860908d39ccee3bcba61f66e9ac45fc353d59a7505f50705f35852bc1ee6d17e

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/08/2026, 06:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 567B
Sample260819-gxd1bayamd
SHA256 860908d39ccee3bcba61f66e9ac45fc353d59a7505f50705f35852bc1ee6d17e
MD5 5d1127a12da0c303f6a7800622559b4c
SHA1 442fc9b7e8dfc5b2f551a73e6b8118bbed22e5d5
SHA512 9455da7dfb9e648462b7b1e523b7f81ddf78dd0c777e30b54356e86319a2ee20cfab4f89f10a465645cd34326b629c12fce8dcb0a285811936cb18822eb9b151
TLSH
T139F052DA89A300418106D1612EE572085FA3A54F23838CA03EED32118F803239A833DD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3848	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134315934514311662"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{701BD076-142B-4E14-AA7D-627FD3BE5D66}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
816	msedge.exe
816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4924 wrote to memory of 908	4924	msedge.exe	85
PID 4924 wrote to memory of 3848	4924	msedge.exe	86
PID 4924 wrote to memory of 4568	4924	msedge.exe	87
PID 4924 wrote to memory of 4568	4924	msedge.exe	87
PID 4924 wrote to memory of 4568	4924	msedge.exe	87
PID 4924 wrote to memory of 3220	4924	msedge.exe	88
PID 4924 wrote to memory of 3220	4924	msedge.exe	88
PID 4924 wrote to memory of 4036	4924	msedge.exe	89
PID 4924 wrote to memory of 4036	4924	msedge.exe	89
PID 4924 wrote to memory of 4036	4924	msedge.exe	89
PID 4924 wrote to memory of 3404	4924	msedge.exe	90
PID 4924 wrote to memory of 3404	4924	msedge.exe	90
PID 4924 wrote to memory of 3404	4924	msedge.exe	90
PID 4924 wrote to memory of 4720	4924	msedge.exe	91
PID 4924 wrote to memory of 4720	4924	msedge.exe	91
PID 4924 wrote to memory of 4720	4924	msedge.exe	91
PID 4924 wrote to memory of 4128	4924	msedge.exe	92
PID 4924 wrote to memory of 4128	4924	msedge.exe	92
PID 4924 wrote to memory of 4128	4924	msedge.exe	92
PID 4924 wrote to memory of 1612	4924	msedge.exe	94
PID 4924 wrote to memory of 1612	4924	msedge.exe	94
PID 4924 wrote to memory of 1612	4924	msedge.exe	94
PID 4924 wrote to memory of 2168	4924	msedge.exe	98
PID 4924 wrote to memory of 4548	4924	msedge.exe	99
PID 4924 wrote to memory of 2168	4924	msedge.exe	98
PID 4924 wrote to memory of 4548	4924	msedge.exe	99
PID 4924 wrote to memory of 4968	4924	msedge.exe	101
PID 4924 wrote to memory of 812	4924	msedge.exe	110
PID 4924 wrote to memory of 436	4924	msedge.exe	111
PID 4924 wrote to memory of 1856	4924	msedge.exe	112
PID 4924 wrote to memory of 4708	4924	msedge.exe	114
PID 4924 wrote to memory of 4708	4924	msedge.exe	114
PID 4924 wrote to memory of 816	4924	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffc12efc188,0x7ffc12efc194,0x7ffc12efc1a0
