32e07e8d8dedc232ccf0e32f47211740fee2fde0f2c72dbcf18fe9592b85de79

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 24KB
Sample260728-amyteavxes
SHA256 32e07e8d8dedc232ccf0e32f47211740fee2fde0f2c72dbcf18fe9592b85de79
MD5 3dfa79b2bd2626c12578f990a8e71294
SHA1 0d6afc733cd23db136d934a553043ac5a14e4a25
SHA512 fd74ab9b915369577fb2131e3c3e08c20f8276cf5d72e83fc1edd1ce126c6b46c83e9eb12bdbfdb6f9939368f28c80e2cc5308863e6da5e3cf26e330370268bf
SSDEEP 384:Trh6vTXFDUFS0F8QxSyRnsYB12reDzScmiy05M:TrMrXFDUFS0F8QxSyRnsYurAzSTZ
TLSH
T112B2951A56F311122047A1A97BE32B866B34C00BD64EC91D3BFC47989F87D9CCA73B59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296716524500516"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{1BB58F40-052A-4768-8F06-F09833279DB8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2432	msedge.exe
2432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 4596	4400	msedge.exe	86
PID 4400 wrote to memory of 3984	4400	msedge.exe	87
PID 4400 wrote to memory of 1128	4400	msedge.exe	88
PID 4400 wrote to memory of 1128	4400	msedge.exe	88
PID 4400 wrote to memory of 1128	4400	msedge.exe	88
PID 4400 wrote to memory of 4632	4400	msedge.exe	89
PID 4400 wrote to memory of 4632	4400	msedge.exe	89
PID 4400 wrote to memory of 3972	4400	msedge.exe	91
PID 4400 wrote to memory of 3972	4400	msedge.exe	91
PID 4400 wrote to memory of 752	4400	msedge.exe	92
PID 4400 wrote to memory of 3972	4400	msedge.exe	91
PID 4400 wrote to memory of 752	4400	msedge.exe	92
PID 4400 wrote to memory of 752	4400	msedge.exe	92
PID 4400 wrote to memory of 4560	4400	msedge.exe	93
PID 4400 wrote to memory of 4696	4400	msedge.exe	94
PID 4400 wrote to memory of 4560	4400	msedge.exe	93
PID 4400 wrote to memory of 4560	4400	msedge.exe	93
PID 4400 wrote to memory of 4696	4400	msedge.exe	94
PID 4400 wrote to memory of 4696	4400	msedge.exe	94
PID 4400 wrote to memory of 924	4400	msedge.exe	97
PID 4400 wrote to memory of 924	4400	msedge.exe	97
PID 4400 wrote to memory of 2368	4400	msedge.exe	98
PID 4400 wrote to memory of 2368	4400	msedge.exe	98
PID 4400 wrote to memory of 2400	4400	msedge.exe	100
PID 4400 wrote to memory of 3036	4400	msedge.exe	104
PID 4400 wrote to memory of 3132	4400	msedge.exe	105
PID 4400 wrote to memory of 1172	4400	msedge.exe	106
PID 4400 wrote to memory of 3580	4400	msedge.exe	107
PID 4400 wrote to memory of 3580	4400	msedge.exe	107
PID 4400 wrote to memory of 2432	4400	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x234,0x7ff80d4ec188,0x7ff80d4ec194,0x7ff80d4ec1a0
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,7802510393637188944,10767320521347258390,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1924,i,6506254180681555363,15042335335977634480,262144 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=1792 /prefetch:2
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,10175954451100429351,684732720064043990,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,11037105690389603834,13927130755466940265,2097152 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,147962807912038941,17148409315160208351,2097152 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,4943229861299058182,3942275033847462153,2097152 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,2353393289338794891,6500107309413073544,2097152 