449dedaa6f85f4ce861147dd9b3bb77006e1e0e2e8c9acf90d290e831db70b11

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 06:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260730-ha8f3ssdkf
SHA256 449dedaa6f85f4ce861147dd9b3bb77006e1e0e2e8c9acf90d290e831db70b11
MD5 47393f0fa8f5a068af1e3f7336f71911
SHA1 cb662e9893f2961bdbb97a15ca095768babc299a
SHA512 0f494afa814cfa729736d45e9f38b976c072c3aa306d4bee49ee358bd92eec555d8d977f6733899a7d3c407e433cec90202fc8ea5a4cc36d4c942371f74263fd
SSDEEP 192:z1agA++iMZ8avzKuz1tHmzXc1i/X31BBMYSfo5:3Lu53mzXc1Y1TMYSfo5
TLSH
T1AAE17EF7661A26189DAE9180AF75F319C878E901D2274C48454F6B3F02DFF56C2B2D4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2604	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298668440723145"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{53EA37BE-E9AD-4F38-826F-2F98676EBDF5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe
2928	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2928 wrote to memory of 4664	2928	msedge.exe	87
PID 2928 wrote to memory of 2604	2928	msedge.exe	88
PID 2928 wrote to memory of 4600	2928	msedge.exe	89
PID 2928 wrote to memory of 4600	2928	msedge.exe	89
PID 2928 wrote to memory of 4600	2928	msedge.exe	89
PID 2928 wrote to memory of 5024	2928	msedge.exe	90
PID 2928 wrote to memory of 5024	2928	msedge.exe	90
PID 2928 wrote to memory of 3920	2928	msedge.exe	92
PID 2928 wrote to memory of 3920	2928	msedge.exe	92
PID 2928 wrote to memory of 3920	2928	msedge.exe	92
PID 2928 wrote to memory of 3988	2928	msedge.exe	93
PID 2928 wrote to memory of 3988	2928	msedge.exe	93
PID 2928 wrote to memory of 3988	2928	msedge.exe	93
PID 2928 wrote to memory of 608	2928	msedge.exe	94
PID 2928 wrote to memory of 1548	2928	msedge.exe	95
PID 2928 wrote to memory of 608	2928	msedge.exe	94
PID 2928 wrote to memory of 608	2928	msedge.exe	94
PID 2928 wrote to memory of 1548	2928	msedge.exe	95
PID 2928 wrote to memory of 1548	2928	msedge.exe	95
PID 2928 wrote to memory of 1944	2928	msedge.exe	98
PID 2928 wrote to memory of 4860	2928	msedge.exe	99
PID 2928 wrote to memory of 1944	2928	msedge.exe	98
PID 2928 wrote to memory of 4860	2928	msedge.exe	99
PID 2928 wrote to memory of 4680	2928	msedge.exe	102
PID 2928 wrote to memory of 4220	2928	msedge.exe	105
PID 2928 wrote to memory of 4324	2928	msedge.exe	106
PID 2928 wrote to memory of 4852	2928	msedge.exe	107
PID 2928 wrote to memory of 2268	2928	msedge.exe	108
PID 2928 wrote to memory of 2268	2928	msedge.exe	108
PID 2928 wrote to memory of 2852	2928	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe171dc188,0x7ffe171dc194,0x7ffe171dc1a0
