389d176c4e700f74a9ae936a72d500b30fdfb0346a14f167b78b75356cd8c9c8

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 06:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 18KB
Sample260809-gzcv2asble
SHA256 389d176c4e700f74a9ae936a72d500b30fdfb0346a14f167b78b75356cd8c9c8
MD5 0b5baa894ab37b795a607ad935e263b6
SHA1 f176e6002ba8e0899c1c44642108c6d0b3871c34
SHA512 b32c1e832469ee012444e28f16f374e18146d42dfda8898a7875c46fd40ad3706cb6ac208e82691a4cc51cb296333fbb0146ad4c3486d58d50106b425b888781
SSDEEP 384:GbLg/79qncoeqA23Sio/ohVQ1RAEKQphiBgu:GbLIRu7A23SilhVQ1RAEKQphiBgu
TLSH
T16882193B5316312F1553016275327B4D6052A092E675A2ADE3F7AE32C9C6EF218B7F8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3464	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307296570791396"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{7C5324FC-3EC2-4CBF-8070-2306981CD6D4}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
536	msedge.exe
536	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe
1364	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1364 wrote to memory of 1252	1364	msedge.exe	86
PID 1364 wrote to memory of 3464	1364	msedge.exe	87
PID 1364 wrote to memory of 5032	1364	msedge.exe	88
PID 1364 wrote to memory of 5032	1364	msedge.exe	88
PID 1364 wrote to memory of 5032	1364	msedge.exe	88
PID 1364 wrote to memory of 3636	1364	msedge.exe	90
PID 1364 wrote to memory of 3636	1364	msedge.exe	90
PID 1364 wrote to memory of 1844	1364	msedge.exe	92
PID 1364 wrote to memory of 1844	1364	msedge.exe	92
PID 1364 wrote to memory of 1844	1364	msedge.exe	92
PID 1364 wrote to memory of 3372	1364	msedge.exe	91
PID 1364 wrote to memory of 3372	1364	msedge.exe	91
PID 1364 wrote to memory of 3372	1364	msedge.exe	91
PID 1364 wrote to memory of 1456	1364	msedge.exe	93
PID 1364 wrote to memory of 1456	1364	msedge.exe	93
PID 1364 wrote to memory of 1456	1364	msedge.exe	93
PID 1364 wrote to memory of 3264	1364	msedge.exe	94
PID 1364 wrote to memory of 3264	1364	msedge.exe	94
PID 1364 wrote to memory of 3264	1364	msedge.exe	94
PID 1364 wrote to memory of 4756	1364	msedge.exe	98
PID 1364 wrote to memory of 4756	1364	msedge.exe	98
PID 1364 wrote to memory of 4720	1364	msedge.exe	99
PID 1364 wrote to memory of 4720	1364	msedge.exe	99
PID 1364 wrote to memory of 4580	1364	msedge.exe	101
PID 1364 wrote to memory of 868	1364	msedge.exe	110
PID 1364 wrote to memory of 3544	1364	msedge.exe	111
PID 1364 wrote to memory of 448	1364	msedge.exe	112
PID 1364 wrote to memory of 4664	1364	msedge.exe	113
PID 1364 wrote to memory of 4664	1364	msedge.exe	113
PID 1364 wrote to memory of 536	1364	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe8b7ec188,0x7ffe8b7ec194,0x7ffe8b7ec1a0
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,8094421769737201082,9004234360705671076,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,16910424320840013019,4666251560844961630,262144 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,2427692846591371852,2731035973660150985,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:8