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,1541692386808595727,15936637589910794594,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,2262941514409933996,7932523776113922890,262144 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,8574241865903487916,15818745872197575871,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,5026590842660594551,9969856788703994123,2097152 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,7021303807765619729,798647746408388711,2097152 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,12913039217923544799,9187149736036711219,2097152 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,15385506686009573148,8734842805889122741,2097152 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3508,i,1486953089280284245,10432720259850892962,2097152 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,3500048062200584475,10678946429840798781,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,16967280303319199556,18039614904804658052,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5933390555543932130,2391280222949838611,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5933390555543932130,2391280222949838611,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,5104971447031952497,7755791924923329700,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,9967603211982587579,10272231261070323172,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,15010758653997528171,18254264316634857205,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,15885582709751528246,5801002795618293046,524288 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6296,i,14671014735964153316,3438674766718918509,262144 --field-trial-handle=2480,i,13422164230256764994,292507692288483337,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d3d38cc8b0e28c3ddbde0f4a8f88229951233b14e6108bca1a2a5126b07d928b
MD5 a65edaec6e3805c667a764075626db28
SHA1 6d7da3e60368f0c01417985706c19ded70cec322
SHA512 65b6971e32dfbe35a3fb039948b040edec3c78a60c2cd82b432086bd24be344aa72839e4ee2f72abd606c9810ad8c8bbe7425b6242959196871c815932cea106
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7/:fwUQC5VwBIiElEd2K57P7/
TLSH
T1ABB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01a5b6ceecd19c701a97ad536d6d16e08f969e2078e65003726d7ee410699203
MD5 5c8b31e30b6ab76a8412ac7e4a0a1daf
SHA1 331c4d6d2184f2276ddd3825690bd91abe80034c
SHA512 f6e4146a928fec8f8e86cb85e203549328dea3c685b61432a0f902dd3904d180ceabc84ac152d705aa2ba85e4d561a7a1b962a5d8d9baaf6521e455fa62ddeef
TLSH
T12E718F2842A23461EBF41AF0E4C31206B47E47DF0B0F0D4518AC9FBDAE89764B17178B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58da0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58da0f.TMP
Size 3KB
SHA256 ef88f4342ff1f00712f5ce3e0bd974de545f1d96dc4a499dbf588c5dde68c42c
MD5 0be0afadf38ace027996ec6eb3b1a94d
SHA1 2ac6896be1161419875f3ea6cfc25fb12b76afb4
SHA512 c6f9a439f506002619cc5b6b5f0833a5085b85f9153b7b9609ecc864d1cc5c07caf8c3f25b6152fb81013de3017ca13b39ab85e713dd6ad0c3d771f91d8d0fc8
TLSH
T1BF71812842A23461EBF41AF0E4C31205B47E47DF0B0F0D45189C9FBDAE89364B17178B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 72c8c26733f466d166113f0fa267b9cc5ea5ffcc773fa9343f043d69232c186d
MD5 c4cdbda35c8d9594b5adf347d7e61aeb
SHA1 b411814f5d9029e6138fb06f42dccbee6e154203
SHA512 2bc7c2a330ccddd2d785437ea7a1ed5a05a8c62c7308a7a56773034798e52ef085992fb20087d1473a164e4bad16bf8034fe92f2e8ae67566108c20549487325
TLSH
