db1ed204ea7aed6c083e46af248fb72a8b47a53c828e12ca1323135e49f2027b

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 06:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260723-hapc7she94
SHA256 db1ed204ea7aed6c083e46af248fb72a8b47a53c828e12ca1323135e49f2027b
MD5 6f19c9a65d4898cbfc4ac0fda40b73f2
SHA1 968cba54412cf050cce6c8086934cdb2029a36f5
SHA512 fad15f0de8289127dcb7bc54d12d3edb2717bb367a12a50708dcaa8dc22ebdd92490cd07727f4f6e6ebb98f43612e2ac40911c08cd42d1f51eb311bc21a02aaf
TLSH
T183714183AE50C8665131A718ABCFF40CD2A6D093C1189D61F0DE19A98F81FF6CBB705E
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2928	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292625233297689"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{69F9E964-A53E-4D3C-A22D-35F8C1D88333}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3912	msedge.exe
3912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe
4496	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 2312	4496	msedge.exe	85
PID 4496 wrote to memory of 2928	4496	msedge.exe	86
PID 4496 wrote to memory of 2612	4496	msedge.exe	87
PID 4496 wrote to memory of 2612	4496	msedge.exe	87
PID 4496 wrote to memory of 2612	4496	msedge.exe	87
PID 4496 wrote to memory of 2084	4496	msedge.exe	88
PID 4496 wrote to memory of 2084	4496	msedge.exe	88
PID 4496 wrote to memory of 4020	4496	msedge.exe	90
PID 4496 wrote to memory of 4020	4496	msedge.exe	90
PID 4496 wrote to memory of 4020	4496	msedge.exe	90
PID 4496 wrote to memory of 1248	4496	msedge.exe	91
PID 4496 wrote to memory of 1248	4496	msedge.exe	91
PID 4496 wrote to memory of 1248	4496	msedge.exe	91
PID 4496 wrote to memory of 2156	4496	msedge.exe	92
PID 4496 wrote to memory of 2156	4496	msedge.exe	92
PID 4496 wrote to memory of 2156	4496	msedge.exe	92
PID 4496 wrote to memory of 2824	4496	msedge.exe	93
PID 4496 wrote to memory of 2824	4496	msedge.exe	93
PID 4496 wrote to memory of 2824	4496	msedge.exe	93
PID 4496 wrote to memory of 4812	4496	msedge.exe	97
PID 4496 wrote to memory of 1712	4496	msedge.exe	98
PID 4496 wrote to memory of 4812	4496	msedge.exe	97
PID 4496 wrote to memory of 1712	4496	msedge.exe	98
PID 4496 wrote to memory of 3772	4496	msedge.exe	100
PID 4496 wrote to memory of 1440	4496	msedge.exe	110
PID 4496 wrote to memory of 3056	4496	msedge.exe	111
PID 4496 wrote to memory of 4028	4496	msedge.exe	112
PID 4496 wrote to memory of 3984	4496	msedge.exe	113
PID 4496 wrote to memory of 3984	4496	msedge.exe	113
PID 4496 wrote to memory of 3912	4496	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffb2700c188,0x7ffb2700c194,0x7ffb2700c1a0
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,4429317258731002337,5354784146336882194,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,9597202843715023642,16007849387223899856,262144 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1368,i,17830149346915599055,11030944014320753218,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,6766651618996596371,10995573853778824146,2097152 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,13333895256257334426,17622790197071698593,2097152 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,7935850017832533806,12395932056546208441,2097152 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,5734086879852076114,4123772471115665617,2097152 