62ae47617c8bff81257185b6414881199c872f4278a823ce61bdca3d4ea20094

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260729-ppalxsvalh
SHA256 62ae47617c8bff81257185b6414881199c872f4278a823ce61bdca3d4ea20094
MD5 cdf9d8cb46543fae3550084b17359368
SHA1 ac4f9ef4a8abe9f6baa1145f46dafa9b38354f4b
SHA512 f01ef4595cc856e7407744469ddb3887207cb3581ea13039eafcb5b03c6d758b4682ab4e53ae25cea22ad5288ecc29c51f79766977998c6de4589f6f06754ab1
TLSH
T1B75164ABDFA39D562823507C2BBB924C768060AB8811DF20B7ED70249FC069909263C9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
404	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298018084879828"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{A78AE3C6-96E9-4F53-B070-7AAC9AB1B1FF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3364	msedge.exe
3364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1156 wrote to memory of 3796	1156	msedge.exe	85
PID 1156 wrote to memory of 404	1156	msedge.exe	86
PID 1156 wrote to memory of 4152	1156	msedge.exe	87
PID 1156 wrote to memory of 4152	1156	msedge.exe	87
PID 1156 wrote to memory of 4152	1156	msedge.exe	87
PID 1156 wrote to memory of 3228	1156	msedge.exe	89
PID 1156 wrote to memory of 3228	1156	msedge.exe	89
PID 1156 wrote to memory of 4456	1156	msedge.exe	90
PID 1156 wrote to memory of 4456	1156	msedge.exe	90
PID 1156 wrote to memory of 3920	1156	msedge.exe	91
PID 1156 wrote to memory of 4456	1156	msedge.exe	90
PID 1156 wrote to memory of 3920	1156	msedge.exe	91
PID 1156 wrote to memory of 3920	1156	msedge.exe	91
PID 1156 wrote to memory of 1876	1156	msedge.exe	92
PID 1156 wrote to memory of 1876	1156	msedge.exe	92
PID 1156 wrote to memory of 1876	1156	msedge.exe	92
PID 1156 wrote to memory of 2956	1156	msedge.exe	93
PID 1156 wrote to memory of 2956	1156	msedge.exe	93
PID 1156 wrote to memory of 2956	1156	msedge.exe	93
PID 1156 wrote to memory of 4104	1156	msedge.exe	97
PID 1156 wrote to memory of 4104	1156	msedge.exe	97
PID 1156 wrote to memory of 2316	1156	msedge.exe	98
PID 1156 wrote to memory of 2316	1156	msedge.exe	98
PID 1156 wrote to memory of 1968	1156	msedge.exe	100
PID 1156 wrote to memory of 1096	1156	msedge.exe	104
PID 1156 wrote to memory of 5064	1156	msedge.exe	105
PID 1156 wrote to memory of 2908	1156	msedge.exe	106
PID 1156 wrote to memory of 3380	1156	msedge.exe	113
PID 1156 wrote to memory of 3380	1156	msedge.exe	113
PID 1156 wrote to memory of 3832	1156	msedge.exe	114
PID 1156 wrote to memory of 3832	1156	msedge.exe	114
PID 1156 wrote to memory of 3364	1156	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffa5408c188,0x7ffa5408c194,0x7ffa5408c1a0
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,2917523159497894557,4557884168735503241,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,14481697518293920939,4633302231891017745,262144 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,11201535107010254843,2687156926288853486,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:8
