87d21838352b99804c1f44b115ccd1a717e301c21fd4e0b0d54abedb3989a825

Analysis

max time kernel
148s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/07/2026, 18:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 34KB
Sample260723-w4b7macf43
SHA256 87d21838352b99804c1f44b115ccd1a717e301c21fd4e0b0d54abedb3989a825
MD5 0696676b4cdb609cee1da7a708f4ee93
SHA1 d0774c34860c41b72ae928b5b367d7bcfad4e1e2
SHA512 c477203170dc55c5fcfb6b14c1736f2f61bc5a20ea4aaff0696f708e23818ae57b3e09927577b29fccd4db9e2fbf948d6bcca2967142b8949ed5950a6cb3dea4
SSDEEP 384:EdEwd0fUXLHMtG+n5AwSvGIquQf6WXJET6Kb+ETsKRCqexIaAmDC4tcK0Ix2TVp2:KdT6HvEWnKexb5tcK0qRfni5pWv
TLSH
T1EDF2F9B2A5194C77027796EDA479B71EA893A20BCB8249C4B3FC43AC63D5EE4DC1350D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4692	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134293050497220671"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{FBE3D2A7-6EE7-479D-92D7-22A41F05A4C2}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 4736	4732	msedge.exe	86
PID 4732 wrote to memory of 4692	4732	msedge.exe	87
PID 4732 wrote to memory of 3048	4732	msedge.exe	88
PID 4732 wrote to memory of 3048	4732	msedge.exe	88
PID 4732 wrote to memory of 3048	4732	msedge.exe	88
PID 4732 wrote to memory of 2624	4732	msedge.exe	89
PID 4732 wrote to memory of 2624	4732	msedge.exe	89
PID 4732 wrote to memory of 5228	4732	msedge.exe	91
PID 4732 wrote to memory of 5228	4732	msedge.exe	91
PID 4732 wrote to memory of 5228	4732	msedge.exe	91
PID 4732 wrote to memory of 3468	4732	msedge.exe	90
PID 4732 wrote to memory of 3468	4732	msedge.exe	90
PID 4732 wrote to memory of 3468	4732	msedge.exe	90
PID 4732 wrote to memory of 3316	4732	msedge.exe	99
PID 4732 wrote to memory of 3316	4732	msedge.exe	99
PID 4732 wrote to memory of 3316	4732	msedge.exe	99
PID 4732 wrote to memory of 3540	4732	msedge.exe	106
PID 4732 wrote to memory of 3404	4732	msedge.exe	107
PID 4732 wrote to memory of 5460	4732	msedge.exe	108
PID 4732 wrote to memory of 5956	4732	msedge.exe	110
PID 4732 wrote to memory of 3452	4732	msedge.exe	109
PID 4732 wrote to memory of 5956	4732	msedge.exe	110
PID 4732 wrote to memory of 3452	4732	msedge.exe	109
PID 4732 wrote to memory of 3448	4732	msedge.exe	112
PID 4732 wrote to memory of 1256	4732	msedge.exe	115
PID 4732 wrote to memory of 1256	4732	msedge.exe	115
PID 4732 wrote to memory of 4500	4732	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe0437c188,0x7ffe0437c194,0x7ffe0437c1a0
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,1190385388545688249,7957587048026716073,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,11204423992509236933,4006954662555229142,262144 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,13833691442975937543,18316542110498196929,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=3128 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3516,i,10841184597750803919,10541050742308059155,2097152 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3520,i,11396675734511403033,13736130075172733592,2097152 