44ca7cf767b3dd9d40e5c1363f8e3085c2d80a469287ed2eaa1a7d8e12962a40

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 6KB
Sample260722-wza4rseq4v
SHA256 44ca7cf767b3dd9d40e5c1363f8e3085c2d80a469287ed2eaa1a7d8e12962a40
MD5 1e1295513bc7b060fb3b73f7fc124116
SHA1 4b48d10ff32709a8af26946a44ddd9f0bddca11f
SHA512 0a43fd920f69b2cae3d616c46e18ccdac89de07df00bb4b197e977762e8a97c5a5353cc16f8d1650a16146db005835d89bcaac362cf652b1e2b37944932c531c
SSDEEP 96:dIudzk9cw9CSPKJAJh6/sUgnlOEDNwJYItK9Ys9UsT4CUbnIpf:jzkOpSPRJhi0OrGLx
TLSH
T1F2D1546541F198F7210300E97B265A0B3F90E713966E92047BEE4BD92FC3C56DE1324E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2300	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292180700539991"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{A1932A35-6DB2-4C3B-A88A-A0EB4086A56F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2716	msedge.exe
2716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 1408	4388	msedge.exe	84
PID 4388 wrote to memory of 2300	4388	msedge.exe	85
PID 4388 wrote to memory of 4944	4388	msedge.exe	86
PID 4388 wrote to memory of 4944	4388	msedge.exe	86
PID 4388 wrote to memory of 4944	4388	msedge.exe	86
PID 4388 wrote to memory of 2760	4388	msedge.exe	88
PID 4388 wrote to memory of 2760	4388	msedge.exe	88
PID 4388 wrote to memory of 2672	4388	msedge.exe	89
PID 4388 wrote to memory of 2672	4388	msedge.exe	89
PID 4388 wrote to memory of 2672	4388	msedge.exe	89
PID 4388 wrote to memory of 1568	4388	msedge.exe	90
PID 4388 wrote to memory of 1568	4388	msedge.exe	90
PID 4388 wrote to memory of 1568	4388	msedge.exe	90
PID 4388 wrote to memory of 4988	4388	msedge.exe	91
PID 4388 wrote to memory of 3032	4388	msedge.exe	92
PID 4388 wrote to memory of 4988	4388	msedge.exe	91
PID 4388 wrote to memory of 4988	4388	msedge.exe	91
PID 4388 wrote to memory of 3032	4388	msedge.exe	92
PID 4388 wrote to memory of 3032	4388	msedge.exe	92
PID 4388 wrote to memory of 2140	4388	msedge.exe	99
PID 4388 wrote to memory of 1960	4388	msedge.exe	100
PID 4388 wrote to memory of 2140	4388	msedge.exe	99
PID 4388 wrote to memory of 1960	4388	msedge.exe	100
PID 4388 wrote to memory of 4200	4388	msedge.exe	102
PID 4388 wrote to memory of 972	4388	msedge.exe	113
PID 4388 wrote to memory of 3880	4388	msedge.exe	114
PID 4388 wrote to memory of 2920	4388	msedge.exe	115
PID 4388 wrote to memory of 992	4388	msedge.exe	121
PID 4388 wrote to memory of 992	4388	msedge.exe	121
PID 4388 wrote to memory of 2392	4388	msedge.exe	122
PID 4388 wrote to memory of 2392	4388	msedge.exe	122
PID 4388 wrote to memory of 2716	4388	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe0325c188,0x7ffe0325c194,0x7ffe0325c1a0
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,7788038224494198056,13165241672267775333,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4455891614736661514,12085663651765179876,262144 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,2533648135000401005,6851237883284579173,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,7747562039081162659,7536027532213499804,2097152 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,4519837055058735800,9674497159665782116,2097152 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,16001154937445878431,14625004562635175315,2097152 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4284,i,15139312183043778341,6725742840894797090,2097152 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10349954342575259088,5452550847517437841,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,12781936856359853127,10136842389805632685,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,872852795902582529,11393046652516204242,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,872852795902582529,11393046652516204242,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,4896792859830585711,11903506341118189600,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=1620 /prefetch:8