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,1976753363942102270,12321990184045967637,2097152 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,6131824745992757590,15769901535951627308,2097152 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,11137430838505640807,6219603007873079953,2097152 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,1342823452370640348,5784662642242673669,2097152 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,1178900981860321598,8899244999368590666,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,17861729126735743638,293390762997751318,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,14104361244241392905,1447216769784182474,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,14104361244241392905,1447216769784182474,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,4123918151750436519,3782881463311451847,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,6904364964735395152,4366405261172606027,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,2478070901970189080,9374430306883851183,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3400,i,16192325124949889226,3229427663474531988,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,6687241116242593689,3084451805373784796,524288 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5212,i,17845643432544081015,16399008985320350471,262144 --field-trial-handle=2268,i,18208555812522100311,11334604169246616714,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a612efa1a3f1d4ee262abb96d63f3b4a31c2ad6c544574be7246db0f52212e1d
MD5 e0045423d265fbb4204e2ccf9cf4e729
SHA1 5cd430c76a965b7d49eb6f686349a92180871674
SHA512 e0fe72d7795acfb0a22d0da2bf0fda4779e67429fc7f0868abc95950b557948a8b07360e9f45a7446cbe79ca28b10086e9e6f63cce1bc4e718efef8261f1e913
TLSH
T11BD09B55754D7415D31B01315411E360955A4462A172D2457120440DB97C81857E5257
MD5 SHA1 SHA512 TLSH

Submit Download

23e76f85-a927-4dcf-b31b-09b4480769b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23e76f85-a927-4dcf-b31b-09b4480769b9.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 588b9f1c837aba8002b7cedf97fbb0cc50fc47f8fa3f9cc13b4c05928725993d
MD5 b00fe7f3e5065d1c35d454bac92e4218
SHA1 0dcb81066627f46b7004153178ecf6088a88f08c
SHA512 f4b2cbde636c8d41580f44d1fd1981361627c1c5d57c1af6ebd8498d7ae6d2120204d6efcda0b4a622626a67d2dcbdffa454f2c3c907fc57117745f5a780a5df
TLSH
T13B714DF912AB34A1D7248230E4D306FDB47B4455DB237E51C100ADBCAAC6BD993EEC18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588ab7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588ab7.TMP
Size 3KB
SHA256 dab53ba425f0602c46cda6fed00a34a81cda4fb246e2e5371b125abac3b0b73d
MD5 465e59cde518c7e1c0146fc72a1ff209
SHA1 47bb0fb2fbf76534669ca79627c2a2c1ad444917
SHA512 fc72cb21c436a3e216f4995b1e3206663715998477870f834d25c9b5facc20335c574166cd9f00e132e66bd453d8c09bbdf96eb6510ca15cde5eed9e15e24585
TLSH
T1A3714DF912AB34A1D7248230E4D306FDB47B4095DB237E51C1009DBCAAC6BD993EEC58
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1bc33829f297afe1fc6c0da0b741cc05cbf484b2a85c1cdc436d124abd66dda2