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,5204503058042842791,18339043539261380549,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,4255162722682908611,7995452114698189251,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,12896334574178742319,15948016088098664156,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,12896334574178742319,15948016088098664156,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,12532922059629367036,16900737092315506145,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,4350574312918387091,1603985949557144910,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,12784669411328917475,6976971360950750991,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,14375881427371905400,11615000803089109696,524288 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6496,i,6401580702120705323,6766430641265425065,262144 --field-trial-handle=2248,i,12346112039647296010,8066474451114304733,262144 --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2432

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1a6da09008e363e31ba7e2ac30c42612e9b2519073b638900d2fa09f3f6d8f52
MD5 05ed14192f58ae44d7b2138031bb0b1b
SHA1 d37d6984ac15122b9f5ea994c1c12009502afad0
SHA512 2417b883dbc372d6fbb409b026520fa79baee98f8cff9b2f4d7e1f436f6afaccd46566e053e4654eece32246ad7a09bdf2e080078217707e6a6bce6c59dd15d5
TLSH
T1A9410BB4363242C7D34D133160D176D236FA81530B136F1236A4A677EA29BE6F7F2218
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 5cd6752d96fde4171cedb336df9943df70a1e51d4244cb43a221eb880e9a97c0
MD5 a03fdd15801398cd86b688c858175863
SHA1 acf27aa51828879b17fe5ef06c50ded13353c896
SHA512 98a945018559fdd3cc572d36d62378191cdda6c6c185b5d49146444adf3662c0537eefd90c2e3146f60440920a5af73460f05fbbb43f45917f7489fb5c5b9e55
TLSH
T1DE115BB3C7D585AE895116F06A24AE1BDE2D0A05821C7C1999D4EF1793E3065E10255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0eaaa8601c6fbc2d4aadd41ce2f5d1be4a3e299ef098a79b370338c95bc9adce
MD5 61f52ca80d6f7bf7a92a84ac670dea53
SHA1 ca17f79907b66b560a3852cb4fa8a46afc79ea26
SHA512 a769e3be5d0455c3aaf9370ed839cdf651012714757b2e810a61da810e84a4a000859e682fdcebc65bad15a553c0adbee8bd66f66db5f46ce5cc56bfd63529e0
SSDEEP 192:sxZAROyM/jK1Ml8Mkh/fAXsal7W/IdpdtHW6+WNGY4wGm1IgrJ:sxZAIMh/fqsQCwzHbGg9
TLSH
T15942E9166A345977CCDBD209FA55BF53D6F91472E2901E48A9FCCA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 03900d9159201f6f2c436537580e9ad2b0464b8c3def91f67899c8efff7352d5
MD5 2b50197757c053b8d1f58dc4c22d9b84
SHA1 232d038ec17105aebf74cf05ad3b37162e50b7b6
SHA512 95d2a765b5267308ee8896e3bff568e337cb71a1e337859258166d659cf865c02b4bd964ddb28a4b1312b59753123eb0f43d1dfa83179d584cfa327689fcad2b
SSDEEP 192:sxZAROyM/jK1Ml8UQEkh/fAXs9l7k/IdpHtHW6+WNGY47tPIA1Ig5vJ:sxZAIqfh/fqsvYwNHbGtdT
TLSH
T1EA52E8166A3459B7CCDBD209FA517F53D6F91472E2901E48A9FCCA0C05E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 24a3a7f4b28b22d82cb3a5186b1106a005374bceb58587a4c222b4f45382b871
MD5 c42434781704f24312a782d072276299
SHA1 9df356f40570c4705be27aecdb99978ebcd1c6f1
SHA512 e133616aece8d03b9b011c9dfe493bf81a6dd4c57696dcdfa0e8c329760db28d04dce819b0446b5ba0b858da8623c1d11532201dd7af15a7293437a25fbc0bc7
SSDEEP 768:EK8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdHroak0Unh:EK8iJPNWvx76ru1jahALocdUuUh
TLSH
T16CD2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EE512699B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 00ee352c9ceaf8e4257519627e567ab9e407cf41b9069754ab0ad070933d4c22
MD5 d298cea3eb11e7f7020045b226c82c9c
SHA1 b56ec01118c3ae3fe084fe3a211511b114ff8653
SHA512 4408dfe3aa2f57dded69ceb32dd493cfd7ab3be74f7e5abd7383ffc34b81346830184e3ad54d7acf3dfcd43afd5adaf15674e089480c3b7c00048a787feccdcf
SSDEEP 96:KPVZuKSYimz2Kg8LWIKHKyylUJ1vL/grjuzttgK11tXg59te3A:GA5BL/ylUJ1vL/SjuJth1tXa9te3A
TLSH
