1f1644eff7a8a48c5e546d213a8c73e4b0025c25eac337721e198a094cfca9ef

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/08/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 126KB
Sample260820-aj7bdaae48
SHA256 1f1644eff7a8a48c5e546d213a8c73e4b0025c25eac337721e198a094cfca9ef
MD5 5931f51371673d0a10c4a8d8c12c36c4
SHA1 d4d3073cb157c50c2f88a62d50a403098b323f44
SHA512 3a61f0f1daeec4f1cc7f230c72742220a14b808cdf234b474e13f6e59af50d8469f2c3b3cb5c0d058482ac8e014c3af9ac51fcc4e0a009e5a8213e29d69a8de3
SSDEEP 1536:kPZgqiVFSsmWVVFSsmycr3uqyqYKLOandXsHPY/hJTGLzdpGdiX3nVYwJEVt9DD:kPZcFSsmWXFSsmmdtYwJEVL
TLSH
T182C30130929D282B0337A1D5F910EB2AF0C3D46DDA676B0279FC06DA5FC7D16EE1518A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2540	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316586405185752"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{0D456695-8AA6-415B-9CEE-43B17BC36CF1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe
2736	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 1780	2736	msedge.exe	88
PID 2736 wrote to memory of 2540	2736	msedge.exe	90
PID 2736 wrote to memory of 2764	2736	msedge.exe	91
PID 2736 wrote to memory of 2404	2736	msedge.exe	92
PID 2736 wrote to memory of 2764	2736	msedge.exe	91
PID 2736 wrote to memory of 2764	2736	msedge.exe	91
PID 2736 wrote to memory of 2404	2736	msedge.exe	92
PID 2736 wrote to memory of 3784	2736	msedge.exe	93
PID 2736 wrote to memory of 3784	2736	msedge.exe	93
PID 2736 wrote to memory of 3784	2736	msedge.exe	93
PID 2736 wrote to memory of 3996	2736	msedge.exe	94
PID 2736 wrote to memory of 3996	2736	msedge.exe	94
PID 2736 wrote to memory of 3996	2736	msedge.exe	94
PID 2736 wrote to memory of 1468	2736	msedge.exe	95
PID 2736 wrote to memory of 1468	2736	msedge.exe	95
PID 2736 wrote to memory of 1468	2736	msedge.exe	95
PID 2736 wrote to memory of 2788	2736	msedge.exe	96
PID 2736 wrote to memory of 2788	2736	msedge.exe	96
PID 2736 wrote to memory of 2788	2736	msedge.exe	96
PID 2736 wrote to memory of 4616	2736	msedge.exe	99
PID 2736 wrote to memory of 3888	2736	msedge.exe	100
PID 2736 wrote to memory of 4616	2736	msedge.exe	99
PID 2736 wrote to memory of 3888	2736	msedge.exe	100
PID 2736 wrote to memory of 1980	2736	msedge.exe	102
PID 2736 wrote to memory of 2980	2736	msedge.exe	107
PID 2736 wrote to memory of 3488	2736	msedge.exe	108
PID 2736 wrote to memory of 2568	2736	msedge.exe	109
PID 2736 wrote to memory of 896	2736	msedge.exe	116
PID 2736 wrote to memory of 896	2736	msedge.exe	116
PID 2736 wrote to memory of 2124	2736	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x248,0x7ffbd12cc188,0x7ffbd12cc194,0x7ffbd12cc1a0
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,7859732455019760656,14193852007733743851,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,7675077146995733697,8841759197451338212,262144 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,18244359320253835182,11798172990009123652,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,12340887079875064226,5038455356364012003,2097152 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,17055795281678823110,2675052092739361489,2097152 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,2254232913224934106,6585237358696456546,2097152 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,403784380023655528,14349145077726031712,2097152 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:2