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5244,i,3658540741386697486,13715194514490706621,2097152 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,16456839254470562182,13083800113280920923,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,5860142374588135140,15291248205425965180,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,4033555201281168785,17618310655738004153,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2100,i,7865509165603709474,15265021637669217233,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,10703181902394532117,17473888768700739653,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,3107589466247421639,15234242349380290970,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,3107589466247421639,15234242349380290970,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,5443913707586439979,3622385085290251744,524288 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6380,i,7447363944126847527,9347580797796186626,262144 --field-trial-handle=2344,i,11529354286399923225,5474035705583133895,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 62cb8b31770940e5634c18ef313b14e18b5d4f7687fc0747de33036352c7df9f
MD5 5f7f05fc80c2a6bb8dc74fb90b26710e
SHA1 7098994da97c3771cba94e2b006baf33175bc16a
SHA512 20338d58b6f8df4362fc0c61c51805b05f9d1f76cd6476e7d5e4ca169a775579a3ef415702209751c3c86cbf53df5ebd4c8fe736ed18b6c8867c3cdd1994f296
TLSH
T115E0EDBACC22E83B08FD0759A059875AE61017273A40898F3A3C82098FB462A46C5C5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 39143d19aed1c27d8b49a5097af88bcb6419710159f10db8c782a900b3fc0189
MD5 921d24d6c7a88a7046b81282fb0a1d60
SHA1 bf66c31f65a718c0665c1b43c09cc96adfc524c5
SHA512 d96ab073f0db1cf1aa464d1efa2249f0c503ebcdf2bc13d6c7fcca22d7807029d3f5afaf670badc8d9913a478b513598afc10b507f15148d8185e4b3ba084107
TLSH
T10081FB300852A1A3D393893181E85624347289E9FDD3DE9E21901CF2FCF6F73457B955
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a544.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a544.TMP
Size 3KB
SHA256 3e4f8750d707eaa358d916561b43a6981d9ae3a9335cd452e6af9f248f77f3af
MD5 5b0fa3f292b030e12455fb5e93ebc19b
SHA1 5e5e3498e87ccd6a0816b4c303f5002b02275dfb
SHA512 c36a956d258d335fde4223bdeb8927b0c96bf485585513d9313bd25538a2f6bbadea4a7ca738c2e50422b09a0424abc5f71d805a97285b41bbd2c417d9d3451b
TLSH
T18181FA30081291A3D393893181E85620347289E9FDD3EE9E21901CF2FCFAF73857B95A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 998e67cf73308b3703571182f5e8bfe69864efa5a37f779d75ed2adf0279b38e
MD5 2f50aa9f4714b3ecd0778e0d34ed24c5
SHA1 b5eb26d5a468d463c571ce466af44f640cf12f87
SHA512 0346f4b49336e9b071edc2f3ac13606fae3e8022b28d8cc69af1131ac4ba950d8aaf9b31764403c722e7783a5489d63d7eb49f4992a69e438e747cbe135f4b4e
SSDEEP 96:D1wEOLR+r7HSAYYaaij6xMtzgR7xoqvlvd8vTGwQ:D1wPLRiy/Yaaij6xMtMR7KqvlV8vTGT
TLSH
T1ABB18ABBC3D8876E881192F09A257E2BDD1D055B42383C568CF5AF5F63E24B1D20269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 685b2e4812ec91e7cf8247bb1d3e6a9b26f427e6a9a047dba0b577f99934e41f