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,5678928072962660370,11359068794330147679,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,9369008931907869723,3384303870323943028,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,15565810482376501321,8354029365095633992,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,9917673917187053278,15793537421161709742,524288 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5200,i,3201834218464097532,13913430725444176109,262144 --field-trial-handle=2220,i,2521076050798767165,14917949693072210125,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2716

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 558dad048cc1dcefafcd29076b742f0350594b3deb31bc1d58b2f600a55d6933
MD5 edbd9ab1dfc73909d5076d162e5ac898
SHA1 c674bf210fe0bb5bfa540893a593465c0093fc86
SHA512 e8b54f7aec37aeb46063e5e7646bd04705abc175930fe9652f34411368984b3302ddc90e08d57a557716b3b340f686ab6fe5eb338f3d792b5616b930d9a69a81
TLSH
T1C3515EB854826523E7251031A1DA2F7E38B6BFDAFE5BCD7740908D32490FBE18369478
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fbef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fbef.TMP
Size 2KB
SHA256 d1ee21cc39b72c7e196c0716951709bfdad867e4424c22ffa65a0dccbadb12cf
MD5 7e451e5cfae3bcfc6d84218b7125a137
SHA1 446f3dcfc8750cb432e465345482377677f14fb9
SHA512 8847bb62cad9ac2afaaa8c435a18c7662267d6d6110ffb95a387d498040dbc353ef315acf924db2e7035a26419c839a1f442e6b6ccaac42d344a5222377431f3
TLSH
T18E5181B854822523E7251031A1DA2F7E3872BFD9FE0BCD7340908D32450F7D08369078
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 28c124e999d5b076250560a64a25d3cbb4801bb288e0ab5fefdf9fdfd382feec
MD5 40b3d9f68c42edd6f7dc5fdbab2b0d9d
SHA1 754c402a18a1eb14423a7ee0f5906c79ed41fca1
SHA512 a758af2e2800a8393f6d8ecee0a37f75592c3ec47db62bdb6303c41de8813c19d0b8384020877729bf89911ef3b3f1a1ae73fb0da692f0831c0f24a8ae14c7b8
TLSH
T1F5216BB783E5867E8A0157F0AA24AE1BCE1D0116436C7C5689E4BF2793F3471E00169F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a7715bffdddccf44461a8fe133b876114a04cd92c1b0294643304a76a8b70551
MD5 7fb8d6ba177219d02d4feeafddbaa6f0
SHA1 6057029905f418440f0bbf377cb11f2be9fe683d
SHA512 49b5966c2d9c5db48a1a19cd6b97390de8cf20f6e2d4a30ef7d4f16dba4673f5b64504e7aa2b302b5ff08c45b2949c7034031f2f60e3083ee2347ec5474ed801
SSDEEP 192:sxZTRsyM/jK1Ml8Mkf/f1sm+Cq1IdpdzHW6+WNGY9IKUgRXIgrJ:sxZT6Mf/f1sm+CZhHbGE9
TLSH
T19042F7166A345977CCCBD209BA95BF53D6F94432D2940E44AAFCCA0C05E6BED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 328bea856475da0ea234d45bfcb29a25ac14a048bb101860fc629a45de920907
MD5 333b1c56ad3f169c427d390f9678e9be
SHA1 7d076de68cae66411da329b90072656cfe028719
SHA512 6816c42b7b8230c6c04c12471f0217cf8f7166e94960647e2e7d70d2a649fb65b0a2553447d54255338ba799fd596c17e5d4fbeed60511d9e02db54e3adc7c4c
SSDEEP 192:sxZTRsyM/jK1Ml8UQLkf/f1sB+hq1IdpHzHW6+WNGY9IKUD6XIg5rJ:sxZT6qgf/f1sB+hZTHbGWH
TLSH
T10652F7166A345977CCDBD209BA85BF53D6F44472D2900E84AAFCCA1C01E6BED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a8e19eec6429aa6c4bf0c28baedf14021b655aa7823555bef6f513520f5c8ae2
MD5 70e2fca6986e22239cc3dd628c13d9d3
SHA1 dc56642bf3d6747f8fa667f1213493283d67afa3
SHA512 33cf6ed4466e84e05cd83ec92fc38648b7833f4e233604ef56178215b2159669f14469bc9a63d57db60bf9901051cb41f62660ce4704274e0bd04af546cb46cc
SSDEEP 768:qPcv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWNBroOg6y:qPcv21wWvu+Z+u1jaeFLeRN6OC
TLSH
T1A7D20A2B280CCB7E4F841E9CED2A6F8A6DD801CB57988D5447FA894C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 f29b8509cbd2a75f6e3e5d4bff42f2d8f8b4ffd21d048fb90fa0116701954345
MD5 eacc675affe570bb80208038b6d74250
SHA1 55a3f9543d7bf5137bfecb15713dfb3efbe33137
SHA512 7fad4e04666981b7f7165f5b05025bdf7934a7cb8a3077cd278b1b0d40c333e53a0c86e17db845261244913b1afa4692a7c592f7faaa3b115c27bdadb69bba80
