c9952f40f7a23d7f7d5f9b2b1754339a0660eb318c79c560012db363bd078153

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 00:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 531B
Sample260731-avyhlsaa73
SHA256 c9952f40f7a23d7f7d5f9b2b1754339a0660eb318c79c560012db363bd078153
MD5 f5f629bfed86110d8b9920ae9b29d15f
SHA1 eacc5233ca7f44a338524e46de543a14b7960e7e
SHA512 736120039650ded02407c5178847b77bc4d5faacb50afe1f56d4b62eaba5fbabfa17b7cf8e298e7943aec2e9510152198bd670932e9cea8238fd814ae5010bd9
TLSH
T184F0ECE21C540C18867DD5B90C745465C99253170A0CD2D3F1FCAD171F60374BAD27DC
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4824	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299315667149550"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{B9A647D9-72AE-473E-A50D-EB3AE12D3CA0}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 2776	4888	msedge.exe	85
PID 4888 wrote to memory of 4824	4888	msedge.exe	86
PID 4888 wrote to memory of 4564	4888	msedge.exe	87
PID 4888 wrote to memory of 4564	4888	msedge.exe	87
PID 4888 wrote to memory of 4564	4888	msedge.exe	87
PID 4888 wrote to memory of 4644	4888	msedge.exe	88
PID 4888 wrote to memory of 4644	4888	msedge.exe	88
PID 4888 wrote to memory of 3796	4888	msedge.exe	89
PID 4888 wrote to memory of 3796	4888	msedge.exe	89
PID 4888 wrote to memory of 3796	4888	msedge.exe	89
PID 4888 wrote to memory of 5020	4888	msedge.exe	90
PID 4888 wrote to memory of 5020	4888	msedge.exe	90
PID 4888 wrote to memory of 5020	4888	msedge.exe	90
PID 4888 wrote to memory of 4140	4888	msedge.exe	91
PID 4888 wrote to memory of 3180	4888	msedge.exe	92
PID 4888 wrote to memory of 4140	4888	msedge.exe	91
PID 4888 wrote to memory of 4140	4888	msedge.exe	91
PID 4888 wrote to memory of 3180	4888	msedge.exe	92
PID 4888 wrote to memory of 3180	4888	msedge.exe	92
PID 4888 wrote to memory of 2988	4888	msedge.exe	94
PID 4888 wrote to memory of 2988	4888	msedge.exe	94
PID 4888 wrote to memory of 2988	4888	msedge.exe	94
PID 4888 wrote to memory of 3304	4888	msedge.exe	98
PID 4888 wrote to memory of 944	4888	msedge.exe	99
PID 4888 wrote to memory of 3304	4888	msedge.exe	98
PID 4888 wrote to memory of 944	4888	msedge.exe	99
PID 4888 wrote to memory of 1500	4888	msedge.exe	101
PID 4888 wrote to memory of 1732	4888	msedge.exe	102
PID 4888 wrote to memory of 1732	4888	msedge.exe	102
PID 4888 wrote to memory of 1732	4888	msedge.exe	102
PID 4888 wrote to memory of 3820	4888	msedge.exe	105
PID 4888 wrote to memory of 4488	4888	msedge.exe	106
PID 4888 wrote to memory of 212	4888	msedge.exe	107
PID 4888 wrote to memory of 2668	4888	msedge.exe	112
PID 4888 wrote to memory of 2668	4888	msedge.exe	112
PID 4888 wrote to memory of 4936	4888	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x268,0x7fffd007c188,0x7fffd007c194,0x7fffd007c1a0
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,1355252127953633493,5342355275985277546,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1848,i,5777829552306285143,4980589506063128631,262144 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,985538497603220205,17846563962058995466,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,5403565279973187895,2232341168656725430,2097152 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,1226300356604280295,4742403105682437212,2097152 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,8021191143891481431,8244813848840150943,2097152 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,14786150452454028530,7569712054007696848,2097152 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:2