MD5 ae49e765d3be59124f58249281de7359
SHA1 6f13b93d9196ef52bea8cea7ed535aedd0907e77
SHA512 518b4a754988c34f038df4383b5e2d4a7bc5603f3a21bced808df6de34d55910c28068d3a28b82ae2f50a99e21b701f2848a3a9f8af89b4edeba9dd9299f6078
SSDEEP 192:sxZxRVyMqZjK1Ml8Mkt/fVsAcZdDzodpHkHW6+WNGYv2I+wXvtIg53XJ:sxZx+Mt/fVsAczYEHbGu5l5
TLSH
T1E862C71A6A3499778CDBD219FA45BB93D6F91172D2905E44A9FC8A0C00E7BED231381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 bcd95bcd793e5b5a0beb2bd5e1cf56286af41413ebcfd1a3bea088306c345bd5
MD5 39819abf705a2fd4f912691c49c329ae
SHA1 499f50c7f534ee2dccf145ed7a63e5b9fcfeb0f7
SHA512 e3a376c8bf7d4567a19c9c6c21ed2b6fffbf389fa6d930094ae95b678529981688daa0ec9090bacb0fc3009f4325f6743da794a8efdbed0aaa1290942085d2d2
SSDEEP 192:sxZxRVyMqZjK1Ml8UQnkt/fVsAcZdDzodpHkHW6+WNGYv2I+9XvtIg53XJ:sxZx+qkt/fVsAczYEHbGT5l5
TLSH
T1B762D81A6A3499778CDBD219FA45BB93D2F91173D2905E4469FC8A0C00E7BED231381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f0c921775354bc2fad93a967056a61565928c4bb5ab6e2503b1e738e568cb609
MD5 2881750898b3dea3ad60544de4fb08ba
SHA1 6eb9d5345aedefd56dfeab1ce97e930a696e0a6e
SHA512 573bcf755113e63292408c77bf6c62c64a61d8a01990c287a41b7084fce487e648a1ef4b50505c32f07d2632ea2cbd7fde2917f2a21bdc148ea0767925b57fa6
SSDEEP 192:sxZxRVyMqZjK1Ml8Mkt/fVsAcZdDzodpHkHW6+WNGYv2s+XvZIg53XJ:sxZxmMt/fVsAczYEHbGV9l5
TLSH
T1B362C8166A3499778CDBD219FA45BF53D6F91173A2905E44A9FC8A0C00E7BED231381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 04cbaf77faa3c05cc52f91303f0aa8dc24d7af251fafff8345bae4b6918dba3f
MD5 65fb4290a885dca872c2af0ea000ddb6
SHA1 871d82fe66fbcf1c8df9297c8363a9deb14cac66
SHA512 945b504f05f884d492848ee132d46849aebfa98600b7428de40e0f1bfaefe06f88797eba7b0f9bb24e2602f99648604f6be321658fb998c811776d3da284b486
SSDEEP 192:sxZ6RVyMqZjK1Ml8Mkt/fVsswyaZdvzodpHkHW6+WNGYvIC+XvZIgjXJ:sxZ6mMt/fVsswyazkEHbGr9j5
TLSH
T1DD62D8166A3859778CDBD219FA45BF53D6F91173A2905E44A9FCCB0C00E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9e2ea404da9fe244ddcea48fc402a42fa336605eb883b1c6130dad70a2244fcf
MD5 c73bd2d56297882826b6a674a7d323a4
SHA1 33e611e057040201d2dfa4bfdd2ba7fc0f0ec5f7
SHA512 ed710e00f3e8654bf7e5dab006c10e858854898ff0ddab324c4079deed318a1cfd2666a37343d2581df9670dd8ae24fb27fabb674b4137b45a110bbd43e323bb
SSDEEP 96:Ko7iKcsW23iKoM7LKKc026WEKjKkAAK9Gq+xGKqkJ7yKkc++dmKWI94gK966GbGp:05ppxnY753RNBvRJJdt7p5J9x9dD
TLSH
T113B2795A703E0211397E2988B79696364F4235A37058E4BF7FB814A14F67E224CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 1cf924b886a30bf0aec90422bb49e8d881a09bd890e20007120a65f25ddf54ab
MD5 d5a3731bb9f1b0d5263343886b832b24
SHA1 c1477c95ffaf7d6b8b67442d5558a00a0a753d6e
SHA512 ef4f11d36d78eb7499185dc58c7cafd13bd6aed59442b025a31f04d4bb7ded98811ee2b64381e9fafb03283f069faed344b918793b1d913802c3c237c2dbd0b3
SSDEEP 384:nhiFiZcIRD3sNf8TUNTUlI4OQckCrgCephiftGm3p9JLenKsb3Uty/7IgI:IFQx3iwgDkCAoGm3p98KsbI
TLSH
T18BC23977E864CABBFDEB4B86B74A7A039EE44163D6DC9AC4D5D85E0C009719D030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 8470b1e68d244c25f1d968ddac7e3cda976b9fc39fd2c12f0e9fd1df37791ad2