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDKAIKZSGON2KWwCnr+JFTBBdI9UQqtdKCcf:mT3LVxnr+JFTBBi9UBtXcqzs7z7c8
TLSH
T15BC13906303F0242397D7908B36A8536AE4172673918A8BF7B7910A55F27E221DFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 673c96fe00fffedf5654be2e4ce493fd08efaa5512f65dc2cd723ac2be4139a0
MD5 3d7cb6fb84a063d725f3d96ac21d8f5c
SHA1 5997872ed566391b6bb498db58550d749567634c
SHA512 f1bd801c87b022d500b21b2457168a9d6b69ccbc0330444893e7fd3f39f2a1d29a27650bf19a5f8c102c5ab1ea4d7a57f8c730156dc25f45e7c20d2b94df0ce8
SSDEEP 192:CLsNVl7fQObYx+YLev1QmiU1ZLp4e+CG6+FdetRLXx++gJiTsqeU8:wsNVlfgxziLv2e+CQdi++lT0U8
TLSH
T1F2322A36A8385C6B5AE2A554F4473613AEE44037DBCA3FD4D6DC5F1C02DF6AC230A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 377867e86c8fe4acc6ce4473bb83618d56c67732f3a933b7507c981cb9241372
MD5 d5cc0891f30b56e4fbf555976ab1b765
SHA1 8c7a02c3ca1b54879e9654fd1b9f7b61fcd22e64
SHA512 1949bef81271e4275844bb2a1e0e7b60b93ae798903892e5e2802a2907541d14e95b9a479368db6cfa67675d97247cf3980879bce21a4eb7a3afbf34eb74b4d2
SSDEEP 384:SF1tNn/s3n9SHzsNv8TUNTUlIlmgxziLv2e+CQdi++UT0Scjmwo:SF1j+94+wgHRQB4ExUT01jE
TLSH
T1E1A27C3799688D6A9EE69A94F54736139FB440B3CAC17AD0E6DC5F1C02DB2EC0307E25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 88a9a2a5ac8c38338c88aad79a1b3e634d9f13687ea6e1c649a2f956b0b56bf5
MD5 c91525f5bf6380e8e6f4f96c87052c64
SHA1 7d81f70bcc58a3eb4f9df23171eb0089f760c442
SHA512 94f52e5bf0b52d23416f39f878e4fd4bdfee374ba30607abfb7c30561c47f2028e9d5cda81c6404a3488bd5031276f775a846909c1c4e940320f0eade4fbeb1f
SSDEEP 192:JONB6v+YLNQmiUybvZh+CG6+FdetRLusT3LTU6:JONB6vz/uZh+CQdMT/U6
TLSH
T1FB02EB3568782CAB9BF2AE45F48736235FE4113BEA962F80DAD81F1C01D775C2306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 33c89d03b931cb7c8646bf078e4ff7f8a5c3f09501ffb73b87b8760115581353
MD5 a9a6463c4def4d34b43bfa806ffc1281
SHA1 8338b55fad3d7a37692bf0f2a1f22ac3ed0fbabe
SHA512 f663c4d5a66e7968384086ef25cdf733988ac4d8a0887a9490592bc69331ac8fe34ca1743744212c7820f6e8410ff2d466451de7de523c1f52053b6cdd793428
SSDEEP 192:+ONo6v+YLzQmiUy9vih+CG6+FdetRLXx++hCHTsqeU6:+ONo6vzBsih+CQdi++mT0U6
TLSH
T16E121A36A8781C6B9EE2A954F48735135EE45127DBCA3FD0E6DC2F1C02DF6AC1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 39cf56a68bb87271d514a8b76a9ed8781247b3b5372efdee7035a81e4bc62c5b
MD5 1dd93d57c991b6dd61663b86df7c2bf4
SHA1 8fc494115a4b6e9837ab647227a91c536517c51f
SHA512 8d02350aee989a00a2e7963e7572cb6f0a8a33b5a818947fe92747f4122baaf14edb92b15045580f12480dc52dffc4514ed7ee4ce322a44a20bf8726471644c2
SSDEEP 192:uPLsNVA7fQObYx+YLev1QmiU1ZLp4e+CG6+FdetRLXx++gJiTsqeUt:ssNVSfgxziLv2e+CQdi++lT0Ut
TLSH
T14C422A36A8385C6B59E2A554F4433613AEE45027DBCA3FD4D6DC5F1C02DF6AC130A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 08613325178b066475c8d22a33d54aad066d1db232b8e95f4ff25f51475aa9be
MD5 46a3f1d9d8dc95efc563a57291e075d2
SHA1 c2ca4bccc67699447da73ceeb9c6ee38ada8a38c
SHA512 749d26559ac6a28ac6722539ac3d5535e94b8a15f8f60968c162e3a5d9db3f0f290ca81fd1efbeac301330dccfb93163a45f8a5b0f3c224410487c50f2e76a7a
SSDEEP 384:EtNn/s3n9SfsNVmgxziLv2e+CQdi++lT0Scjmwo:Ej+9UuRQB4ExlT01jE
TLSH
T158927C36A8381D6B9AE29195F4473A139FA451B3C6C52FC0D9EC6F1D02DB6BC1307A36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fdb24a8d-653f-4e08-abed-591568dc9276.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fdb24a8d-653f-4e08-abed-591568dc9276.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9a3af538037a94d9e4a4d090f31703c6ac1f00ab4aeda99d3d62154e53730edb
MD5 eb10b806c32d20d630e72cb64b41479f
SHA1 1943a06a0224b7c6d2db91eca8ab26e72bbd3df8
SHA512 866403765e2db21a84b030391e021dc04ad5fad9ea98bd68e1303856d57f0a4a6f8c02cc3f8fcd8a298ff53864671c651582bc44fa7d63771f767f4d681b7197
TLSH
T158413B5DA6F91114F3B7AE1AABF7686E447BB9772E06805E10110D4F0A72B00CDB1737
MD5 SHA1 SHA512 TLSH

Submit Download