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5044,i,5404504716991387595,16907405023643035420,2097152 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,12151405657146492605,5878545035684976941,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,12538139389817693757,629609706131944957,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,7080921227830290102,730261619916823586,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,7080921227830290102,730261619916823586,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5268,i,40999013451720326,10750389266667796554,2097152 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,11551542913158430513,2892850863970790629,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,13954831592840972013,13080016529508754164,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,15913757594378238720,1182105677357786491,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,1185164203100507094,10173506100220256860,524288 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6404,i,2902186614057304308,14932393760322728285,262144 --field-trial-handle=2304,i,16422593212326067326,10807640419596007043,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 2a4ca38c5e723b4abf7bd5d6c47ce58178f9fde19a69981f0e6ade6c6a6a52bf
MD5 6a33a0c8fe3474c70d5f29c2c08d650c
SHA1 4ec7e95050a6dc566bc17edd977159d04db8d4cf
SHA512 5f89cbccef98e00802c4d4c5786a569935034713aec7606febcc5b300d172694e16fce7fd1d37638ee93d3e0bdc8ce879f88f882358bc45c5deba70be3eecf38
SSDEEP 48:CxPG4eHPaVnEESxN7GzhLVEpc1CZ8cTyJ/m6GsCgZyOFSrklOb5yA4cdBjAIH8bn:4Gy1YthzktcDcpIbwfxLk9qj
TLSH
T16E912DEC140A4A63D35C12B2E8D348AAB634CD954FE34EF348B8873C028DB55CBD54AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58e8a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58e8a6.TMP
Size 3KB
SHA256 53b4d1ad2ff640eca68570def392a9fb70affb5f54a034ee96d9f096057e324d
MD5 5b0f4dcc8e4c55e14068fedeef801749
SHA1 827f92a0d675f503585b82c01c5329f8e8ea74ba
SHA512 50f61ac0864fd2849ce53e4467e36b425a1877620c48f1cecbdc9dc9b1344d2ec5d874fe59f0642384fe986e82c182f39418ab50d1e2fbe0f6177fa46f9d6e6b
TLSH
T1F871E82D080E49A3E31C2732E0E3098AB274CD994FD74EA35438993D568EB5ACFE546C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a1d6e3e3ba7a04ca43aa48200e615758fd0fdbca2997cf2fdc19082e5df70727
MD5 f95c8005853034868e747564a53aea49
SHA1 5c738b0215bf5a39e0a144c851c543f2a828575b
SHA512 d7b2c5388b3490ede3102f00047e1d7992b2a0867632566f919dab3f378011bdb6f15d6d95d96811f20c1afc39bf60c8aa1c604094fc702e2fb361ab4cc7736e
TLSH
T12741ADF7C3F9952E8A2297F0AA18AE1FCE5D0511835C782AC5D4AE2793E3471E101B4B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 346ba7499c580ec4ad55f613592c7c0154125a550f35f7ae5190adba9f5019a0
MD5 3d149ccf66be98e036f5e37acbc95d09
SHA1 e3807dfee17f05a2ae8e3fdf884d0b0a5e534dc6
SHA512 6f03265f868a81cbca8872e69b0a2328d0d792de6bbf911db6e6e04b7043b2fa74d43c060dcb965caf4384fded6adfd60189aa90e8564908b454fe80e718eb41
SSDEEP 192:sxZjRByM/jK1Ml8Mka/fHseYOPIdpdrNYHW6+WNGYHj4rHIgrJ:sxZj7Ma/fHse1gjYHbG59
TLSH
T1B952D6166A349977CCDBD30AFA457B53D6F51572E2900E44AAFCDA0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7b5b9f823002bb875b7f18b204caf7f69b9099ee0545047b6a258417aab54b30
MD5 c9f30631e0c421ab9d5acb6341a2aecf
SHA1 5e63dcd539b96f13967d97c0441068b1d28e4fd8
SHA512 f5c3e92e2741b8237837396ec5b517b814d370db3383c675854a762a4c2f7dc012aef2f48037a116998df2b34b158189d6fd016570001dde7a5b7a594818bc81
SSDEEP 192:sxZjRByM/jK1Ml8UQ/ka/fHslTOPIdpHrNYHW6+WNGYHTwvzHIg5YJ:sxZj7qsa/fHslqgBYHbGbK
TLSH
T14C52D6166A349977CCDBD71AFA457B53E6F51472E2900E44A9FCCA0C01E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a433c0f6e4d6ff137b0437ca54c06160775fd1e023e850ba46e594323d3d4e8c
MD5 054366369697a40d144da19d5e87cf8b
SHA1 601f512c62052b3b77f54ee82eeadf9bcf9e29cb
SHA512 84c46ebd5dba638bb78719ec4338ab9fec6cfc5408523511e749734d0508e801dc45188fdc896936a9dea42457bd3ec6ca947a4759930a2a8dfe42fd72f9c720
SSDEEP 768:RgUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RCroV50l:RgUZYTMWvg0Pou1ja7eLZmRZIl
TLSH