MD5 64075e08d4416787ca05785c44306988
SHA1 a53a87cc4b13fe6110576b25da8550a87a3e6d0c
SHA512 e8c71ca1744d54f1febeb94865426ea215c7c308d395a28b996098c70f0bf7333a268abf6e4d7434b960d04a068b1a854d3d5b00cdb1d096408f3f93e12fdc19
SSDEEP 768:p4Fccps3ywgbkUPhoGm3p9lKsbI8p03Lj:+s3Un43LbI8p03Lj
TLSH
T10DC25B37E868CABBFDE74B99A64A7903DEE4416386DC9AD4D6DC1E0C009B09D430BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 051d712b130070f85224e3179755a24ba979cb9eba6ce3784308ba2e47b0f457
MD5 c40e132c25a7fc15d2708cc9c14fcbf4
SHA1 6ab31061901a6be9024ecc11ee7c23edc818c73e
SHA512 3444df234123ac7f218c7e873c4788b8407d339100456f98970acb3e8e43a10d8539ab2e4cea48b337333f44cc71515b0002252c60e43ccc746159cccedf6163
SSDEEP 384:ngiFiZcIx3sNf8TUNTUlI4OQckCrUCephiftGm3p9JLmnKsb3Uty/7IgI:7FQx3iwgDkiAoGm3p9sKsbI
TLSH
T1AAC24A77E864CABBFDEB4A85B74A7A039EE44163D6DC9AC4D5DC5E0C009719D030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b60ff314b13eb6987c1a69ccc65277d6db4ef0861af048c3287aea090e455e93
MD5 d525d292b9fd5213558adfafc951c569
SHA1 a9dd99b948eed815d3dfc9d72a9e920201932d0d
SHA512 01d631a6cec4bc4a533b888ba2e58bbb1c7ff68f3a282ca35d2466f28239a320791df575a31d8ee0a8a042050a3c698dbbe43b34905794a26bea4926482b5bcc
SSDEEP 384:ngiF9CcmyWCs3sNf8TUNTUlI43QckCrUCephiftGm3p9JLmnKsb3Uty/7Igx:7Fccps3iwg6kiAoGm3p9sKsbx
TLSH
T18BB23A37E864CAB7EDE74B89A74A7A43DEE44163CA9C9AD4D9D80E0C019B1DD030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 037ac924fdd86aa3b4b1916eefc225d9806626b2b00257455c4c56591434539a
MD5 31258c584e592c8e3805eb5944f88220
SHA1 781493cddcba72b158d283ddb97b00013aa7bab0
SHA512 c7357782354c6bcaaba13e7ac094f5c4788f8af6ec0428ba0d7abb481d74d1b845e4972e71024ab062bfdedf56f02b6b86a3834ac48bc6eba850fdfa7832a9e2
SSDEEP 384:npfiF9CcmyWCs3sNf8TUNTUlI4EQckCrUCephiftGm3p9JLmnKsb3Uty/7Ig4:pqFccps3iwgBkiAoGm3p9sKsb4
TLSH
T1F9B23A37E854CAB7EDE74B89B74A3943DEE44163CA9C9AD4D9D81E0C019B1DD030BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 d9e6e1d21dde14281b4b7d6d1d4f54b344ca2005bed3816e2f14f27af205e481
MD5 77fe3fe6389db47bc2fba1b3d392376b
SHA1 5c80f66ad84a58a662cebc2bc7023dfa6352b7f9
SHA512 42f60cc9a322d6d9bd6147803feb2c161e4d9b4fcd6acc2ffb3cf12356da6333b1373f59677dc34065b5150164a3359e4f5f9ac7eda8926a4a2d0595e4dd4a8a
SSDEEP 384:npliF9CcmyWCs3sNu8TUNTUlIm2QckCr9lOKphiftGm3pf0pCe4KV8p03LBty/7M:psFccps3bwgbkU0koGm3pfDI8p03Lj
TLSH
T18BB25C36E858CABBFDE74F89B75E7A03DEE4116786D899D4DAD84D0C00971DD0307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a7d82917317d19c158c888aa5adb48ca00f194217baee17b1974fc9a870b35cd
MD5 8a40d36106dbbc4d37aeffbabbf46dba
SHA1 1f90d44c80ea5fded7efcdc4c159aa156a36775f
SHA512 091c4e9b99be152fc416b9e328406b619ef1292c4f2d91d6edeeac8a6bfab9fe9d286fb8b2797a655dc0762cc1e9dbc609248c151dceeedd141980db0f46d7e2
TLSH
T1F641E959A6F91108F3B36F5A9BF6746E583EB9372F4BD09D10010D4E0A66F40C861777
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3448-279-0x000002011E2E0000-0x000002011F2E0000-memory.dmp

Download