bd1493812fe1d53d9a92416e439eccc532d4150690e943cdded1f7017c65e453

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 12:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 3KB
Sample260730-ppdctaal91
SHA256 bd1493812fe1d53d9a92416e439eccc532d4150690e943cdded1f7017c65e453
MD5 2495eaac779becc841dc188688a48922
SHA1 1b22bfa82e33a037e202a6a38ab61ff4954ffc8d
SHA512 1c07f08d86be313593e37574c5098b7830b900e92325cbda0744fc507e56fd4bba35b18fc6f119a28c15f4e969b5a235229013caae4bd1bbc4a9f489fc0c56c0
TLSH
T15961536CB5E620185257247E37DF120574221D5BB809FD94FEAEC3006F4252E89A77FC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4204	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298882033589882"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{C7038DDF-4C67-4252-8C5E-01E5620DFB94}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1356	msedge.exe
1356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4924 wrote to memory of 3264	4924	msedge.exe	85
PID 4924 wrote to memory of 4204	4924	msedge.exe	86
PID 4924 wrote to memory of 3220	4924	msedge.exe	87
PID 4924 wrote to memory of 3804	4924	msedge.exe	88
PID 4924 wrote to memory of 3220	4924	msedge.exe	87
PID 4924 wrote to memory of 3804	4924	msedge.exe	88
PID 4924 wrote to memory of 3804	4924	msedge.exe	88
PID 4924 wrote to memory of 1764	4924	msedge.exe	89
PID 4924 wrote to memory of 1764	4924	msedge.exe	89
PID 4924 wrote to memory of 696	4924	msedge.exe	90
PID 4924 wrote to memory of 1764	4924	msedge.exe	89
PID 4924 wrote to memory of 696	4924	msedge.exe	90
PID 4924 wrote to memory of 696	4924	msedge.exe	90
PID 4924 wrote to memory of 2136	4924	msedge.exe	92
PID 4924 wrote to memory of 4708	4924	msedge.exe	93
PID 4924 wrote to memory of 2136	4924	msedge.exe	92
PID 4924 wrote to memory of 2136	4924	msedge.exe	92
PID 4924 wrote to memory of 4708	4924	msedge.exe	93
PID 4924 wrote to memory of 4708	4924	msedge.exe	93
PID 4924 wrote to memory of 2232	4924	msedge.exe	97
PID 4924 wrote to memory of 3900	4924	msedge.exe	98
PID 4924 wrote to memory of 2232	4924	msedge.exe	97
PID 4924 wrote to memory of 3900	4924	msedge.exe	98
PID 4924 wrote to memory of 4228	4924	msedge.exe	100
PID 4924 wrote to memory of 2852	4924	msedge.exe	112
PID 4924 wrote to memory of 3640	4924	msedge.exe	113
PID 4924 wrote to memory of 804	4924	msedge.exe	114
PID 4924 wrote to memory of 4928	4924	msedge.exe	118
PID 4924 wrote to memory of 4928	4924	msedge.exe	118
PID 4924 wrote to memory of 1356	4924	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffc12efc188,0x7ffc12efc194,0x7ffc12efc1a0
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,9455306381322881340,16604689891120086951,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,6094908305749958992,5912636703289565001,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,8410152962658382373,11428302837543826365,262144 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:2
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,12924886090416275474,4695162507222757793,2097152 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,7380088835526953831,498948120082848837,2097152 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,16994482798481801847,14596772242118558392,2097152 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4160,i,8385207224963249899,3683312334558697688,2097152 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:2