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,6911307535193329227,1909238734611594506,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,3148984470648364975,511603845561471605,262144 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,7303619983859181720,8764349451273359430,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,157028933179689157,18313380339344045532,2097152 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,4844348750989341916,8071131400055045595,2097152 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,2921753499369090003,4825851426341139835,2097152 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,13909611332121201176,17808173533882572149,2097152 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,5697550184822908891,16142914402235341348,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,160922641204133568,7968670030581585837,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,12581688442626188665,7356073008228068616,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,12581688442626188665,7356073008228068616,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,13453922673880763852,11069955547286216648,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,9828179868850531199,3644142486485719381,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,17557252074245478636,16633742160773099016,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6380,i,2541977890546026250,10726982634859408084,524288 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6172,i,8760994258800579433,15443887238210668429,262144 --field-trial-handle=2344,i,1247230917001376412,8767865789989449013,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2852

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
MD5 7a50c2e276f05b686e8cb6c95b86650f
SHA1 bc892af04a9d6b1bee8047f67518d676df864301
SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
TLSH
T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b7642caa825e6f7ad53c973ab5ee600f7c3d0012698693f5d02bc3e48080aac3
MD5 c6a5bc07935d6042be23b22b2a38a067
SHA1 a5c4436a2dbfc77921039fa124258bdc9464699e
SHA512 27ba4229a794fa233f6d5fefd477f1b4710a700ca152cc30fdaca5a64c198e4a99b32842437c6eea9820ae0c9cf3fb7b7d9ca290873b128f057b67cc6596c64b
TLSH
T1D3817FB8024312AEE77D52319ED21E3C747382E8F9235F5B61A0D8B2ED957A3D2764C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589381.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589381.TMP
Size 3KB
SHA256 47051df501a0b0f89197ee591c50aa551136e219a8919a2200188cef832c2571
MD5 78214da2719410bf70c7da0d3c226c26
SHA1 fe4f1a2f4b3961b629136b66693f69f9ea56b260
SHA512 0dc1ef243197f1b11b76b34095e7a49c208688af6cded0b5497d0ae9254664488266bf841cf6660140d62503f49de4b28587250f85c93eaa33162e11a84961b0
TLSH
T1AD8160B8024312AEE77D52319EE60E3C747382E8F8235F5B51A4D8B1ED95793C236484
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 23901877faca414d49b2f80a842410bf42d20e20cef58b61efb14bb0e615c610
MD5 4b52b6949a4a782be1f922dfbf5f4614
SHA1 7b6691549640fe04b857648e2d307c6397b25b31
SHA512 af811ca296d492e28542644e0d0ec586bef521129660bc38f505d37b79bd02c702279e8140438afad3275550dea39f00c6fbb85aac21a8d73ddb798bd9976ef2
TLSH
T1D711BDF3C3D5856E890516F06A24AE2BDE1D0501831C3C1985D4EF2BC3F3075D10195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b6d142d23d5746e1b4c04cb65a2e1663e4a0f23555237f48e7d3f7517c4f96dc
MD5 60fc7183d9008cc64d208f9dc7d4b895
