f96aa20d7038ef219c05b27a61f031ab239ee424648ffb369673f696070d3b9e

Analysis

max time kernel
148s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 81KB
Sample260723-ph16asybrd
SHA256 f96aa20d7038ef219c05b27a61f031ab239ee424648ffb369673f696070d3b9e
MD5 e9b43b7c99ee46134287ff7f0ad79d22
SHA1 1b427ee718f6c940faae8d15bb83c7f714ef4986
SHA512 b1a033ab54b8a7e57660c13984d261918c5523a61d9b08430adf7cdd2f68890393bb2546b82a70c3d9ae3a0febe24f1833b55560855d9763621d6eda51910b87
SSDEEP 768:oPMJlL3gkYCX3Gy88xQVckZjwzS2Raw3EZint+f9ne484SPHWK8cZgtiOWN9+Ir8:0w3minglnON9FroHSY67RHXSdum/
TLSH
T1AA83ED115ACC5CBB127312CA553BE77590EF3C30DE224E1AF1BF1B98A3C5E95680B1A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2136	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292828427923645"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{A5AFF2BB-B63F-4F20-B68C-D7915DBE6F01}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe
896	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 896 wrote to memory of 1584	896	msedge.exe	84
PID 896 wrote to memory of 2136	896	msedge.exe	85
PID 896 wrote to memory of 3796	896	msedge.exe	86
PID 896 wrote to memory of 3796	896	msedge.exe	86
PID 896 wrote to memory of 3796	896	msedge.exe	86
PID 896 wrote to memory of 5108	896	msedge.exe	87
PID 896 wrote to memory of 5108	896	msedge.exe	87
PID 896 wrote to memory of 728	896	msedge.exe	89
PID 896 wrote to memory of 3536	896	msedge.exe	90
PID 896 wrote to memory of 728	896	msedge.exe	89
PID 896 wrote to memory of 728	896	msedge.exe	89
PID 896 wrote to memory of 3536	896	msedge.exe	90
PID 896 wrote to memory of 3536	896	msedge.exe	90
PID 896 wrote to memory of 1328	896	msedge.exe	91
PID 896 wrote to memory of 1728	896	msedge.exe	92
PID 896 wrote to memory of 1328	896	msedge.exe	91
PID 896 wrote to memory of 1328	896	msedge.exe	91
PID 896 wrote to memory of 1728	896	msedge.exe	92
PID 896 wrote to memory of 1728	896	msedge.exe	92
PID 896 wrote to memory of 1960	896	msedge.exe	96
PID 896 wrote to memory of 996	896	msedge.exe	97
PID 896 wrote to memory of 1960	896	msedge.exe	96
PID 896 wrote to memory of 996	896	msedge.exe	97
PID 896 wrote to memory of 4364	896	msedge.exe	99
PID 896 wrote to memory of 3668	896	msedge.exe	102
PID 896 wrote to memory of 3440	896	msedge.exe	103
PID 896 wrote to memory of 2560	896	msedge.exe	104
PID 896 wrote to memory of 4292	896	msedge.exe	105
PID 896 wrote to memory of 4292	896	msedge.exe	105
PID 896 wrote to memory of 2852	896	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8bba5c188,0x7ff8bba5c194,0x7ff8bba5c1a0
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,2890892845451147968,5239500060524952390,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,2033778180539236200,10856475131596109673,262144 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,6632963741498894522,4470659249924912743,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,17706257341452774154,8096702302951895552,2097152 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,9317419641788700041,16689612422483806975,2097152 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,17132201249403529677,4961960871587502739,2097152 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,12940461498431019493,7021949551935008288,2097152 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,4286405633136621056,7076386608685163451,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14969018931569816113,2338846744905841238,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,10581318839463961080,17531960038261286058,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,10581318839463961080,17531960038261286058,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,4480689240428253332,2894160654636454419,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,15510265736768158679,3136934258182660492,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=5984 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,10729351609030239557,16665170962094128134,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,9202177174007787020,2519571024038293191,524288 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5824,i,3731645075526865355,11936759333202838114,262144 --field-trial-handle=2328,i,16696426159486828203,11688116179361531902,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2852