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,13943147395919465117,1329315509893885659,2097152 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,16257291263300640772,3194393555999677695,2097152 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,11880512913548342557,17702311435967174391,2097152 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,5308962038918917296,7249092001910267859,2097152 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,10900238722414482554,709562227483928201,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,14459968183122178927,5638476070199667099,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,17314709880076036289,6865536980046963092,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,17314709880076036289,6865536980046963092,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,11207644791085376459,11760243810173450444,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,9130415475133245277,6038485713880422627,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,12713251383016696914,9365218906770967520,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:8
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,10386910918482602149,4896459176947166213,524288 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,3548095021462530905,5982512357408185794,262144 --field-trial-handle=2316,i,15643537773442810205,15204536446053655698,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ed54168e9bd9b049b307ad0198c8ff96fedc239690683bbbe954b5b6ccc78d1e
MD5 e13f095bcb4b9c0f4556bd8310cd4c8b
SHA1 6f2ae1857ed820a530bece8a02541eb1eb26db43
SHA512 391fa95533bb7b534e5cf1ef628f7178db1ff4a768c5f98f0211d091434bef89f8aadb2e77a3b24168c58577d469227622dd559bec9b2751e416ce9e380714f1
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T123B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

24818f1e-aec7-4b9a-a6c9-6ed1a79ae56c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24818f1e-aec7-4b9a-a6c9-6ed1a79ae56c.tmp
Size 12KB
SHA256 eadfe54ae580cf0a05400637a356ad7381e2d9f765659d2714d2f8614a08b291
MD5 db17f5b52c9831bee1847d9858a028b6
SHA1 dd8cde0e95c7f84c546cc9af74ab7b2086481b0a
SHA512 cb0858e791ae5546be56b9b81d52f21dbaeed99f9d2d5128a1eabb0cc78f030e5b7dc42c3668b611dfec1a35d8fff6c559bb0acb0396c03322400f9a98f6c80e
SSDEEP 192:sxZWRjyM/jK1Ml8MkH/f0spkaIdpdTHW6+WNGYwKYNoIgrJ:sxZWZMH/f0spkzRHbGc9
TLSH
T1B742F9016B34A977CCCBD209FA55BF53D6F9447292904D44AAFCDA0C04E7AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 88835cd0286f5233507188982ccec5c991c0502d5121542f84149dfb76acc8ac
MD5 fa04a18223ae568d2756e8e8b3ad1956
SHA1 df1c8fabe77eaeeeb7ece3dcce659f5157b8a639
SHA512 ff7ee2880ab0c3426308be4933e70d8c72c2e46bb78e829a26c90399e0bdd96a057228f5b26f8c6f353dc4d971775317eefb8272a835c594ad55249c33308fbc
TLSH
T134714C19CB834C43EB018E34D7F102B175328BA84A6F5DBA2174CBFF6E0EB218519D29