T1E0C1171673BF16032D3D2918A3E08B275786B1B37058A42BBB6910B54E66E351CFCCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c296ab67-2533-42ba-8702-1ed61c26365b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c296ab67-2533-42ba-8702-1ed61c26365b.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3e6ca705-dfa7-4ded-8c1d-c3178f804c7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3e6ca705-dfa7-4ded-8c1d-c3178f804c7e.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 db65a2d2e76e10b106a1085691477ea2ee832ad502428b0df9347ba35ecd9916
MD5 ef5651d86ce8d5759859a52dfa03775e
SHA1 790df3084ff8c709184ea613e4bbf51a158b66e7
SHA512 b6e30e74a6b102eed6d6c3b4c81db1746a8d81cfa412276944554d8e00f3b47f46a9ab18d8cafc6c42f7e1d80b24b3ac685a7392e443be424972b3001282966d
SSDEEP 384:3ZcIhsNF0lElnkOHK/FkROObjI9G6w7CA:/hKB0GR29MF
TLSH
T19E92A036AC345C769DA3A912F5863A135EF8913BD7DC2FC8E5DDA70C09DA49C0307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 c1ec483e44683f3d5f1b83fbbb010ff12bceb1300cc83864229c328e6f8fa704
MD5 609c9d71ab184f2a96c16de191a3e0c2
SHA1 73e9184b1915c71ca6606183ff9b46e73d23be50
SHA512 7b8492f9b6e17bcd03af5118d7bebfdf3b2387ad1dabf508c424ca37900c22e5cd96aa944ed36ba34abe4749705ea7872b04ad7f1fbebb62a8c6d440ade47e6b
SSDEEP 384:9iFiZcIFzsNf8TUNTUlIlhlElnkOHK/FnROObjI9G6w7CA:0FQ9mwgAB0lR29MF
TLSH
T1BAA28D339C64897AAEA79E51F58636139EF8917BC7D86F88F2DC9B0C059B09C0307C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 14b2191de388e3a78e9b5dc7286a7f0d30a4a93255865d18e0fcdbf386c8118a
MD5 eb956ccd9a6a46e439bec71d1424c1d3
SHA1 8915d662a64317d064aa636d2dc966d2f5e71bbe
SHA512 134f4a7e9b11d5a926ba6de63787282ad979cf6a738794af6fe620c0e32b59bd0c197f60619a376da71fad34b584b0d02fafafe45378bb46d90f8b26969a3cce
SSDEEP 384:UZcIhsNFhlElnkOHK/FkROObjI9G6w7CA:ShjB0GR29MF
TLSH
T16992AF32AC345C769DA3A912F5863A135EF8913BD7DC2F88E5DCA70C09DA49C0307916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d31bffd3315a1a441c9fe6fecb13e5d009ad78eb053f245387887229f399f612
MD5 fac3f7163054acfc3f32288667b22d67
SHA1 cd10dc336d983adb9236beda6418919c76e8a780
SHA512 151f9f4603f4278b6a789f7a944659266c7bc48b619b21e14a3281b3d8d2f22ab85edfedeccfd15175c6346b9756220154ec3f79832a6f6de72cb185d026c2ae
SSDEEP 96:ZqONkNQsjpfmUTmDK5ih/cIPURHl8h4otop5f5D5BhPwivh50xy0SFYKkAxvYyst:gONR6kDfQmiUyxfZ903HHNQi75U6
TLSH
T1EC02F935AC786CBB8EA3AE46F48737175FA5113BEAD52F94D9E81B1C04D724C1306827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 58b57d03f6920f4a69ae05fad63596aa1f8e9fbb246b1189eb8d641f02e1f51f
MD5 b327f6481bb5f9feb4ef0aabc48bc0fb
SHA1 72acc1c6c50cfeaa63e6eee59f76162a191f09c8
SHA512 7a4300316c95eed070f8b9e0491bc887b29243b7243bb4e564edeab7dc90bcea6647f9daa1e08737f6376f15696886ee5fa21781eefe4fa8769926a143b3ef12
SSDEEP 96:1qONkMQsjpfmUT5K5ih/cIPURHl8h4otop5faD5BVPwivh50xy0SFYKkAxvYysHU:MONY6kYQmiUyEfV903HHK8EF6cROqlU6
TLSH
T1681229366878AC7B5DD3A851F48336130EA9912BEBC87F95D5DC2B1C05DF198130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08e90736-0ae7-4acb-aae5-98315c806ebe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\08e90736-0ae7-4acb-aae5-98315c806ebe.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 455283481832d83fa8f78035ab741f3a45cf9b4c487c06b5d6c2a1f978050048
MD5 fa52e1a66de94d84e64eba09ee732403
SHA1 08559408d5c9024ba0ecc5dcc13169d637ed55c2
SHA512 a21f2b1800255feb8fc463f16aefaf3e1b083a3096b8422b789aca601e2dcc7d2cf3680c576ddfea84ff719da327d93ce5be21656d7454ff37b9d8f53eed2233
TLSH
T1CE41295DAAE91148B3B76F16ABF6A86E487E7D672B06C45D00110E4F0A73F40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download