MD5 d5d7034057a736e71ac2dab0a3ddf130
SHA1 28b07b9798ef31414a200dfbe864c26db7e08e09
SHA512 6218b6ae942475d3167ce6e2608795b0ac09f8391a17a9bc72de305a8e4e1875a1939f1028f2b64fa345ffa704f6eaf13345c897781a88360178c5b78f10d489
TLSH
T1F7112BF7C3D5856E895116F06A28AE1BCE1D0505831C7D15C5D4EF2B93E3465D10295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a85b69eb8e83e6e768c8f3670974aa1a1bea40dafaa25888966bbcd74ef2854e
MD5 b842c84823787d57d49ac1cc312c05e1
SHA1 1c3cbc2c147dedd3bc9a300ce5f7f600c23d4bde
SHA512 2112b28dee80565103b8e9ed0648ffec1ed82bfaabb600eb865ee57ab5f01e875eb73006b3a4f36f7f477dcd729215176cc01d5f4f16d685a45a2eb05133873e
SSDEEP 192:sxZfRGyM/jK1Ml8MkF/fHXsYLYIdpdRHW6+WNGYHjIuzIgrJ:sxZfYMF/f3sYLpPHbGK9
TLSH
T11542D7166B345977CCCBD209FA557B53D6F94572E2900E44A9FCCA0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 2f1194d372a7f9784ed4e9cb2e758c166de6a0ae1c8f90f933e21c42364703de
MD5 d8a9f7a7b213d1b452fe11b560bf2d88
SHA1 7db230e4e1d62a06c635a263583769759bfdd160
SHA512 f8eb88bc1ae6bcb18b469bf44c461c53924146d347718fa0e2057ec320b09030ce36f10bc9538bf545a73f8a05c8a36ec7819eb33e008167e7514f4f91b10efb
SSDEEP 192:sxZfRGyM/jK1Ml8UQBkF/fHXs7MRYIdpHRHW6+WNGYHNDfqzIg5TJ:sxZf4qSF/f3s74pxHbGFr
TLSH
T16952D816AA345977CCDBD209FA567B53D6F94472E2904E44A9FCCA0C00E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b17275e2c174ffe093ecac6072fa8e5251b2135b676b2987a79ebcaadf9d308f
MD5 d0cac7d1da79339231c4ba11a180f294
SHA1 f29dad205fecb659ffe85c26dffdd52e2e8a85de
SHA512 9065c27ac99531be8d3daa53e42fb48ed60191eba4624556055821be059ee17499655176b5528bf04d4b8bc17afcda09286774ab69d7857a0230ca3ac74a2126
SSDEEP 192:sxZfRGyM/jK1Ml8MkF/fHXs7MRYIdpHRHW6+WNGYHNDfuzIg5TJ:sxZf4MF/f3s74pxHbGJr
TLSH
T11B52D8166A345977CCCBD209FA567F53D6F95472E2900E44A9FCCA0C04E6AED231382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5975080370d5824cec659d45f56af912afd05882f8d6a93679a61a6313e28054
MD5 a5aa4224e79dc9c783206f48bd6b9c29
SHA1 816d31872a792546abacebfe66fd49148a583c95
SHA512 feae4d25ec1fd732b8aabcb4e3ff6f48294abe9be0dddc7d3abad54409775485781cc499b859dc51d0b2aaa5372fe25731a85dbcd535d4d148f648999c3a9fb0
SSDEEP 768:CpUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4R5roVC0p:CpUZYTMWvg0Pou1ja7eLZmRyzp
TLSH
T132D20B2F280CCB7E4F844E5DEC2A6F963ED801CB9A584D5447EA894C03CB6EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 43c6facaee098d2bee35c0ba74d95290f982cd48a1120b9370b9e5e10f08169f
MD5 bb873713034eadfd24587a44370be02e
SHA1 02cc39b0ab24ded2e122969e4fe892a78e8c4ab3
SHA512 70442a271dc78c1ca0c63fae039891616af87ec8dc461f919d63f9da6587427514eaaef4adad67c6cc69e55925a52458e4e8592d0a5f367bdba196390d325d8c
SSDEEP 96:KA1eK2Aoz2Ksom9WB9v3Hm1XoNX+TKvKX4Tz8UDS6wqUti+sOSb1iTqXmbKviXQO:E0BFlf
TLSH
T19EB1280372B711433C3D2908A2A9D73A4F86F1933424A46B7FA544B25E66E740DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e6df5cac-21c0-48ba-893f-a126cbcdbf26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e6df5cac-21c0-48ba-893f-a126cbcdbf26.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9e9b4661d13fe68f52954e0cdabb890d1081e8f361eb47f1230e72aa0096f6a9