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ba33.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ba33.TMP
Size 3KB
SHA256 97dacb1d84578eafceed1809f231c4b54411eed2d3af4d401361d90cb1823bbc
MD5 1f4e38f369ecb16bd0ef7da08770ea91
SHA1 e0471f02544afb72a09eb8503808a0985b470217
SHA512 f18ea38e40c07a412ba7c7ce18dcbe1d3721fe1410a0faf4c79af5cbd1f41b0825478926dd27465d58a559837c949ed792c0dafa8222620f24751a0809dea4a5
TLSH
T10D714E19CB434C43EB018E34D7F102B575324B98466F5D7A2174CBFF5E0EB218519D28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 78018bd4dbf15d5de08d460a5b33aa407537ba5143873d916e79f1bf43f9be89
MD5 0574dbba01080fc12a6dcbe4872a87d8
SHA1 bbe96b85f1e773cf15ba610f36034e1849d81e5e
SHA512 4f78a84640899908cbaac7b013ce4cfbb2aea95ab61c020c31ad2e16b0071116531abf5c296a5983de2a6ace4d5cd1f70452507f2647355aa9108deb5cee772e
TLSH
T1A7116AB383E5866E891556F05A28AE1BDE1D0606822C3C698AD4FF2B93F34B5E00255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 09376c376bc045c552a6789efcc609432a0f7679dfdd129ac4f52e9771d6db8d
MD5 2e4f338dd0812cee89d597e169f97adc
SHA1 0c407b4e68dfe03215da24e764102bb1817af9aa
SHA512 15f46085ae00fe518c7f4bb779f1e6d4a4184125feca2bf8f7e46437642fdce8a6ad1532ab9dd70f2e9cbcb16f246e05e3a399f93f48ea13b5659d804058dbe7
SSDEEP 192:sxZWRjyM/jK1Ml8UQ4kH/f0sJvaIdpHTHW6+WNGYwqZxoIg5VJ:sxZWZqbH/f0sJvzzHbG7x
TLSH
T1DB5209116A349A77CCDBD209FA45BF53D6F9447292904E44AAFCDA0C05E7BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9862bc9effbc5bd022b10c76ba59c66d689804ae1feaa3892e2f478ac42ac61d
MD5 8e7642f2f032bad6319508ed26c6d9ab
SHA1 35cd65b228219b6d895322dbd739a04fd4e86e08
SHA512 616a65bb133e3e8dadf06d85bdc71226133c035bdf4164f5dfd3d975be9cee4fcc6ae7309d2fbb49393316f9a9f8e4e4ffb7b46d69b8082ce04cfbb892652577
SSDEEP 768:WL4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dBrohDcHaG:WL4jeXmWvmKLEu1jacPLZQd66N
TLSH
T11ED20A3B280CCB7E4F844E5CEC26AF976ED801CB6A584D5047FA894C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 046ae07ce15c79e15dcd06600ef4896a138d5878a8af467173f5a19b1e28eb5e
MD5 f9e5415baae5c6300084f1eb06232f44
SHA1 89d14f24e6328f7012b949d8c63106a59a4edacf
SHA512 4819f1eeb32858370b1c592bb44e5fb6e7ad93c6256af6a1b3044d56c76f396f62a85539666b19b32f51a151b16ad543fe6b90665a99125a1c8fbc8ae09f410b
SSDEEP 24:Kdk/fkGkNkEakhdkVklk14kBk9+kIIjkhk1Kikyhakvk11EkHklSmkvMkq8klkOb:KA1IBK2s8rydTI1K8cQwyIPKvKgby+
TLSH
T18991370132BB12427C7E644C93A48A6B9F4275A33025B86B7F9854B50F66E640DFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e8127c0d0349bbd72e2be1617cf1e025e4ce42c77226e33481632c74ab55bc6b
MD5 6eace213af3599b0f837c30d57936389
SHA1 14aa57f48f82ab8722efe8aa25aa08999af18832
SHA512 10ab1c41bbba90a6e8fb39c9d983b0f0b5a26b411c9d77af6d0d224dbac90d10bea6f7e31be3c67f08553faf913afe75600fbf52c488e3ef5facc54f7521090f
SSDEEP 192:ulLsN88QhNQZEcGQmiU13MMB4H/+jVpjzoruo8RX8EPf5cFTyqPU8:IsN880NRvyMuf+D8h8RX/KFfU8
TLSH
T1ED321A326878AC774DE2A681F44B31539FE4512B9B896F94D6FC6B1C04DF6AC230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e54f5c5af6da09739978ad30441c18b957612c0c6a9361c8a6d8ed6295d7d01f