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,11319327500158389347,12215785902547535435,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10965311941252649077,4197330118548547548,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,12124253091639296790,16071908405651678840,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,12124253091639296790,16071908405651678840,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,1958746005345153541,12538478784045205546,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,1993798289767470821,9058066659528848324,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,14875358286285149909,6553930092018752302,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,5178987302063854335,3259820524344898130,524288 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6116,i,3294537982936727006,17626418682676953515,262144 --field-trial-handle=2132,i,16268824192243641116,12146210684856587253,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6e5c40794f369e40200dbef8f390a4fc8903b656398c3cc373c3957772c67de7
MD5 05fdb59edf4f2ae85a482c7ffe4c87a0
SHA1 f46d6b5a8e2dd37769dd5bcad2fd2eb7c58c8437
SHA512 1720dc5f829d5051f4405f3924c2175220433c353bbb2d3bc063103628099736d8c7007d2d6dfa80a38cceb892741a2fe205b475a20457e9b3c4ac201a58f788
TLSH
T1407182193A564B9FE7515E39E0E00237317AC6A90E030F6AF2735CFC9396F76A662418
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a2d3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a2d3.TMP
Size 3KB
SHA256 e28ee19e4e1af20536cbb4082a0032d541d03ae88b50f27f3255112034dcd65f
MD5 37a399238d029de50869699c7ab2d9a2
SHA1 e3cc92e5cb98515eca693e1e775635a1cdb3b0ec
SHA512 57713092156016815406cf4e1da82a679e2720183a0fab259d6204a30736d72ba103bc5a48dc466bde59349d1782d108e81dbbff5b765eed3ef31628069a5c68
TLSH
T1217183193A564B9FE7514E39E0E00237317AC7990E030F6AF2735CFC9396F76A662418
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 733B
SHA256 8b3ee4e746206b05fc2b348eeb49638acb437efea46fdb8433c9e73e4de9c1ee
MD5 777caf0befd2df23d35ed12b9fb71856
SHA1 c41f157abe01d281ab8fc85375d821b03ac5c01c
SHA512 0fdd92d0f00af9f7df11f6dd2b8e63bad79128b5ea268b5a6058f5b994e1e910035dcd2685452d8e55391c0a5d508e9ebfa6411a1a6a12c1ca806e061bd56ae6
TLSH
T14F014CF7C3E4956E8A0156F06A18AF2BCE2D0546831C7D5AC5D4AF1B93F3475E10189B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e5d85d41d6a83e4def092b2de119aef7ffc201dac55ff91fa97677e6394e4058
MD5 e9616d0e11e1e7c920a82078ca6ad401
SHA1 8f5c098824fdd3f1b048c3fc625026f2460a5343
SHA512 355b465be9f5a4aa2d4daa587575ca5c6b137591209a80526315102069b059468504e2c2f2f3e73122572e8e8ce8c4abb4d0803ab50910da3d835b638f59b328
SSDEEP 192:sxZxYRPyM/jK1Ml8Mk1/fUsq1JCIdpdUHW6+WNGYLzm6wIgrJ:sxZxYBM1/fUsqnrGHbG39
TLSH
T10D42F9166B345977CCDBD209BA51BF53D6F50572D2940E88AAFCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 31b4d6335dfc47be8278dac2f043c8f9bde95a5049ca78f9a1a001fcd3c75c88
MD5 ec4cb1715d75db64b72f166353b990f0
SHA1 8d48f17d8f42009ad7bf83731df5e49566909f9b
SHA512 9bcd64eea8f827327893f83ad443f7d28ade2b11b9176d64dbb8dc1823db006cc2fd6f40c7657a9508eb17f47f970e9ec828882e4e736183067b523ad3f62264
SSDEEP 192:sxZxYRPyM/jK1Ml8UQYk1/fUst1pCIdpHUHW6+WNGYLMN6wIg5wJ:sxZxYBq71/fUstDr0HbGVu
TLSH
T1DF52D8166A345977CCDBD209BA51BF53D6F50572D2940E88AAFCCE0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d56cfc725824bb2c91d15021f876f5cb014cdcdff007b663a3fbfb887ec55f71
MD5 7f0c8095e961e8fdd869794449cdb966
SHA1 41af63f2808728ea0c1c6b1943343e487ea47ddf
SHA512 10449bd1c3aebf03a782a90fe51b94593296094d0f01ed130c7879da2d7f25a79fd2b3c7da51ac0c9c9d70624f671d18baa89eecbd5fccf0c992ed8e51b7f2c5
SSDEEP 768:0Ss6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNLroef:0Ss6pD1WvxzWju1jahILIsN4ef
TLSH