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4354831779576702991,14487619904955372459,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,5366177963147221240,7790847330165258601,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,6436361323517444547,6122589829783200549,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,6436361323517444547,6122589829783200549,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,13015506671461297908,9362543417731507114,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,15471666554011939575,2032545018285068737,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,10551027510716471146,16615945514400096024,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,18332572988277767350,6623020380909392547,524288 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5364,i,6288409234570286785,9433138165095751583,262144 --field-trial-handle=2544,i,2405057133307696238,961412901234946571,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2124

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6419a915c6f94199df67c6cf1d67bc666c22ef160c8377d6792913a6518679
MD5 a8d0099e5966b86c13c6997282a63770
SHA1 df541b93a0caebe364906ec90c768bb625495f4c
SHA512 a2093c42c3f547b910f560ee7a58cb187cef96045e8e335276c7bde87fdc5e9894b670421e94170d0878e86a2bea8125d914e11181882004f966732f9670a693
TLSH
T135D09B303B597442D7074031E8064790169E84B5249BC7076554410D7D5B4C5E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e9ae5bd14afeac811af46b33b5e3b2e637c07cb716b35f12eb40f51a5e652896
MD5 d15fc0176662ce4451da47f55ef3601f
SHA1 3bd478ab8b1a2c1939dced94cc3e2b917e1f02eb
SHA512 a08af3f98be361a2a8e04f4b710f599ad5809ae481fe3bd427a3f7b4d48c1ea52ebda0a11cbbcb6fa20889f52cccb6591a35e0368156571eb4bf60ba89d8fbdf
TLSH
T19371A6F54279489DFB69DCB070F281023530B9F9FCAF2E9681D0EA387A92354990B17C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58bfa2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bfa2.TMP
Size 3KB
SHA256 ddeddf1a79ae3735709a91ece2f6ee227f6fe5bc08b9a697871725c48023533d
MD5 887c589df3e83dac01d4ef970ce891b3
SHA1 571129b545ac1a1600736150bf113d0dd2ae6a42
SHA512 e3847d65a8e430414496fcd2fb189248d04d223cd25d9f8dda6b137f7d44e93d334be76ae855958a9542cf04f091eb75192de37e45d90e94f21482d7005e6082
TLSH
T13C71A5F54279489DFB69DCB070F181023530B9F9FCAF2E9680D0AA387A92354990B13C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 496bc211c65d52eb07747b1caef3909fd58ff35548050cc2f97f1f701a7fb290
MD5 29bc3b1204b916e01b8d35decdc29cb6
SHA1 6eddde4d98425fd9ed953e917ae7a502ecbb6239
SHA512 6f5675d92159f29c736f0404ed655b581357fe27ec76a109ac64f137208fdaef27a15a40909c6ef346a30b5cdc058cee3a308b3acf5f528901b0eab66d972a67
TLSH
T1B7217CB783E4866E891556F0AA14AE1BDE1D0517821C7C1589E4BF2793F3071E00269B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 26977f32ebf9f64866853be342822bacbe38aa744c2f657d6fa358044de099c2
MD5 e4402dde281a020941e6df9fb0588237
SHA1 44b49da53771b593e7446ab07af312b3781b236d
SHA512 311bf2b84209f9f7eb25abf066e57f3c92d9e9114746aa841538bdb2e5053d476e4242e1f3aa531eac22432439a088fb955d6d9c693286241364d1a275fc5c05
SSDEEP 192:sxZvRgpyM/jK1Ml8Mky/f+s4leXIdpdxHW6+WNGYzQZxdIgrJ:sxZv0My/f+s4ltDHbGp9
TLSH
T15A42F8166A34A977CCDBD209BA45BB53D6F9057392900E44ADFCDA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 fd94bfb2fb0ca3e14de8298be53734f888bf23b90ee72f0c5d97b4602a146a7d
MD5 9dafad2d47e913d91ac14a9510b43e18
SHA1 c291a1097da7c33204f14998fbb2f08e9ed12cc8
SHA512 eb9827634188d623d5f145887cbfe1c0e962080ee44e2854044aa15a432cc5be61d2a3a6395b4f1b8987c7d508c9038af42c114e26414b6cba99805e9ac400f5
SSDEEP 192:sxZvRgpyM/jK1Ml8UQ3ky/f+sdoReXIdpHxHW6+WNGYzOcfdIg5dJ:sxZv0q0y/f+sdOtRHbGk5
TLSH
T1CB52E7166A386D77CCDBE20ABA45BB53D6F5057291900E44A9FCDA1C00E7BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4454576ecca20a14926e39fd27e9620f932ce645986c200d68329b66f7563638
MD5 6c8f344c21cf3ffd7599ec083d5da8aa
SHA1 3b13a44af19b38fce533fe086378813117cf9b95
SHA512 75a029124caf99fd71ae0727a6c6d1371984a4603852a855e8e85147db17dbf709d7f4e715ea46957fff5e5c5a6edcb856b6cdcfaabe0c0a8c5fc2a5bc031fcd
SSDEEP 768:REW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjKroIviwYH:REW7kf0Wvqidau1jaa5LA3jhpH