T14BD20B2F280CCB7E4F844E9DEC266F963ED801CB5A584D5447EA894C03CB6EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 9d140d9fc65ea3aa56499f2ce0ffd06fe0ec804855d7bfdeb30768462191301e
MD5 6c5fc90e9f5cb21b16b078994a638bb8
SHA1 7b57d7df17fe50e9bdb0e0d82ad7ec266854114c
SHA512 684cdc1b70670c6d94262ad53531fcc894e41d3227d2645947cedcdf85a6f9a890e446b65593595fb25cc350d471291f395d0c0b8905bf43eb11c5c47c913c31
SSDEEP 96:KA1eK2AMaMKXqOCOkKHqUdOKmkS2LWKEg7ugKvaag:EurfyVl7fg
TLSH
T1FBF1331172BB06033C3D2918A299977A4B85F6A37418E42B7FA844B25F27E341DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d938dc18-83f8-44a8-b690-59dc9e15b4de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d938dc18-83f8-44a8-b690-59dc9e15b4de.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 22e8e63d7707f901bd143e777c4feafd8b97aeaea6dfc8a18ef5c7cde11c7ef3
MD5 bcac63e2d84c0dbac0ce90d6cf07a9f8
SHA1 8ab9f9bf01a337eea75b936ba259162bb4032240
SHA512 cfe883558b8d812c5ed8c9f613e4fa68e30bc1b4bfe1ad85a64f11dc44cb7a1dcc09ee6c9c7c42a4f8e12caf7a8d0a389bb7b2fd46942f5b97edf998abc127b3
SSDEEP 384:SZcIhsNhPfUcNK8DzX5od+d8y0VuXRYrOObjI9G6w7F:ghuHO7+RYr29MF
TLSH
T1D7929E36A8386C769EF3B556F48735135EF89177E7982BC491FC9B0C01AB5AC031AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4970085b48b55ccbc9cf1af8dc9c1701d7a2b21715cf8bc21b6b580a919d67a0
MD5 b7e745a63e1ede5ac7033c6114d56497
SHA1 0bb17aadaaf6b3eb6e12734525cf627a453e3603
SHA512 ed8ecf78abc1e463a195e0edb7e931fe1ac5e4ec4b19b88c17f38a03ddc44631281ecd107b4a5ef647e53106a411682f58d025ac8df3bae670b6afd1e2dafe24
SSDEEP 192:yONR61VWQmiUy8FgGX5Obd+j1jzory0aoX/aO31IU6:yONR6WTgGX5od+d8y0VCwIU6
TLSH
T1BF02D835A9686CBB8EF2BE4AB48737135FD51067EA552F84D6F81B1C009769C2306C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9c76cf7740539c4bb8d484b586fd1647bb31b49962fc97925a6234a97aedee5e
MD5 6234fdfc69c31590da03cfbef2330124
SHA1 b17a4a127e704100e264ef1f9d640c64b1a4b215
SHA512 865e8e3470b5559220238d65d9fd5f89c960b7f2ee01692a883ed3bb329158c7a56fdd978160fa7f5757fdc88ab9d137da16fde4c7171547178da8e18e5eb3a6
SSDEEP 192:hONk61cWQmiUyAQFRGX5Obd+j1jzory0aouX6EH9jJYqxU6:hONk69WRGX5od+d8y0VuXRPrU6
TLSH
T10A121A36A428AC675EE2B586B48731139EE54167EB457F80D2FC2B1C01EB5EC130AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 8aadffebfbe2c080e889e5652328aa7fd9b09da28b3e0686fb4cf21b89b1151c
MD5 45952cd11d265c1c97f9b00ba64f9ea6
SHA1 013697b06427c6cde4158ed2cdbf9c6fe7023404
SHA512 d3eb22d43a15b60ec9e20ad3455d8fe0171e3602a3c74e09388f8c4a469b9f3f1fca9f237987f7fe82e1c580acd3959c9ee2365f51ac6d520dec0c3e3e49c0d4
SSDEEP 384:TZcIuzsNh6fUcNK8DzX5od+d8y0VuXRsrOObjI9G6w7F:LuzHO7+Rsr29MF
TLSH
T176929E36A8385D769EF3B556F48735135EF89167E7C82F8491FC9B0C05AB5AC030AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e84897d226ff7811b800e5019d54dcf99f2264e5b84de6d50657a306f6b50935
MD5 7c7e294d8efb6637f557f97246cb43c8
SHA1 ec6370a1fb8ac7025e3062a6c5de7b95bec067d5
SHA512 98138d620c90f063cec233c5fc4d51422724859731f621d624be1524d605daddf350b244fcb1ca3085f5351bdd4dba923623f5f429f85026ed2e17726731443e
SSDEEP 384:zZcIhsNh6fUcNK8DzX5od+d8y0VuXRYrOObjI9G6w7F:rhzHO7+RYr29MF
TLSH
T1CA929E36A8386C769EF3B556F48735135EF89167E7982F8491FC9B0C01AB5AC030AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0b64a0f5-ea86-46d0-9fc5-61dd2e231014.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0b64a0f5-ea86-46d0-9fc5-61dd2e231014.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bb7a92945ca5e220165c9863fac9bc242d9e71410f5a209e70ac28661cfe589b
MD5 d7ee531648514cd16e457a4a2a558a46
SHA1 c9e3edf7efaabae3080ba991dd13f4d64cfc8dbd
SHA512 3487b2106cc6d02bdea1679e703d5967eeb3e15727c21dfafb1de4f7d29532d4dab51afaf1dba71026cd74bb5bef1ef62837e84f6c6fe4f5663ec6792ee9e7bc
TLSH
T1B0412758B7E91148B3B76E56ABF7A86E487EB9372F06C49E00110D4F4966B00CC7273B
MD5 SHA1 SHA512 TLSH

Submit Download