MD5 299b72b10c1d850fd3e13eaf603aa1d5
SHA1 f5fd6881842f0d449d6ac21faee53874ae4a0db7
SHA512 8b3e526aa707c08e3586c53a67bbd80c500c51f98e4010d08539ffae7d475322ec1d0a3cd875116ae8f25773dffda399b936edcf676354ec9bc0ed008dfbb0ea
SSDEEP 384:DZcIhsNUgbiwrinzX5od+KOrElScjmwRR:bhgijbOzOrEl1j9R
TLSH
T163928D33AD29AC769AE7E145F88732138FA89173D7C46F80D5EC6B1C01D66AC2317D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 97f609625e258c14d875ce1be41962a44c701324bb7694f0d9e3f3f0f4dad0ae
MD5 2424a30e9aafe64fe6c8e82c48c076ea
SHA1 73e3778d78e75d0ff2ec83f30c098ae282b68e0f
SHA512 c2f673b58e4067cb928a1c868d8174a8ea43068c8df2b0ec16cdb2cfde781a16f3293abe22145e2434ec801d4adc96f90ec12ff66984a8c328a7868f961db7f5
SSDEEP 384:LiFiZcIizsNc8TUNTUlIlpbiwrinzX5od+KOrGlScjmwRR:mFQqJwgrijbOzOrGl1j9R
TLSH
T1BDA26C335958987AEEE79645F98632138FB851B3DAC4AE80E2DC6B1C01D71AC130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6779ac91802a3fc907cfdd17229aaa54fb01d5a669df1e9a00325a6bc9037819
MD5 5e8d3790cb159ddff4a1b232a0033ef6
SHA1 23b54d61be928a24e45bb6cc608ea0b1fae776d7
SHA512 adde89109547ac47cc4f3b9abe9559b08594e4994b48397dfb345c1f7c4c454f966a6e3f2dcef21ed787cc9bbf52f0aa1b3f9306f2e566129a9a317b66595cb9
SSDEEP 192:yONc61VWQmiUyTmgGX5Obd+juOFmI/aY3s5U6:yONc6WLgGX5od+KO6z5U6
TLSH
T11A02D73569686C7B8EF3BE49F58737135FA8217BEA906F84D6E81B1C00D765C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 fec8e4d45565015a2e8a4702e1c975499393f926d29c8415eb395a10f3994922
MD5 bdd189bfc0ec3ffe122e2cf9d30696ef
SHA1 010a6c8a12d937d3e973c894a6f3061ae6544065
SHA512 0894b41769b36663e5a2473cafcd729a05d677f7e04ca433fef31349705d9ed0f512a71ed7dd2d8b33f6b1f48a07bcb5ce201fcd89e4a9af1c7bf0f59d5abc8c
SSDEEP 384:NZcIhsNUpbiwrinzX5od+KOrElScjmwRR:VhNijbOzOrEl1j9R
TLSH
T140928D336929AC769AE7E149F88732138FA89173D7C46F80D1EC6F1C01D66AC2317D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bf55671686761a8248144d83fab6143be253256ee2c55900640d458821f5213e
MD5 0fa75d92255539437660b642a549d238
SHA1 b71043624269642f690a70700d9e343548fabbe7
SHA512 6e96abf3c39160847d4900d07edb9cda64e7d0c4403e4190fe4e9af540e484caa7ff834172b7ed7366a244e7362da858b9c05569e09b52c27a3b74989958bed2
SSDEEP 192:eONV61jWQmiUyrmVGX5Obd+juOFm0beNjJwqTU6:eONV6AfVGX5od+KOrilU6
TLSH
T1ED12F9366468AC778EE3A544F48732135FA95167EB857FC0D6EC2B1C01DB69C230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7bbf230c-3455-40dc-8ea1-a35caf0b7d35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7bbf230c-3455-40dc-8ea1-a35caf0b7d35.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b064e924425cf164988a38a11337f0f763843360252734609f043bacdbddf907
MD5 5f2bb3b9e6463b1e180458f3b650a4d4
SHA1 93cd41c6f524ae8250df513c6860f8408bd8671f
SHA512 f0801cfad2226410721ce397b76ffde81b52b0905dc149297530503fea6b4effe96f93cbf0091342f381bc1bbbae67ee726015e83447e4813cddc8cb6e33919e
TLSH
T1D9412C58A6E91149B3B76F5AAFF6B86E487BBD372E16D49D00010D4E4A22B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download