SHA1 66fc1ddf8117fa71820db9c18ee254e829fb9019
SHA512 dc2f2377f27474b2189fb0ed75c57645faf112bc4d1a38e6252f723f8047b060385ea4cff139275c40ea189ce9af43271062d3c1268f9195276775658fb584a9
SSDEEP 192:sxZNRmkE/fesBb+MIdpd5HW6+WNGYCkResOIgrJ:sxZNHE/fesV+VPHbGZX9
TLSH
T1F622D7166E38A97B8CC7D21DBA15BF13D6F95032A5D45E88E6FC861C05E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 f107084ad5c5327b43caef223d6fe5848712b07ed2b04bbcbf8f4f4db9259e62
MD5 6ee98946331e263b1dfec1549b71a4bd
SHA1 55a56284bfb8bc4a49602125906835eff71dc85d
SHA512 080f69bebdba8425de6a44fceb86e6e6620a7516611b8a3aef373f9a7362efba11df3977c54d2ba98e484029e7a9863bcf964a59d15a7576f97d53e07caa2bc1
SSDEEP 192:sxZNRmkE/fesAb+MIdpd5HW6+WNGYCkResOIg5MJ:sxZNHE/fes++VPHbGZXa
TLSH
T15B22D7166E38A97B8CC7D21DBA15BF13D6F95032A5D45E88E6FC861C05E6ACD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 cf98ea227fe4c9a79856957c6830df5d48213dd1ff2f2e69fa4de182b5e94855
MD5 29f69eee13ddc556f88495dd0e7b994f
SHA1 349e2cc951d11f2df32a2222d47cde6a57adf9d0
SHA512 fdba4f07d15b0f3c05284e9d1810efceb9e5dcdee133ce4eded537a63548bacf0bab88185b03d9b844e3b51f6e0a33753c7644cc5c07fd17e40febc525d06845
SSDEEP 192:sxZNRmkE/fesAbCMIdpd5HW6+WNGYCzpesOIg5+J:sxZNHE/fes+CVPHbGkXo
TLSH
T16522C8166E38997B8CC7E21DBA15BF13E6F9503295D05E88E6FC871C05E6ACD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 a3cccfbefca2cd68daa79655d2bf06a528e3d1320ff37cee44c5a0e30956f354
MD5 bd97c022ddbe423fb8bf59fc6218a241
SHA1 e2f63ce843afa434a6a65f4e69baefe4e3d81dbd
SHA512 5cb48fdb8484bdadf5dd6ac2f4c848b33d0798c65b316ae8b2620f37d46e2a817d2386a4a78955202c3517f351a3640ced3f41da0241151346cbe017feb8d35f
SSDEEP 768:RvqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKrero2:RvqbUj+WvSCs6u1jaaZLbWr12
TLSH
T148C2E83B340CCA7E4F801E9DDD5A6F972E9802C7AB588D4447FA994C02C77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 eef73a5fc8f9a182e680f6b10c6b32cbc5f2cfb710afcbb7d3e7e80b08ab66e5
MD5 07481d9c95f2ded0a437148c778fe08e
SHA1 0500b8891183fcb1b10bbcefe4271f0d275f1961
SHA512 da547d782ef474c2399225b6fa6901627e1c1e17f5e80db774eb1ed6d8f53b7700caaa2f97d989455a05535186b06c0647e1546e14060b17bf0920245712233f
SSDEEP 96:KlkdQ0uS+gyKHzssgK01s2gA8s3WEtGZiKCoZjOKYcKc:2kdQ0uS+DKHQsI1s2r8s3WEtV3Vc
TLSH
T16D914651307F170538BE35189665857A8E81B2673619A4BF37B800B71F27E129CFDACE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5af364f-c5e8-4bc3-9b3b-d4a571d86b97.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d5af364f-c5e8-4bc3-9b3b-d4a571d86b97.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 bbebc964a4aa5736bc9396045f5a9a42bcad3ef1362929f51fc9e3bf02dd642e
MD5 377cd12df6eda7734ec400d326460bcf
SHA1 6fc068bd30edecb91e14c516c6cef32d4724adcc
SHA512 1ec9a3b1d1fae3f86d60acd40b3b25bd514ddb6b9d4476246c7d700cf9a0f4a44b9a51a7dd4d7c898d0d8cf50c5706b505e458d9ff5c7133c11f9a970b665e5f
SSDEEP 384:CsNwgHobRuEa+mOByuv++F/qOObjI9G6w7e0:Cl3abOAqxF/q29M9
TLSH
T1E7726C36683C8C774DA2A565F08B3A279FF891BBCB892F84E6DD5F0C05DB59C130A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 609e07d776dc437b81a1073066cc31f136c4dba0d787050c40d122b02d511e38