T110D2FA3B680CC77E4F840E5CEC2A6F967DD801CBAB98895447FA454C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 fbafb724535c914ce2db6c3d054dcfc9aa80ac5a52bd8a3987e3124bdb1f65fe
MD5 04fc047e617a97d3affdcaaa0368bebd
SHA1 e06c96087111b1a9bd0ae2cc52b2da48475ae35a
SHA512 1144930a6c3936ba72c110a42d398bd6b3b5c336a529464169fbcfe79e8ffd082869c76dfd775bc50d7c26d08f4efbccdadc657afc412bb79faafb5e5e31c2fc
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyFlIFKe4gfytVIZKGE8D:KUAAKtePulWKe4iuV2KGEA
TLSH
T17C912A5331BA13023C7E2E0D935487668E4275A3316DA42B3FAC40725E6BE215EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593f80.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593f80.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 f320788693606d2e3cf3da14584cbe8a3ba530b97d14e02a23ec9ee6c82ed0a8
MD5 5493d9489404bcfea6e546f2bdb53902
SHA1 b70ac31f379dd69eb78db0882875d0f377836372
SHA512 9bed3be5b47c1ed97fe862bb389a476e0722fdde8a23bc5a0bbdcd3c0fb87b2d3f2d4a3bb2698d99942da9ff7f3db96a38189dc470b7153b379da96d8fa5cde5
SSDEEP 384:1ZcIhsN6YfVu88q/Va97ORMKoofOObjI9G6w7mOc:NhStJ4JOpoof29Mi
TLSH
T167928D316C385D7769F6A551F98A2A174FF88077E7991F84E1ECAF0C01EB9AC130681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 9d31cfffa1581290af842d825f70989ed1873d56c14162bcdd509f60c06688c2
MD5 f758526dfc3428d2514c363cedabd8e3
SHA1 65fda4a7c664c966762c759639e4af516e1908ed
SHA512 ac0acff3a1c00539f7d85f420b814472f9b45821856bfaea080005d81c33b93a40ecfec7d381a3943081e6fb60d961d5fddfc81240cf563fc4addccce85924ae
SSDEEP 384:PiFiZcIwzsNC8TUNTUlIlZfVu88q/Va97ORMKodfOObjI9G6w7mOc:aFQs/wgntJ4JOpodf29Mi
TLSH
T1DAA27D335C688D7BAEF69A45F98A36178FF44077DA956B84E2DC9E0C01EB5EC0306C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 aaab41d98c568e7d0bc571ff1629b96b5e7922374350a23a79bcccc7c2cd33c7
MD5 2bdc4f9ecbbf8601061571d4ec2c88c3
SHA1 6eb39d34a705144872f3cc5cac7acfa502224aa4
SHA512 5c72a3f30d48029e02db7931835098de5e4fff160cbc4558e0a382d9088e40386522e35bdffe2bdcb28e47b2178cbd8c604ee48e35594f1517cde3fa8b17bec9
SSDEEP 192:qONa6O7+3hQmiUyZbGttb0aO2eh2dqgGHcU6:qONa61+Gt97ORMa8U6
TLSH
T12B02F9356D286CB75EF2AD46FA8737235FA5103BE9A52F84D6D81F0C00D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 69cd7950365aa09f89956a742e5824de7394dc639dec02785a58dcd84ef02199
MD5 7424b180635a446624d8e2adc4a2438b
SHA1 bb856d629372424b536a98b1ca63d7006843de80
SHA512 c8b5f1026c4d34baf165cd2aa903c1176dcfc1ae7b6adfce0ca2fccdadd8a5ee42a3962e9460ca3f1bbe02e8e8f2d613eb1c418bfca0e8068004aa0ba94a2b14
SSDEEP 384:WZcIhsN6ZfVu88q/Va97ORMKoofOObjI9G6w7mOc:EhHtJ4JOpoof29Mi
TLSH
T106927D3168385D7769F6A551F98A2A174FF88077E7991F84E1ECAF0C01EB9AC130681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2283fb592d31ac81b8e9e40d3ce207067cbf626f42c531ec8ffd1037c28b4bbd
MD5 c275435a109cfb37dc34ab5df03fdd70
SHA1 71c0f05b2158d2be0206386cdff457870af05a31
SHA512 4983562f28b8dd1b713efeae4f1809e5a465f1f03c35aa27a4f7938b3ad717bc532c5e49a05f18dc49fd481f849b2fbd35e5bb7106746616ab0cce88d0e091c4
SSDEEP 192:HOND6O7+3vQmiUyZbnttb0aO2eh2dsLEKcN1q5YU6:HOND63Snt97ORMKozfU6
TLSH
T1C3120B35686CAC771EF2A545F98736135FA5412BDE8A6FC0D5DC2E0C01EF6AC234A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f013e2346d9809f9ca94902bb4317d37a2285d716cc1ab2b99fd9915431937b
MD5 29715770ab06c5ea0c64f97a1655ced1
SHA1 5d8888234233b51d564ce5a0cf17c63b641184d0
SHA512 c09b21a86bb80c011309828d3a77420e81c65ed96bbeb19e943a7c6a82517bdbbda77d65f6f94d53e4ee17f8cb7ef7e832c8f653e526f16f2187b88b1d0d84d1
TLSH
T19D41175CBAF91148B3777F5A9BFAA86E487EBC372E07945D10110E4E0A22B41D8B1737
MD5 SHA1 SHA512 TLSH

Submit Download