T173118CF7C3E495AE8A0156F05A24BE1BCE2D0506432C7C5589E4EF2B93F3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 325c52904edca0bc3dba30f4fd09d3f28a63fa4de6079c840d229697acf00cef
MD5 69da32fc5627f25e10c32a55a9064688
SHA1 4289f0d79e91109a22d317a3e676dfe026e4ae00
SHA512 588c79ca17bc26a53f8b7159f2456390aa705ba7f4796c3a27f1b192ce59c383b26c79e5f63ad2a553e49a84b0d5a1fb864f314973215b8cc8fed17e4cef2fba
SSDEEP 192:sxZoROyM/jK1Ml8UQ/k1/fMsF3ZaCCIdpHxHW6+WNGY4qpnsIg5DJ:sxZo4qs1/fMsZZjrRHbG5r
TLSH
T19952F705AA3859B7CCDBE30DFA457F53D6F4457292901E44A9FCCA1C00E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 ed50ea19a31d8b32fac358e5124fe257dfa351c181581adb29c10e8a01a3601d
MD5 09150b9cbd955fae877067cbb7af55ea
SHA1 8b41ad89b6b0467068da5e5542219050b6c88849
SHA512 c132d565a661cc361cff6a001053eabcce39dadfe540673c23deb957a7aaaac0dd2fb3669d87f3a4ecd22af58a51ef9df6924ab55d1379ed92c602a21c3e0a4b
SSDEEP 192:sxZoROyM/jK1Ml8Mk1/fMsF3ZRCCIdpdxHW6+WNGY4wsgsIg5ZJ:sxZo4M1/fMsZZArvHbGFF
TLSH
T13252F705AA3469B7CCDBD309FA457F53D6F9457292901E44ADFCCA1C04E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 9fe9639a401bea0a74452a7ca3d9ee616f705301570b939493079df7e1a4d4f7
MD5 735e9903432d19f454734eed9f3e2392
SHA1 5a7e4b919158fd659b81abe7e670ae1bb0eb017a
SHA512 2c0ae588abad5bf5fa52622af70a1e79723e483f44c57b0032555363cc7f4000542a034156f8a0663436e18f814906b9e3efef83cbd919cd6fcca26c60405cc3
SSDEEP 192:sxZoROyM/jK1Ml8Mk1/fMsz3ZRCCIdpdxHW6+WNGY4wsgsIgrJ:sxZoYM1/fMszZArvHbGF9
TLSH
T16E42F805AA346977CCDBD309FA457F53D6F94532A2901E44ADFCCA1C04E6AEC221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8538be7a2d7774c7210eb9d8550b6e27e2fdfcc02db7eadf6ec62590330d1df0
MD5 ea2369fc2377dc73e94a8570dee11f6f
SHA1 dfe3e899a1d37c089bc9a677242b59b6dd03ba17
SHA512 fbc2c3ba5c6b09580686b093dab53b84581b7c7b5abd1779684c110375a660f9ae884f3aafdb14057b3e5c46c1748751653bb24ba69cbb0dc2bd23cac7edf536
SSDEEP 24:Kd8fzIJamd+e64Wy+JIj06KiJhaK61EEqSmYM58UzyXYdfYrCaHdvLj47/+SIjXs:KgpIVKKwovyhiIvKLC87yNRIRKCsEn
TLSH
T15F91041230BF02022D7D7909A2B487574B81B1A3712CE52B7FA954B14E6AE344EFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d220c1d2-276a-4a8c-9937-e9489f497bc6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d220c1d2-276a-4a8c-9937-e9489f497bc6.tmp
Size 30KB
SHA256 bbefaf3d6e28b3c0369dd28c946ffec7d497294204afcf47e52ec5d6c21e6e84
MD5 deee51925f231b550d12faa0734942d7
SHA1 5a92e660cd432d69245bf513340156bc974c4fae
SHA512 6311fbbc03b25af23a080eb64908dffb53a45f6afea4c27c476e70c824c5d4ff33bfade5d0041616d13d8f92901941f6372b71b52c9b15c181165c84b23e6073
SSDEEP 768:AS8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opd/roqknUnM:AS8iJPNWvx76ru1jahALocdsFUM
TLSH
T1D0D20B3B680CCB7E4F845E9CEC266F966ED801CB5B948D5447FA880C03C76EE51265DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597555.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597555.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 3afe08e5c9e3407a3209cdb1e3606e1c1c5e9b2c37dbbbb1bb815d1290538215
MD5 1fdedf33a3ad5902fab2512a426a5240
SHA1 b941fd40ec0b595b1b6fd839a361c1239629c89c
SHA512 3e40ff11ca3b3ab518c959f51ff6e226468e02a91886e1034c7e8425a036f8b34086918e9891c1bc9234d96a25ad23513f2e4135859d22879029051a262559e8