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

32258e7e-604d-44ca-82ac-1efb70089375.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\32258e7e-604d-44ca-82ac-1efb70089375.tmp
Size 20KB
SHA256 8fada2a0e8f15322dfa647e167c3e3f25578061b3bf9560a45bc010e6758cf86
MD5 3ce76802a56dd84f9265a23589bc61bd
SHA1 5d9861dc4944ac7d399f4c96392b058bad438bc3
SHA512 b8e7b780125c83178bf76f896e2e48a10b39a5ae63240b276734d9c0d122222ee3b1b8be940c81ff7ed7675184c8e5e8cfc7da194c5c3669540afee68dc0d95e
SSDEEP 384:fZcIhsN8egJK5jtzX5od+2d6/Id+2CL9GOObjI9G6w7mdP:3haFOv3lCL9G29Mq
TLSH
T1F3927D316C285C778EE6B556F48B35134FF49077DBD86F84A6ECAB0C01966AC0316836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4ecc0bafa816d8034a825a24d9cf49959e70867d3cb368c4fb2832a3121adfca
MD5 5dcf3967ef5fe0a964905fa67e827d0e
SHA1 5eab1d2090d27b1f52399df09cc166dd7d2ef76e
SHA512 82a3eb3777e4dd694a9f6fb8f9886c9379b9ce5f6e11e408ee0253d521ca0a872fa347c5713da10df852d5b1a87165ebae1500e1ec5b571b17ae1f6c8e473a63
TLSH
T1E461B468CE524B95E7A00333DCE21A9435B584D40E1F8E5111BCAFFD6914B68FD76409
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 2ce9e7c7f5fe2697a36f22b83b39da9e8ae9fc463ff8473f650a4fbc37c15b3f
MD5 20f1ae78bb0406af68c0c7a8ab4ff4e9
SHA1 9239bf783b38428c1ac8767052a34ce3091ba9ac
SHA512 ff0b2a934690743c5bf7028687ec2382e45af16f0a0d4c0ea8a63faa55e8a4ecda3e54f64df5d04b2b97f77cf35e0ce1679bd7ab4a7da09c78fde5b4195e9b98
TLSH
T1C011BDB7C3E5856E8A0116F06A28AE2BCE2D0646831C3C1989D4EF27D7E3075E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 76b8e4141fbb4230743af60cbf10e51d8816254b8bb553809ca2fbbb4e48003a
MD5 d1622ccaf5e982711d4a30d9673a4de3
SHA1 ae56c1af856064df72b4719da99b367a963be441
SHA512 461d370d2460d76b01e8d8b0a21e7aa2d44693bf4f917eec4b0e8514f0e10046bef06d21e1ecef80e078183b01564327a8fe9825019a37ed2c22891eafdf1e9c
SSDEEP 192:sxZ5RIyM/jK1Ml8Mk6/f+si4YIdpdLHW6+WNGYHjlhA+IgrJ:sxZ5uM6/f+si4p9HbGW9
TLSH
T14442C6166A345977CCCBD209BA55BF53D6F55472E2900E84A9FC8A0C04E6BED231783F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6639c39b923d6042b59ce26640665d946e69516c88612165adffcefcb14820fb
MD5 a1645e89c561112f4e9b56479550e383
SHA1 8b5803b4067a52dfd16086429c4c51c4b0e64d61
SHA512 76ea211a098b7f7e2142f5cd7e1e6931686f0b7181bd30436e5569733329a553e4af9a9912ceb41aaa73f3325587c0e3788eb739da546ced11ab2cbc0de492e0
SSDEEP 192:sxZ5RIyM/jK1Ml8UQLk6/f+sTnYIdpHLHW6+WNGYHLYh8+Ig5GJ:sxZ5Wqg6/f+sTnprHbG50
TLSH
T18F52D6166A345977CCDBD209BA45BF53D6F55472E2A00E84A9FCCA0C04E6BED221783F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 839a6289831cf3b37f6d8781a53260fb726daf3fd92f80d46374d9f2307f3ec8
MD5 2dcfc05dc07dc2acba295c2243efd034
SHA1 6c8d38575e15d4ddcc88174e47b290d497047c1a
SHA512 f50733460bbed46970e8be87192e70aaa4e7614b5dce32da08bdfcb269e597a117c4d007c33ac19b9e72945ac92b946cda75c88e2044d9e5540ed4198090f0ed
SSDEEP 192:sxZ5RIyM/jK1Ml8Mk6/f+sTnYIdpdLHW6+WNGYH2XhA+Ig5GJ:sxZ5WM6/f+sTnp9HbGL0
TLSH
T13452C5166A345977CCDBD209BA45BF53D6F55472E2900E84AAFC8A0C04E6BED231383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c1f12352e233974ad3fe8ec796d5730a24a0d0fdaba68cf5469c320317ee8fe1
MD5 d0827c9d385eeb0cec256d8e5f1b92e4
SHA1 e2f7954b06d856ed435af27012b1071cca99503c
SHA512 624288587dea68545a9c5c6a83908fdf7979c54534d00e5652c48a26d8794fdceeee6c51ee6f7bb9411c94dfcc6151c26b559bc8917b3e9032a76e8c5669d4bd