MD5 3ef3bb9f31b36c437406e972a61159c0
SHA1 e7a8f82550e21b968587e00e0df9a2020ae767fd
SHA512 def3ed7a0003174754185db25817a0bc7882cf98c3064b620e84a7744d59a42dba25ca0f3032e614a07e8426b46a1ac3ca39d37bbc1e65b213d38403287f819a
SSDEEP 192:EONB6DbLQmiUyi68Ba+jqOmWtmtuv++vNz/sqoU6:EONB6FE8Ba+mOByuv++p/qU6
TLSH
T1D6123B36697C9C775DA26984F48736179FA8416BDA8ABF90D6DC1F0C00EF65C230F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 b4636619de96a7c3af9d5bb87d0432068241ec3f969bc31c8b45f022c86302ab
MD5 919e18f5c3486b8178d92ede09c97271
SHA1 33bf264198c232de181e406ca03a3a674e031139
SHA512 5b1980abbf13b1c0a6ac613e4472875fd43cc5cf4e69b2363b3bac7ef44baf5ebecc4818fe453f0f877bea827d91cebbf3f3373065735015f8ead3b7567fbf5d
SSDEEP 384:XiFiZcIazsNw8TUNTUlIl+HobRuEa+mOByuv++k/qOObjI9G6w7es:SFQyVwgJ3abOAqxk/q29Mf
TLSH
T1FAA28D735C68CD7BAEB69A55F48A36178FF480B7CAD9AA84E2DD9F0C00D759C030A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 66d6f8e95248ad6db04272ccb502fa2f4591fb1d8a157b7a4011eabe42443df4
MD5 e6762a0847a8500748c1caff39fdcc48
SHA1 dd5d061a35f84b3cc1087bcb67da383546c9df58
SHA512 ab611979f79291e0370d3c438cb16437836b77287383a44f2b746cfb8abd976c7ab5312018f6df9a225f1acda9fb93b75010d4041c8521210e36c90e1e2327ff
SSDEEP 192:vONx6Db6QmiUyK6HBa+jqOmWtm7Rg/nIU6:vONx6uqHBa+mOBH/IU6
TLSH
T1A702F93969786CB79EB26E49F48737275FD4207BD9562F84DAD81F0C00D764C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3deaccfa20e9cff74e28da42edeb0c3ed412f87067ac34ea35a5cb7feee90daf
MD5 d3774d28bf66f282c1a1c736324d2ee7
SHA1 6abb6bd0b26ce43ace5e91cf841f3bdc49c6647d
SHA512 d56186cbd5ccc60e1c84aa2748fcca03d2a16e845438a7a8766ad9d71e78b626c1864132ccc15f17676236d8759e5de2b4368316ed9a2ea05513f6d9e6188e29
SSDEEP 384:3ZcIhsNwbHobRuEa+mOByuv++F/qOObjI9G6w7es:/hg3abOAqxF/q29Mf
TLSH
T1DE929D766C3C8C769DA2A551F48B3A279FF8907BCBCD6B84E5DD9F0C01EA56C030A415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 4be2f0808753ccaa0f8cfe65ccc86f369d99d219490a03e80321b5e024d3655f
MD5 e110344f39134aa666d13b0dfb6ca4a9
SHA1 6286e45493dcd8284f55c6529592d6a1d4a96576
SHA512 37cdd2eaf50cbf7182d47d90cb90ee9e71ce504ec074df823417061171928837c78e21787051b633ade96b922ec5f197ef2c104f0b02ca8e0b76e6677d62aa6e
SSDEEP 384:TZcIhsNw+HobRuEa+mOByuv++F/qOObjI9G6w7es:LhP3abOAqxF/q29Mf
TLSH
T19C929D76683C8C765DA2A551F48B3A279FF8907BCBCC5F84E5ED9F0D00DA56C030A415
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86e0073b-0c20-45a4-a5f3-025160c45514.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\86e0073b-0c20-45a4-a5f3-025160c45514.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9183031226dfce2bd5eba428cab54b77d52ec2b236f2ae08faa6861b5a9b03b8
MD5 4d0d11a61172d05e9a31941d71016858
SHA1 49dc37611f3ce994796d623bdf1784cba87583a9
SHA512 69684398986eafc27aaa209cb3c04b43dd1ddef2c054b5ad1346e250890e200e987d2dc6c216dba620fcfc0cd0ec72d91c85a90b4a4c425e7fef034f79297761
TLSH
T1EC41175DA6FA114CB3B77E5A9BF6686D587FB8672F0AD19E00010D4F0A22B40D8B1737
MD5 SHA1 SHA512 TLSH

Submit Download