SSDEEP 384:oiFiZcIysNG8TUNTUlIlHEyRGGuk/rqbrivFi:zFQyjwgxdCbri8
TLSH
T19EA28E725CA8987BADE79B41F54A36179FB49067CBC8BF9496DC9A2C01DB1CC0307D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 34f1df4d6ebf6e1a1a74327a2bf19eb284d0d7c43a26f675c9b8b2b032721447
MD5 32214614ea96185d454f8bf1664abecc
SHA1 ec3a8138f90781d52e970c9faf8e13c6271cb1cd
SHA512 17a4eb689ad0c3751ef6dec8963c33ddc62538d3b8b91e9b4c665c0e6bea9b568deb6ae271ee785003b953c1ede6756b826d839c5a330b3b9ca4532630182711
SSDEEP 192:u0LsNGqQHLbyo1mi/QmiU1+jB4k036r1EYALIBq6t4/tyA9n0/:VsNGqEyRGGuk/rq4rivF4
TLSH
T124626B746878AC774DE3A651F10B3627AF74902BDBC82F958ADC9B2C01DE2C81307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 df0317827e8a806f58e7a417a106a1a36533ec4615ba41259d838b55bd1b20a4
MD5 d52afbd887d2c43e3825731e77067201
SHA1 dfaa9973b557090e963a834ac06dcfc72ed1b2ec
SHA512 ae218477ed2d791fe441e2d450c6c7337c6258b97ff37e1e8f5b0b492be301e137ef3b266daa551f52f5a8f4c625006384d99c74878cbe4b868f808ddbd99fd6
SSDEEP 96:ZqONk3QsjpfmUTmDK5ih/cIPURHl8h4otop5F5DjBhPwivh50xy0SFYKQAxsYssp:gONz6kDfQmiUyX9Z9036TQiB5U6
TLSH
T14E02F935A8786CBB8EE36E46F54B77275FA5212BEA842F85D9E81B1C04D724C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 1c89766c931263a4f70c586d727abfd89db28ac61af0f11e09a518317880d8fd
MD5 4ed9178cc6f60bc9ed2f5adbb7df7802
SHA1 c32d86ee174740109d811b174515b87b70c14f06
SHA512 287b3a808c319050f6883120205e2ded52149679f8316971b5a4c397cb0c8c3e21dd1219f2ca0371c36c9fdaee96be335155b110fb7a72ce63d27e590949309c
SSDEEP 192:u0m+xasuheOwQxMGsNGHQHLbyo1mi/QmiU1+jB4k036r1EYALIBq6t4/tyA9n0wC:aZcIhsNGHEyRGGuk/rq4rivFi
TLSH
T1BF829DB06C786C765DE3E641F54B3A179FB8D027E7C86F8489ECAB2C01DA5981307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2c41060cebebbd8233e025e34d844ad0dbf26580e75c960d9b8ed19ed41dad63
MD5 1a9c457a88c782c0fb1ec11a3af6a273
SHA1 bfdd3d9bf8233719e4360112050ff36e182c274a
SHA512 4230c4a311893d802aa405cb057503e96cfd66d777b21659aaee577deee3d3df267a27ebeef3928d8538d57068c6deadad4f3cbb306a0d16b7c53e689c4aa287
SSDEEP 96:aqONkzQsjpfmUTwK5ih/cIPURHl8h4otop5FjDjB4Pwivh50xy0SFYKQAxsYssXY:xON/6kVQmiUyZ9K9036r1EYhcRBq6U6
TLSH
T1D6121A3168B87CBB5DD36945F48B36135FA49127DFC96F91D5DC2A2C05DB288130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 28879f5ced6d7b9611821085ce690054a1f3d9e3cdd3aa72712f3ab81ebb0755
MD5 41012a1d14756013918d4abe68d931fc
SHA1 a150b4b2ae4a0e5504680b218214640b34afe024
SHA512 cc9f13d743228536e86fa208f4a5b7c0a07e8953ef0d31ca73c14f1e19a7032fa7b27c205378bc68778fc81cb2f7112529ca5fb1530cd32aab3dda5f34f5e927
SSDEEP 192:u+LsNGTQHLbyo1mi/QmiU1+jB4k036r1EYALIBq6U8:zsNGTEyRGGuk/rq4rU8
TLSH
T1BA324B716878AC7B4DE3A645F04B3A139FB49127DBC82F95CAEC5B1C05DB29C130A927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a6e68e0ade7bb069d6643bbf5c7bd179c90902f70f1534df9fe357a132780c5b
MD5 2573963b00c9b9d77e178501cee7b909
SHA1 d96f8ece8332409e8e25f3b2c987ee3e337907dc
SHA512 84246b28e5158cee41e6dd286ab76dfed1b6dc3867b3603c179141825a92e282d9b4fc52d5a9a131a9c33151b9162e4508cfd62c65f0718d6c247e099e601358
TLSH
T124412D58A6E91148B3B77E59ABF6B96D487F79372E06955E00110D4F0A73B00C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download