SSDEEP 768:kvUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R3roVQ0k:kvUZYTMWvg0Pou1ja7eLZmRkhk
TLSH
T1EBD20A2F280CCB7E4F844E9DEC2A6F963ED801CB9A584D5447EA894C02C77EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 083b9ed0342bc50a0ed72c8c51ac384b5e3017834765edb24b95071be1d79339
MD5 611ea82096d39c128d0512c1c155ac39
SHA1 90bbd761d07367f67ae22086819a495243e237fe
SHA512 b8780b6f34ef4603e16ff1f71f03dfa6d2752b286712c2df81a04034f4edff2991fb4e900cbcc1fedbe12dd4dd483d29a23fb3347d903d0a0fbfafca3817c56a
SSDEEP 96:KA1eK2AseUKXqlmd+KuARvmK0UyiQAKliN:EWE1r9ny
TLSH
T177D1E51671BA03113C7D2A1C96B59B668E42B563302DA52B7FED00B54E26E209FFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593733.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593733.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 31cc9788c269c2d85e7c0e403c4525e81e919c039ada2c65e2499fba58b82b51
MD5 7f513ff21e85e0fb39d85f9ab54b740a
SHA1 a4a6a448e5bbf321e83d498915a67532c70f48f2
SHA512 2a1a4a21a56399224eafce9735a07f5b0a67ffc3ba2d3c3fcf0a36c5bab22ad965f2fbcbfac396f0de34acd2e5a11597d081bfb76fd503fb862aceeb638cab0e
SSDEEP 384:MZcIhsN8TgJK5jtzX5od+2d6/Id+2CL9GOObjI9G6w7mdP:ahVFOv3lCL9G29Mq
TLSH
T1F2927D31AC385C778EE6B556F48B35134FF49077DBD86F84A6ECAB0C019A6AC0316836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5f88a52ffed3f49670399d365597e69cd9aff57b3f8c8ff3c715a36c5a648180
MD5 d5f962cea0d67917a9ae91c32d82c199
SHA1 fc27dc816bb8c8f40a1720d702a1b2d768c50989
SHA512 76aeb8f72b61d4044674b1b3664dcecbff321f93fff57c7fed18d33c76730cf15cfe13730e806dd58c303baa4b7e185786eaa83312f2b323244d9e7888f8928e
SSDEEP 192:yONI61VWQmiUyXjgGX5Obd+j1+FdgX/t/aF3PXU6:yONI6WqgGX5od+2d6/w5XU6
TLSH
T18502B73568686C7BCEF2BD49B48B77135FA41067EA956B84DAEC1B1C009769C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 d29ce6a1ef01db45cbfc6cc605ae569ddcfe1d0066416d663193276a93342e50
MD5 bf06fd138c5a38c95b4e69a771674ef5
SHA1 6566f87e8a7b4e863fa895ac867b83432def41f8
SHA512 ebe7644c5d713acada6f6731b0cf4e70a2194a9a7e1419092b9713d2cd4fabed2061a1fc91cbcbcdf6ca0d3db466b2239c10911de36a92cf6b71ba79922a8bbf
SSDEEP 384:AiFiZcIizsN08TUNTUlIlegJK5jtzX5od+2d6/Id+2CLlGOObjI9G6w7mdP:bFQq1wgUFOv3lCLlG29Mq
TLSH
T1ABA26C335C68897BDEF6AA55F48B35038FF580B7DAD9AA84E2DC9B0C01975AC0316C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 01dc9bf0291ad92e97914e0f55c0a76a0a055635e87c79fd6852ee738bbc68cf
MD5 53afad6c30865b89180f2e24aaff6deb
SHA1 7cd59f79c21dfbc192183c6f07932232f8682a75
SHA512 e2dad514249c3c1073a5b16a53fd0be852efa16a6842fbd93b0a2381827b300201a92de8bdabbf80c00b04b051ab7b33fae0efe5b9ee0b9f629f0626369e9492
SSDEEP 192:eON961TWQmiUyMjvGX5Obd+j1+FdgX/oxFd+2CLrjJmQqxpU6:eON960TvGX5od+2d6/Id+2CL5GU6
TLSH
T17812F932A868AC378DE2B555F48735134FA55167EF897FC0D5EC2B1C01DB6AC231AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33d05dd1-29e6-4961-9c21-7953ecee5196.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\33d05dd1-29e6-4961-9c21-7953ecee5196.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b694774a2c5ca40d4fe60d0c8397cc715defe3b204af544d530c75df9e64354c
MD5 bf4686bbd8cc2871fefc35dcabdb2a4a
SHA1 e144e1777a9ce2ef422d99ed4cf0dc2fb5dbee81
SHA512 5241ad033408f41cf1374b99722ff956b05042521ebe77779ba1a3f644a0c1fd9f3c5eba9e0030d0e8165cbbe62906c31f2c69ff7b471cbaad5f82e6e4f716c6
TLSH
T149412B5CB6F95108B3F76F469BF6686E487BB9332E46D15D10010E4E0672A40DC72733
MD5 SHA1 SHA512 TLSH

Submit Download