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,11201481349485537076,8897290051967818935,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,16170067171728878079,9896327694639950732,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,17199108598221300272,14907912731741257885,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,17199108598221300272,14907912731741257885,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,17469825053433255682,6142426619045738752,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,13247163698614161785,5145239971409922892,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,7685983445544331778,6080459934530646725,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,14196919390639844871,10242021693006731430,524288 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4196,i,6523464642723525869,9550658849899744500,262144 --field-trial-handle=2456,i,6323277632463226691,8136962681832823467,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bba2e49c11cb10e1da3782e96a0839de38ec558ccceb0d68515b04792179f852
MD5 34d661b06bc0857903247c15b32b3124
SHA1 72b12aeb58848c0b8474acb525b5e3c41cf32367
SHA512 ff623932c1d85ab3c9cf10c993d26b94c5e1d9968c6a6f9a48925137edcf7379ba3bc8d216e7fc052000ec59dab883f4b498f2262f7941a46d3328c62092e788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7U:fwUQC5VwBIiElEd2K57P7U
TLSH
T1E0B3A931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2d0c93cf7a27a0da7b07b5e1ec245e52fefb0ba8b25caf9964ccf74b76e95619
MD5 418708ae6575427fee1305d440c63fc4
SHA1 bfd2ba0c690cc8c2ea10c9855d170a52c0d3ef99
SHA512 1a78f68e395e26fb27a6fac94dc4d1a6b1da8c327d1ea9414918c82044db100e4f07d57cec2cbd1c52897d1cb699888f3dc775babe1a7789bced588032dc532c
TLSH
T1EC717E2842A23461EBF41AF0E4C31206B47E47DF0B0F4D4518AC9FBDAE89364B17278B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d9e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d9e0.TMP
Size 3KB
SHA256 893ab63c94651a7139216ef5ebbfcfa67b5a949cc907d0adc22099371dad5c6f
MD5 b150ca2f124b0cc9dae419cd4bf79444
SHA1 c7792e2af734e5c1d8c9e7916f23e12fede0cfdf
SHA512 c9dc2014c3d0927cbcd0d0a43521578be69f15e9755e829007d2028d944a8325a2fc2ea6efaaf2a7c71d03c3d5ad60fa8f6528b9ad984c56406efb6d2e9653ea
TLSH
T14B71812842A23461EBF41AF0E4C31206B47E47DF0B1F0D45189C9FBD6E89364B27178B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00845b33-a260-4238-96ef-176b5b668b24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\00845b33-a260-4238-96ef-176b5b668b24.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 f689f99aacb74f09c8728af4e3197c0f3f43688744daa3d457315d52138f336a
MD5 1cbf8bcd4c42c328a556651247ae17f4
SHA1 f9583a1115e88a5c25b610d60ac40ff4eb5bd099
SHA512 5107edf16a819b2da30966789bd5abd9c6739dbf69e30c2705d42ca78b5600e90bf50f611a14afbed8726e97d4b157a83e8a13b20f62416e39e98023f10fd2a3
TLSH
T11A11BAF7C3D585AE891116F06A24AE2BDE2D0606832C3C19C9D4EF2B93F3075E10295F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 56e8d021e80f6ed2ea09319a7046bb38fa7a4c20452c701e917acbb55f3946b0
MD5 bbcf40f9329cec1e62f106abae172878
SHA1 93b837bcb57509be888f108806f8dc29523cdb59
SHA512 cdcbb5e59635fb717663c25b70b332f799e7ddb4f7e419c9ee39595f1cff587c495c679382c5b95001d2b2f20bc87839064ea0aab289bb1641eec6c7beba9515
SSDEEP 192:sxZxRJyM/jK1Ml8MkB/fms1gRIdpdUHW6+WNGY4wZH6IgrJ:sxZx5MB/fms1gamHbG/9
TLSH
T16A42D616AA349977CCDBD209FA457F53D6F90472E2904E44A9FCCA0C04E6BED621782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e74fb110fdc3c8a9c3f1c53b87f77bda71c50eed534838d586c96598d52523ce
MD5 5e444393beb420921c2dd974dc66a52e
SHA1 6824ddaca7bbeb848d33ef9d7260bdf2c772a174
SHA512 ba27f290b102b05c366935ddb03168aa6fc69da62d3b121c97bb4489b27cfed059c4dc023bc9d49cc4bcebb530d3908316ea26615d109718d2e54993b58423c5
SSDEEP 192:sxZxRJyM/jK1Ml8UQckB/fms9BRIdpHUHW6+WNGY4F206Ig5rJ:sxZx5qnB/fms9Ba0HbGST
TLSH
T12E52D616AA345977CCDBD209FA45BB53D6F90472E2904E44A9FCCA0C00E7BED620382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6cee20428dae5c8767158a45db165a2a385540359b0da43c4bbe73f60461912c
MD5 bc6295581b265f7ab7734c31fa69ac10
SHA1 4d1bbf192f861f581bd57699cc06311e6a363773
SHA512 dd02dbe9f80369685a948772f8d553b7b83bd533e7a3c0313a0349f3a94db79040d64ae270c5a11b03680f3bc255e312603bb39eac101dd6e60eac92d834216c
