 69a529fe87d8e96b13a9efdbb027bc97320d2e986ea84e1ccba250aada997f5f
MD5 8ba7140856d5ca153127e1087cfbf48e
SHA1 cedda8d50148f9c6a08dedb3e3e5e5efbcb4a636
SHA512 6fdcf99cb0241cc1bcaf8adb401c23f6c529d6363a467fedec6c0cf8b1f76517efd6fe128b75808be94c483455b5f544864fc7251ae39175efdcfac28bd1c794
SSDEEP 192:lONny6vMtPQmiUyfMThThcC5KZ847AtU/u:lONny6UtRzTD5KhQU/u
TLSH
T1CF02E776BC785C7BEAA3AD45F48E27171FA451BBA5D05B40EAE82F1C00D765C230782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 6db5fcc791f2e72e40ac9504a7a767940b32c097c7f55cac511a98e92cfde164
MD5 dfc269a735a8c1ece388d834d1e56bab
SHA1 13abf04f2e62cb993879a567ea5ffbdffa70a3ee
SHA512 5081482e8ad77cb15bf85496e21a5d383f358cb1a0866794694f971389be40552de3cd44090c440cd0a98d9e554158a5901cb55e389f3fae06e45a0f7c3058b4
SSDEEP 192:bONy6vMKPQmiUyaMFhThcC5Kopq80ImqAU/u:bONy6UKR4FD5KGzEU/u
TLSH
T18312FB76BC689C6B9DA3B041F48A32071FB5916BD6C4AB50EADC3F1C01DF56C130792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 8cff6e9d3cb9cf653929f63839dd0988029083fd8350cb154aa23ded29214e23
MD5 62c52898b3889b7d44047902c60f1630
SHA1 86ca5359821baa94dbe5a1bb112b7df46af8d6f0
SHA512 de629b3c43c6d2e30d9488ac5fddca4b460961d0e1e884b05b86b1a8a2b870d9dcaab29e161a46a86f93a9e6ec43ae499700a3955c0e07e7f6f3aa9cde811a5d
SSDEEP 384:wtNn/s3n9SfsNfQWlB9S73T53I5KGvEF5:wj+9U+B9SZ4lvEF5
TLSH
T139626B726C689C6BADE7A180F54A37075FF4917B96C42F44E9EC6F0D00DA66C1307A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08ebb39c-7b52-40e3-98b7-1e94c3c9c59d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\08ebb39c-7b52-40e3-98b7-1e94c3c9c59d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0c9384e7fb9d0306b0deb7aba686ee56ed5e30548c7cc252341a4aa97992951a
MD5 433b46d89f7edabb59a109fc5c4884dc
SHA1 b0f2b16a872a7278691fad10a7fcb6fbe2af7496
SHA512 0f469b5600377899c4e6742df80dba79f27383a36298b80309d9ffd896a3792f2393f26229a9a7d970907c2a024327972b08287ec028487c7003410eebfa70bc
TLSH
T11741274CAAFA115CB3B76E569BF2A86D487BB9372E07C45D10110E4E0A32B40DD72B33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1640-188-0x0000018B55200000-0x0000018B55349000-memory.dmp

Download