MD5 11c1f50f47d22e8d7082af2b696982e5
SHA1 d43ce005c841672499ba3c1339880f6111faf289
SHA512 858eaf13cc9bc074f5d5ca1a8bba8c4247a084e7371c3128b080bf1a34400114aca0a95affa035482891f46a320720ea6049128ec5d4b30c041fceb719af6db9
SSDEEP 384:qZcIhsN8A0NRvyMuf+D8h8RX/KFfnTKwBODNZOCiW+:IhbSln8/8fnewBKZOPW+
TLSH
T1A6928E316C7C7C775DD6B645F84B31038EF89127EAC56B98D6FDAB1C00996A8130BD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 952cbb3e7c65d787ae1b4163be457e2101498ce64240552c90e812dac4308db6
MD5 c13a137b95948937a93556a9c3da29b6
SHA1 10272d893105f64022744c4151a3c8fcfbdc6532
SHA512 6f8ddd3160f320a1678ed6c5b83a3c3d87aae2f59648ff1b696ffae74793831cc4ec1c50be2c2ca0a8d5315caeff6bb7c61eeb84388a778d7d7ccd72309179a0
SSDEEP 384:fZcI7zsN8A0NRvyMuf+D8h8RX/WFfnTKwBODNZOCiW+:3vbSln8/IfnewBKZOPW+
TLSH
T1AD928E326C7C7C775DD6A645F94B31038EF85127E6C46F98D6FDAB1C009A698130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8fae275adb3fdbb21d3dab8be630d9e40db6984ea4822cc78e4d40358ad47cc9
MD5 8f1ad13faa0d9a25213b0cfc93ef5c96
SHA1 ee949aa4bd01d45ffa47afae8dcf2c73df4a055b
SHA512 58827a5ac250c35d2038ecb6a85ed47a402ab6fa3dffe6c1ed244d4f357878542ca5d23dc2aa9750fc68c744ed008658006451d9c402de4cd67a9f4b2a553f82
SSDEEP 192:EONnF6hZ0QmiUyzHpc/+jVpjzoruo8a5wOZDGU6:EONF6owpu+D8h8h2SU6
TLSH
T10502C8356C687C7B8EE2AE45F48736139FE8112BEE956F84D6F85B1C00D769C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 23b8b5edd70f4a149d952fa7b8de3c8bbdc1cbff8d0a9a91066831d07885e8ad
MD5 40824d37627761c1526dd1fcecc18ce0
SHA1 180d5ba4dbc140dd2d183453ddcc21e7e6b3d80b
SHA512 e9145b9f833dfe67e8558bc50a12f7aa98aeed612aa8b4fe53017ca5549a011e3c47195f5eef62568a34629dc1d77af94c2e7c2bdc225de445addf96fb94f8e3
SSDEEP 192:uaLsN8JQhNQZEcGQmiU13MMB4H/+jVpjzoruo8RX8EPf5cFTyqPU8:FsN8J0NRvyMuf+D8h8RX/KFfU8
TLSH
T10A321A326878AC774DE2A681F44B31539FE4512BDB896F94D6FC6B1C04DF6AC230B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 530bd251f0290a535739a8843ebcea6c94b7335b5d02291c26ae10f5789e48b8
MD5 70181c16be446717ebc78e941a42d820
SHA1 eda2ad1e33521116862bbf7c64647f655ba7aa66
SHA512 108bb2e46a79506403852538c8dd16d08eb637c1aa8d732f2fb419e89f3c3c809b2ae44116ac5f8df9614e242fcf6c11f844b8fa5543c89fbc71a6d21b7fe490
SSDEEP 192:GONF6hZ6QmiUyQH3c/+jVpjzoruo8RX8EPu5cOqyqPU6:GONF6KR3u+D8h8RX/59fU6
TLSH
T14A120C326868BC775DD26985F48B31135EE5512BDE85BF94D6FC2B1C00DF6AC2307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb6ef299-a13b-4727-9778-985d82221aea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eb6ef299-a13b-4727-9778-985d82221aea.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 09b5d04308263fa26292665a7dba7fdebd4145ad13cb852b7efb143c56579b28
MD5 2525db075926791b755476df5f107b0d
SHA1 629c0de796bf5c6f0b53e9d1043ab4087a2985f7
SHA512 928032bbfe48a21f3162bcf33653f5544b65502200f2e32edec3b9f9e5334689d9413ef75e3988a50aa57cd08a328b6c2aa5af92b182e59ee14c28c6473f969b
TLSH
T16B41EA98AAF91148B3776F5AAFF6986D487BB8772F0AD45D01110D4E4923A01CC72B37
MD5 SHA1 SHA512 TLSH

Submit Download