SSDEEP 768:UW8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdzroakkUn+:UW8iJPNWvx76ru1jahALocdA+U+
TLSH
T197D2FA3B680CCB7E4F844E9CEC266F966DD801CB5B988D5447FA884C03C76EA51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b6927255ff0c5ca0d79d050d67e6c4f562e7bb54813696bb4469c32c5afe9aa9
MD5 6d0ae851cafce013de229c78960c50ab
SHA1 c88da89fe4d9864bda58f94ea74892dae40fda7f
SHA512 f846c08cb3df2aa415a48cccf1583a7f6550a6a3b85055b3ee23d6b04b5c4133d1ecd387db4999fd0e269b771c1dbbd71aebf9620cf6d55b0b6a034e32a8b051
SSDEEP 48:KgpIVKKwovyhiIvKLC87yNRIRKCsELI7soaiB:KgpiKKwySioKLCCWRyKCsgI7soaiB
TLSH
T11B91020271BF02422D7D7919A2B087574B81B1B3712CE52B7BAA54714E2AE344EFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e6a0691e356a6844f56d78bd904372419d551a7d6d68604890101dee186198ef
MD5 e20dcf297cbe0a596a20531ee738d019
SHA1 fdce32a26442b55d475b240a2877e76d029180b5
SHA512 d653c7223d06609105d424adcacb2c6793dab1c14f6e01c8dd27762869bec85f12ce8df8b1398614e4be14d802da52dd04ac146a5429bf20c995f76ccea0779a
SSDEEP 384:8ZcIxzsNR8z4Rr5k/rqjfOOObjI9G6w7mQ:qBGFjfO29MmQ
TLSH
T194928D366C785CB69DE39511F5CA3A235FF8902BD7C85F84A1EDA70C09DB59C430B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ca4a65c39595dbaa3671d778cc15b3f9a530d149d5d5a52cbb2e7f76fa7cb9fc
MD5 ed55e3a435e6dbbdfd5b8b8d9e47f6ce
SHA1 50ae6d7e5a990685f7adc4610690c4ce72d7a06c
SHA512 babffe9d882648b48a22f8c3536431b8322d3fcae9300b5afa56f4f28ce4b5d93482d092067448c7a1c7a7561457db7abe5995197f228b9d2a355480791d6994
SSDEEP 384:8ZcIhsNRVz4Rr5k/rqSzOOObjI9G6w7mQ:qhXFSzO29MmQ
TLSH
T159928E326C785CB69DA39511F5CA3A235FF8906BD7C85F84E1EDA70C09DB5AC430B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 bac70180206295a3fc8ee461c611edc7627be19e9970ddd15776b42b4f85ad3d
MD5 e1f4cb10dde1b8d04590af3d25e7b1d6
SHA1 3a97cb5013ac89ce51d503864817204c50e0ac06
SHA512 3b8ee143175b4623e33b3879c65b8a2c64bfdcfcb435d15247f49097caafe44fac249939d3921ddafd748ec5dabceb1fb4e098a4ffc4f710c22ada5302eaa2ec
SSDEEP 384:9ZcIhsNR8z4Rr5k/rqSzOOObjI9G6w7mQ:lhGFSzO29MmQ
TLSH
T17D928D326C785CB69DA39511F5CA3A235FF8902BD7C85F84E1EDA70C09DB5AC430B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 59f2973faa1fc67256438d73f16ab577c7c9ce32fe9bdcc3205f76037140c58a
MD5 36369eb99dbfa76f0c30179e820bebd8
SHA1 53f303a3b2e8f77d8466d313777c593262aa5cce
SHA512 6797aeb2b08e64382591647f87248e37da91695ad97bceea2c14dc1453538ef34d8ebdd6a01ac7db1e41216c28d590e80d31a328c0fbd98564e3f3924b42b7e1
SSDEEP 96:ZqONk3QsjpfmUTmDK5ih/cIPURHl8h4otop5G5DQBhPwivh50xy0SFYKQAxsYssk:gONz6kDfQmiUygUZ9036TQim5U6
TLSH
T18A02FA3568786CBB8EB36E46F48737275FA5112BEA852F84D9E81B1C04D724C1307937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 780d958c42a53fee8f9e8f62c3b4c7decacf8f8960d87f4d433a57933793cbde
MD5 abf7ceb7fe615a30ff28e87969d362f3
SHA1 6a035ed822486b6f0efde9be1d437173eed0cd6a
SHA512 9ccd47bd89a5719749d53aa26d44a9f36087aec31e4b8dc098fc96846a85c2b2dcd91d52ef554cc1939c5188182876452d1eaf1dd840535718eb2916ae48a21a
SSDEEP 96:IqONkAQsjpfmUTCK5ih/cIPURHl8h4otop5GRDQBrPwivh50xy0SFYKQAxsYssXT:TONE6kTQmiUy2U79036r1EYbcRiquU6
TLSH
T12612393668B86C7B5DE3A945F48736131EA5812BEF896F91C5EC2B1C05DF28C530B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15d3fa14-349a-432d-923e-58b8c102291c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\15d3fa14-349a-432d-923e-58b8c102291c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9dba1a1a4b99d6c26b9f208135dcb1eff63b1c57dd57e320b4d9cd8c96a0a793
MD5 1cb118f97c7d12f26b8626ea885c7849
SHA1 2bbd4829197c3397aa77832d8309b6f9903b1352
SHA512 78f37eeee913258265aea223e1f8c42637f123149603155908dfef4a4aba6d6aa2872a7b90b1f1d5896fb0a6b09d08b57939f2c88fa024d7a57b7afd0e32abdd
TLSH
T12D410958BAF91148B3776F5A9BF6986D487F78772E06845E00010D4E0623B40C9B2B37
MD5 SHA1 SHA512 TLSH

Submit Download