TLSH
T13BD20B3B680CCB7E4F841E5CEC266F976ED801CB66988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f7d7b7451d8a66bc956cafa8b633412692c86a5eb490366537ed50cdda5088a4
MD5 c662bf201cb6c339e1e2d355091e05f2
SHA1 3b0e7118972071a2443103fb2a71f3ebfba926a7
SHA512 b130eefdbdc6a5fbfd299935a2f4ce0f775d60151652f86faadaf1c4abf1a6b678690f5e7a75069a081d40014fb2c0625e278104a32537ca5ba5c56bddb1abe6
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTenI1K0k4Py1zIhKM4MYM:KIbCKcenWK0kymzuKM4zM
TLSH
T18B91410231BE0681387E284A926696776F467193381869FF3BB410621D7AF554DFFCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe595b65.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe595b65.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 acc2d25b8e9556b1bca99f0afc1d5aa4b4cf59ebdc810556a031dc8519476c67
MD5 098eb680ee97faa068ba8075a4451a6f
SHA1 45aabbc9382159ff376457d9b7d698b8ef5b8eda
SHA512 dd7c71ec0dc64841497e50e65863b61fc16964cc3da5863392f24de9ce8d8f7eb9c2fd5d07ff4566e61ce8ba3da6e0aea8a84633a2aff8f62478aded6e665e6b
SSDEEP 384:xZcIhsNhQaEvsGkI7RbeYWtdKR+29GjivI5oV:ZhftRdzWwlkjiQ5G
TLSH
T1AC828E759C756C3B19A6E281F5463A075FF84037A7C86B80E9ECBB2C01EE7991307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2ef6cffb405bf589733445dd0fc71bc78471bb6f292f34c20ca2cf27b21fe30a
MD5 bee485c31486f4405b701d8d89dc8a72
SHA1 94d2aa7181b66496f0b16fd3c70718d06ec109e7
SHA512 7c11c0bd97ef88e72ea526b985662fd7783bd758793a80d314d35c8e64b50ec23ed5ef29e1d663d4cdf0bba81f5f871734307c0e7aa18f366dca96a534a4d1ab
SSDEEP 384:EiFiZcIusNz8TUNTUlIlHaEvsGkI7RbeYWtdKR+29ZjivI5oV:fFQu6wghtRdzWwlzjiQ5G
TLSH
T1E8A27E724C94DC3F6EB6E785F94A36079FF44077D6C9AA90E6DCAB1C01AA2D81307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a4d1f94cb917e20e15cf463ae94f13739f35b93a8c1664f4087eaec1e3c14ccf
MD5 3b17f18286394701043534fee9293d93
SHA1 e5e651a8f61ae4fd05a69185346b70394d3296d9
SHA512 ac55f35c06a5f13852621cb84803581a9bb02555b71dea012fed1f2c3fa5749d04ad19e8db93c0b4f47357a0571229b1f0c0089c09daa6958267b66a4c4563fc
SSDEEP 192:MONG64BAQmiUy+1AW5GBPKp/+FdG7BvaDnrCdU6:MONG6eABWWOdKCedU6
TLSH
T1FE02E934AC787C7B9EA2AE45F8863B175FD8113BE5952B44EAE85B1C01D764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 99649a5a663f0a92707e9d8dd60f31947b6d43611d57562befc40d56de155818
MD5 b1be624ed8bbb6930ce599992f96180f
SHA1 f52d05a18660d179b75fb61d06d36b5279a42bc2
SHA512 99bcbf7e892e4cf483d2ab2b19264e7233254ab1f545a83f9f16c924bb75a23d43bc35a4b61ad1a654b8e5f417c073280784cb16d51b80c71b7a232f1ec03e2f
SSDEEP 384:XZcIhsNhHaEvsGkI7RbeYWtdKR+29GjivI5oV:fhUtRdzWwlkjiQ5G
TLSH
T161828D759C756C3B19A6F285F5463A075FF84037A7C86B80A9ECBB2C01EE7991307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6b30207df47d9d16c02059c981197666e842a3d78d034a28a28219a3c796c767
MD5 4f69baa9d27fd23552125ac29c58fdf7
SHA1 fd3b8691bc0f7a9a5b7762a1d4e2ab2ae0a59c76
SHA512 d99d31ba130044770df2d62e3f488be10d979e6cdaa928e81f1391bebf0a4988781e455b6a9239399f1417523243df29f5b27be62100f6aa4fc05b2a60134ecb
SSDEEP 192:wON864B7QmiUy9AC5GBPKp/+FdG7BGc+29pWwnFqCU6:wON86etHCOdKR+29NjU6
TLSH
T16212FA35AC64AC3B5E92B545F48736135FE8422BEAC96B84E6EC6B1C01EF75C2307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d7b24ee-9759-45ec-8ffe-5a9894934f63.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d7b24ee-9759-45ec-8ffe-5a9894934f63.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 dd155ed97b0c99c34e03129744fc8e2d40f3f4ce050a0cebf830ec75fe5eefa2
MD5 d7db00f21329e2a135bf55200f7a1aa2
SHA1 fca5fd4318309d9ad2f0195070bbefe2abb64ed2
SHA512 8c8f36df7d624c763e00350e7fa0577a302de0a4838f8f59d5616af49c3b98ab7fe8fe1f68cbad81c80240c8edfc227f3191cdac6df7f069a8a8293a17dfe270
TLSH
T1A6411A58B6FA110CF3B76F4A9FF6A4AD447AB9372E0AD59D00110E4F4663B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download